last executing test programs:

3m12.393509391s ago: executing program 1 (id=781):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x2, 0xc, 0x9, 0x0, 0x6, 0x2, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x7}, 0x2000, 0xff, 0x9, 0x0, 0x5, 0x145d, 0x1, 0x0, 0x6a, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0901020028000b05d25a806f8c6394f90324fc600d00030009000100ff3582c137153e370248018002", 0x29}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x5, 0x0, 0x3}, {}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0xfffffffffffffea7}], 0x1}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc79, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1d38}, 0x94)
r3 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}, 0x110000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20)
syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0)
close(r3)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0xf3c, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000080)={0x3, 0x0, [0x0, 0x0, 0x0]})

3m11.304137002s ago: executing program 1 (id=783):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0) (async)
socket$kcm(0x18, 0x0, 0x2) (async, rerun: 64)
write$cgroup_devices(r0, 0x0, 0xfffffeff) (rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48)

3m11.084074253s ago: executing program 1 (id=786):
r0 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair(0x23, 0x3, 0x3, &(0x7f00000014c0))

3m10.878445003s ago: executing program 1 (id=788):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000003240)='GPL\x00'}, 0x94) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3}, 0x10) (async)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
openat$cgroup_int(r2, &(0x7f0000000100)='io.latency\x00', 0x2, 0x0) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0xbd}, {0x1d}, {0x3, 0x0, 0xfe}]})

3m10.668069402s ago: executing program 1 (id=789):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
sendmsg$unix(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e687", 0x2}], 0x1, 0x0, 0x0, 0x44190}, 0x2004c001)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}, {0x95, 0x0, 0x0, 0x301}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r7)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)

3m8.910239805s ago: executing program 1 (id=794):
r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xc3, 0x1, 0x0, 0x0, 0x100000081, 0xbaf5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0x12}], 0x1}, 0x20044001) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async)
r2 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

3m8.569783567s ago: executing program 32 (id=794):
r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xc3, 0x1, 0x0, 0x0, 0x100000081, 0xbaf5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xc8, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040)="623bed114d421d8b1c60ea4388a8", 0x12}], 0x1}, 0x20044001) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async)
r2 = socket$kcm(0xa, 0x3, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000002c0)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

2m43.205930118s ago: executing program 3 (id=925):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r0 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001f00)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000003000000000000010000000700000000"], 0x0, 0x27}, 0x28) (async, rerun: 32)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async)
socket$kcm(0xa, 0x3, 0x3a) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x0, 0x0, 0x0, 0x924e, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x1, 0x3, 0x5, 0xee5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) (async)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r5 = socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000000180)=@in6={0xa, 0xce20, 0x0, @mcast2, 0x41}, 0x80, 0x0}, 0x4000000) (async, rerun: 32)
r6 = socket$kcm(0x2b, 0x1, 0x0) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000180)=r4, 0xfffffffffffffcbc)

2m41.639834644s ago: executing program 3 (id=927):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) (async)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x800}, 0x50)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100)

2m41.47193575s ago: executing program 3 (id=930):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
gettid()
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa8c61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0xfffffdfd}, 0x0, 0xffffdfffffffdfff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async)
gettid() (async)
socket$kcm(0x29, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa8c61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0xfffffdfd}, 0x0, 0xffffdfffffffdfff, 0xffffffffffffffff, 0x0) (async)
openat$ppp(0xffffffffffffff9c, 0x0, 0x100, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

2m36.863928449s ago: executing program 3 (id=950):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000073000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) (async)
syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0)

2m35.802176617s ago: executing program 3 (id=958):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10) (async)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x7, <r5=>0x0}, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xb, &(0x7f0000000140)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x30, '\x00', r3, @fallback=0x27, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x10, 0xc61c, 0x7091}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async)
r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000440)=0xffffffffffffffff, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000480)={r7, r6, 0x4, r6}, 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, <r8=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r6}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r6, 0xe0, &(0x7f0000000880)={0x0, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000006c0)=[0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000700)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], <r11=>0x0, 0xab, &(0x7f0000000780)=[{}], 0x8, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xb0, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) (async)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', r3, r4, 0x4, 0x0, 0x5}, 0x50)
r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000580)=@raw=[@generic={0x4, 0x4, 0xe, 0x8966, 0x46e}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f0000000600)='GPL\x00', 0x82, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x3, 0x20000, 0xfffffff9}, 0x10, r11, 0x0, 0x0, &(0x7f0000000a40)=[r12, r0, r1, r0, r1, r0]}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@map=<r14=>r1, 0x24, 0x1, 0xc0000000, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0], <r15=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c80)={@fallback=r4, r13, 0x14, 0x20, r13, @void, @void, @void, @value=r9, r15}, 0x20) (async)
bpf$LINK_DETACH(0x22, &(0x7f0000000cc0)=r7, 0x4) (async)
r16 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x7, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000d40)='GPL\x00', 0x4, 0x55, &(0x7f0000000d80)=""/85, 0x41100, 0x9, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000e00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0xf, 0x2, 0x2}, 0x10, 0x1115, r13, 0x6, 0x0, &(0x7f0000000e80)=[{0x0, 0x1, 0x10, 0x4}, {0x1, 0x1, 0xd, 0x1}, {0x5, 0x1, 0x8, 0x8}, {0x2, 0x2, 0x10, 0x4}, {0x4, 0x5, 0xd}, {0x3, 0x1, 0xb, 0x6}], 0x10, 0x2c}, 0x94) (async)
r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001200)=@bpf_ext={0x1c, 0x13, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @map_idx={0x18, 0xf, 0x5, 0x0, 0xd}, @generic={0x10, 0x0, 0x6, 0x6, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='syzkaller\x00', 0x30a5, 0x99, &(0x7f00000010c0)=""/153, 0x41100, 0x4, '\x00', r3, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1d1df, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001180)=[{0x0, 0x2, 0xf, 0x7}, {0x1, 0x1, 0xb, 0x6}, {0x4, 0x5, 0x4, 0x8}, {0x4, 0x1, 0x5, 0x9}, {0x0, 0x5, 0x4, 0x2}, {0x4, 0x3, 0xd}]}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000012c0)={@ifindex=r10, r16, 0x1d, 0x2000, r17, @value=r7, @void, @void, @void, r15}, 0x20) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001300)={0xffffffffffffffff, <r18=>0xffffffffffffffff})
sendmsg(r18, &(0x7f0000002500)={&(0x7f0000001340)=@nfc={0x27, 0x0, 0x0, 0x6}, 0x80, &(0x7f00000024c0)=[{&(0x7f00000013c0)="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", 0x1000}, {&(0x7f00000023c0)="d658dd3dc655a2301444b341ecb5f6baea4a2199dd3dc55423a32b0ed986264350e07d75a127f8f8c56d5211037878f1feff9518c84500e654ddfb604f0cbde6a74ca31d41903e134efd933d9f09bd77121f72bf310c93508cfc614a4f1a2cad9a46cdbb5afe2c4a278b5bc6d0787ad0c2625b560247835e794cd3b7c90819a416823e847435d32e3033bdbaf14707fa4e6e3a197b4368b4114a5271c7c8e9f39fa7770f23de11006b5eb9c29e026ad9fa4382b6b92ca27724c89c034a761691689539ca928d162d7c4a849f64403c4374cde582", 0xd4}], 0x2}, 0x0) (async)
r19 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$sock(r19, &(0x7f0000002780)={&(0x7f0000002540)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)="f9d393f0b74c5bde1d919dd04b837fc294d0463c020a3086323ba7886a6e8e60bd22376adde50eed7d3111ac40fac60ce7f8cf68c9537c36826b44ac4d06d477dde54d406421db9cf59c3ae19a96892a2653ec273f826df2f53314484a51f603af8d4e39111133beef2a775cc46a513b58280067aa", 0x75}, {&(0x7f0000002640)="74f586f3aa721b89284b2a", 0xb}], 0x2, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xb}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x8000) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000027c0)={r1, <r20=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002800)={r20, <r21=>0xffffffffffffffff}, 0x4) (async)
r22 = socket$kcm(0x29, 0x7, 0x0)
recvmsg(r22, &(0x7f0000002bc0)={&(0x7f0000002840)=@isdn, 0x80, &(0x7f0000002b40)=[{&(0x7f00000028c0)=""/187, 0xbb}, {&(0x7f0000002980)=""/188, 0xbc}, {&(0x7f0000002a40)=""/163, 0xa3}, {&(0x7f0000002b00)=""/31, 0x1f}], 0x4, &(0x7f0000002b80)=""/33, 0x21}, 0x2) (async)
r23 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002d40)={r2, 0x6, 0x8}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e40)={0x6, 0x3, &(0x7f0000002c00)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r14}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000002c40)='GPL\x00', 0x3, 0x16, &(0x7f0000002c80)=""/22, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000002cc0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002d00)={0x5, 0x7, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000002d80)=[r14, r0, r14, r8, r14, r23, r0, r0], &(0x7f0000002dc0)=[{0x3, 0x2, 0x5, 0xb}, {0x2, 0x1, 0x7, 0x7}, {0x0, 0x2, 0x8, 0x2}, {0x4, 0x2, 0x5, 0xa}, {0x4, 0x1, 0x10, 0x8}, {0x4, 0x2, 0xe, 0x5}, {0x5, 0x4, 0x1, 0xc}, {0x2, 0x1, 0xc, 0x1}], 0x10, 0x6}, 0x94) (async)
r24 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003240)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xf, '\x00', r10, r4, 0x2, 0x4, 0x5}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003400)=@bpf_ext={0x1c, 0x30, &(0x7f0000002f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x603, 0x0, 0x0, 0x0, 0xf}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r23}}, @map_fd={0x18, 0x0, 0x1, 0x0, r20}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}]}, &(0x7f0000003080)='syzkaller\x00', 0x2, 0xf3, &(0x7f00000030c0)=""/243, 0x41100, 0x90, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000031c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000003200)={0x4, 0x7, 0x0, 0x7}, 0x10, 0x12234, r17, 0x1, &(0x7f0000003380)=[r23, r21, r8, r24, r6, r14, 0xffffffffffffffff, r8], &(0x7f00000033c0)=[{0x1, 0x1, 0xd, 0x4}], 0x10, 0x8}, 0x94)

2m35.639918863s ago: executing program 3 (id=959):
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

2m20.354857236s ago: executing program 33 (id=959):
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x7602, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000004100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000004000002850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48)
bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r4}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

1m23.083100726s ago: executing program 5 (id=1219):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2581, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0x7, 0x10}, 0xc)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r4, &(0x7f00000002c0)="26d984592a0197494c96e27f1f6e668603bb95f6df06db60f85462440fb1726f607e246bc77d32fe7f1a41525accb4b2ee19fb4290e02562e85f78a4d99cf896d9b1a04ecbe084d3", &(0x7f0000000340)=""/112, 0x4}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="4f33e363a4b1"})

1m22.105070158s ago: executing program 5 (id=1223):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000880))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x1, 0x84)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0, &(0x7f0000001d40)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1c, 0x1f, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000095000000000000001800000005000000000000000900000018000000000000000000000049fa00008510006b21a7b8b4d66bd9000300000000000000000000001833000002000000000000000000000018360000040000000000000000000000851000000200000018000000f800000000000000080000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x8000, 0xb5, &(0x7f0000000740)=""/181, 0x41100, 0x34, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0xb, 0x2, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0xffffffffffffffff, 0x2a0, 0x8}, 0xc)
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x8, 0x10}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1c, 0xc, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @generic={0x2, 0x6, 0x0, 0xffff, 0x101}, @generic={0x7, 0xa, 0x4, 0x5, 0x80}, @btf_id={0x18, 0xbbbf5495ed6b04de, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xe61f, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @alu={0x7, 0x1, 0xd, 0x1, 0x9, 0xffffffffffffffe8}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xe3, &(0x7f0000000500)=""/227, 0x41100, 0x58, '\x00', 0x0, @fallback=0x2a, r6, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xf, 0x8, 0x5}, 0x10, 0x0, r0, 0x5, &(0x7f00000006c0)=[r7, r3, r2, r8, r9], &(0x7f0000000700)=[{0x4, 0x2, 0x9, 0xa}, {0x1, 0x4, 0x8, 0x1}, {0x3, 0x2, 0x7, 0x3}, {0x0, 0x2, 0x6, 0xe}, {0x4, 0x2, 0xe, 0xf}], 0x10, 0x2}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, 0x0, 0x20000044)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fc3000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)

1m19.18061447s ago: executing program 5 (id=1227):
perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 64)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) (rerun: 64)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r3, r1, 0x2e, 0x20}, 0x20) (async)
close(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x4048880)
r4 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xe9e5ed412e3bf91f, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xae1d, 0x1, @perf_bp={0x0, 0x8}, 0x100410, 0x200, 0x1, 0x1, 0x6, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x1) (async)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000011c0)) (async)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async, rerun: 32)
r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (rerun: 32)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="00000000030000000300"/21], 0x50) (async, rerun: 32)
write$cgroup_int(r7, &(0x7f00000001c0)=0x1, 0x12) (async, rerun: 32)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r5, 0x4, r6}, 0x10)

1m18.601052663s ago: executing program 5 (id=1232):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = socket$kcm(0x22, 0x3, 0x0) (rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0)

1m18.156475495s ago: executing program 5 (id=1235):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x3, @local}}}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x6, 0xfc, 0x0, 0x0, 0x0, 0x12524, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x9, 0x99d}, 0x0, 0xc8, 0x0, 0x1, 0x100000000000008, 0x0, 0x6, 0x0, 0x8, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0900000004000000060000000b"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc)
recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033300fe08000e40000200875a65969ff57bea000000000000000000000000ac1414aa"], 0xfdef)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb9040a1d08007b49000000000000080005007a010401a80016002000034004000000035c04613cd67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ef2bebe296ef2b79ff44458612c", 0xd9}], 0x1}, 0x0)

1m17.8903995s ago: executing program 5 (id=1236):
r0 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x2, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000b41e3f6512ff63737393afb073ce19d8bdaec1a2175a665bd628d067bba9c7915ebe7f9a44f514cf44115f172fec1e7f47403fd6c4", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000fc0)=""/4077, 0xfed}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000300)=""/108, 0x6c}], 0x7}, 0x40012100)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xfa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="10a3c63000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r7}, 0x18)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0xf9, 0x81, 0x1, 0x9, 0x0, 0x0, 0x122a2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x1060e0, 0x200, 0x1, 0x7, 0x10000, 0x0, 0x7, 0x0, 0x8000, 0x0, 0xc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000f2000000000000000000000000180100002020786833996af7550b2402c874dfac207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000210e7f28ab66c86760783b87acd84eda2ff700008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="027b000000000000000000000010000000"])

1m2.670833467s ago: executing program 34 (id=1236):
r0 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x2, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000b41e3f6512ff63737393afb073ce19d8bdaec1a2175a665bd628d067bba9c7915ebe7f9a44f514cf44115f172fec1e7f47403fd6c4", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a00)=""/254, 0xfe}, {&(0x7f0000000f00)=""/188, 0xbc}, {&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000fc0)=""/4077, 0xfed}, {&(0x7f0000000480)=""/222, 0xde}, {&(0x7f0000000940)=""/167, 0xa7}, {&(0x7f0000000300)=""/108, 0x6c}], 0x7}, 0x40012100)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0], 0x0, 0xfa, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x85, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0xa, 0x922000000003, 0x11)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr, 0x80, 0x0}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="10a3c63000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r7}, 0x18)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0xf9, 0x81, 0x1, 0x9, 0x0, 0x0, 0x122a2, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x1060e0, 0x200, 0x1, 0x7, 0x10000, 0x0, 0x7, 0x0, 0x8000, 0x0, 0xc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000f2000000000000000000000000180100002020786833996af7550b2402c874dfac207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000210e7f28ab66c86760783b87acd84eda2ff700008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="027b000000000000000000000010000000"])

4.997914505s ago: executing program 6 (id=1430):
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x5, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2fffffd, 0x4, 0x20000}, 0x50)

4.958259129s ago: executing program 0 (id=1431):
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00100000000000000000000000000000400000000000367f76f09fe2a2c118831617cb68d56df19228981a8d3f5a8ed2abca9d5a8da29dd7cd0347e9a5677374c128761aa78c156d4235a83017948557310bcc16d5f9f111ae5f"], 0x48)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0)
syz_clone(0x800a000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xc5bf)

4.635290379s ago: executing program 6 (id=1433):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="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", 0xfa}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000081000400000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37)

4.249539645s ago: executing program 6 (id=1434):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
socket$kcm(0x11, 0x2, 0x300)
syz_open_procfs$namespace(0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e565000600000000080000000100000080000000b55dd76900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94)
close(r1)
socket$kcm(0x29, 0x5, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0xc008744c, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) (async)
socket$kcm(0x11, 0x2, 0x300) (async)
syz_open_procfs$namespace(0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="e565000600000000080000000100000080000000b55dd76900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) (async)
close(r1) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async)
ioctl$TUNGETVNETLE(r1, 0xc008744c, 0x0) (async)

4.226150156s ago: executing program 0 (id=1435):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNGETFEATURES(r0, 0x5452, &(0x7f00000013c0))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x394}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16}, 0x94)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000c00)="1400000037000b0f925a2a22feab3c3d0ea2c2e4", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x4008800)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
close(r6)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
r8 = socket$kcm(0xa, 0x3, 0x106)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x541b, &(0x7f0000000b00))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x4a0e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x740, 0x0, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x2, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x4}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a}, 0x28)

3.665301169s ago: executing program 4 (id=1437):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x1c, &(0x7f00000016c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x1000, &(0x7f0000000640)=""/4096, 0x40f00, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000100)={0x0, 0x80, 0x7, 0x80, 0xf1, 0x7f, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000040), 0x5}, 0x2500, 0x80, 0x4, 0x4, 0x3, 0x67, 0x2, 0x0, 0xf, 0x0, 0x8}, r1, 0xf, r0, 0x4) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xc}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

3.615539703s ago: executing program 6 (id=1438):
socketpair(0x29, 0x5, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000020000000000"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x1009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a0085000000a0000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000a00000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async)
r1 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0xfffffffe}, {0x5, 0x0, 0x400000}]}, 0x94) (rerun: 64)
sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) (async)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0x1}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 64)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) (async)
close(r1) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0}, 0x94) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)

3.515743723s ago: executing program 0 (id=1439):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x12, 0xbd}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair(0x1, 0x1, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000"], 0x128}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}], 0x10}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x12, 0xbd}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f83edf848480000005e140602ab1100000e002b000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)

3.455786578s ago: executing program 4 (id=1440):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x92, &(0x7f0000000540)=""/146, 0x41000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x92, &(0x7f0000000540)=""/146, 0x41000}, 0x94) (async)

3.428035211s ago: executing program 6 (id=1441):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f00000009c0)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYRES32], 0x0, 0x1, 0x0, 0x0, 0x0, 0x26}, 0x94)
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
close(r2)
socket$kcm(0x2, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x71}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x107}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x4000010)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xb2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r9, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x2, 0xe23, @broadcast}, 0x10, 0x0}, 0x4000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0)
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x50}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x42}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4)

3.367814437s ago: executing program 2 (id=1442):
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x24, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x9, 0x8908, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x4, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffe}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x19)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
r3 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r3, 0x1, 0x28, &(0x7f0000000000), 0x4)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20007fdc)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x16, 0x0, 0x0, 0x3fc9, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000540), 0x3}, 0x828, 0x0, 0x0, 0x8, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_int(r6, &(0x7f0000000080), 0x12)
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r8)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r10 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000780)="1800000039000517d25a80648c63940d0324fc600b003540", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
r11 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000900)="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", &(0x7f00000001c0)=""/75, &(0x7f00000000c0)="f12c03299e5ab47f559702f4f8750500c06cc14d9a035a2dbedcd39886", &(0x7f0000000240)="b2f6", 0x1, r7}, 0x38)

3.351893048s ago: executing program 0 (id=1443):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000007000000040000000000000e0400000000000000000000000000000500000000020000000000000802000000000000000000000a0300000000005f00616e"], 0x0, 0x53}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610430000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="1c0000001a006bb12214b594e9a36f9e5c4eb100103fe3dc6e080000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3.287774654s ago: executing program 4 (id=1444):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002a80)=""/51, 0x33}], 0x1, &(0x7f0000002b00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40000101) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000003040)={&(0x7f0000002d40), 0x6e, 0x0}, 0x0) (async)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfe, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0xffff0000, 0xf, 0x0, &(0x7f0000000000)="2b206d0748010097737ea49da2aae9", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710046000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800"/12], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x5006) (async)
ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) (async)
ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa000000, 0x0, 0x0, &(0x7f0000000640), &(0x7f0000000100)}, 0x50) (async, rerun: 64)
recvmsg$unix(r2, &(0x7f00000005c0)={&(0x7f00000003c0), 0x6e, &(0x7f0000002980)=[{&(0x7f0000000580)=""/41, 0x29}, {&(0x7f00000006c0)=""/198, 0xc6}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/152, 0x98}], 0x6, &(0x7f0000002a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40010002) (async)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800)
recvmsg$unix(r1, &(0x7f0000000380)={&(0x7f0000000000), 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/7, 0x7}, {&(0x7f00000002c0)=""/34, 0x22}], 0x5, &(0x7f0000000480)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x40000080)

3.219857611s ago: executing program 2 (id=1445):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x2, 0x3, 0x84)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

3.017651059s ago: executing program 2 (id=1446):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="188200580100000000000000000000008500000023000000950000000000000075cfe628e5c7aa1a20d98122f7fad7f5e1da520040ec494fd86b67c1e69b03b68bed889ac3f59c09e8d01eaf732baa3961168f45d038b71ce034939edcb0483570542e27601bf9e1ca2516ca04b3be5ece45dede6b6c72dc00e2dd560d8346d28bafac3c291b72e10dac1a3d9d99a1d1f71b79c9af56bc7eb9f04ec527baef1b76"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfeb, &(0x7f0000001e00)=""/4075, 0x41000}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="00000000030000000300"/21], 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x25}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)
socketpair(0x23, 0x6, 0x3, &(0x7f0000000d00))
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4)
socketpair(0x23, 0x3, 0x8000, &(0x7f0000000d40))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)

2.995624282s ago: executing program 4 (id=1447):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0x1, 0x0, 0x8, 0x0, 0x9, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000002000000000d000000000000a8a04dbdeadc37e682a6c1aa12ccb957de659d4ce1cf87071d34a3415998459c22871e593761441a8427a1f624ea7214ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0)
close(r2)
r3 = gettid()
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
close(r4)
socket$kcm(0xa, 0x5, 0x0)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40)
r8 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10, 0x0}, 0x40040d4)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x0, 0x87, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f00000003c0), 0x8, 0xeb, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x3c0, 0xa63, 0xc6, 0xc001, r2, 0x400, '\x00', r12, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x0, @value=r2}, 0x50)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xc7, 0x0, 0x6, 0x40, 0x0, 0x0, 0x40220, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000180), 0x4}, 0x1478a, 0x6, 0x2, 0x0, 0x8, 0x6, 0x5, 0x0, 0xffff, 0x0, 0x1}, r3, 0x5, r0, 0xf)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r14}, 0x10)

2.878387013s ago: executing program 0 (id=1448):
r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x8, 0x8, 0x5, 0xa, 0x0, 0xd009, 0x100, 0xf, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x92b, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x180, 0x4, 0x80000001, 0x0, 0x5, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xc)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0xe, 0x81, 0x4b, 0x1, 0x0, 0x9, 0x82476, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1, 0x9}, 0x4000, 0x200, 0x7, 0x1, 0x80, 0x8000, 0x800, 0x0, 0x30c1, 0x0, 0x676f})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000140)='-}+\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x81)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x3}, 0x8)
recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000200), 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000300)=""/77, 0x4d}, {&(0x7f0000000380)=""/8, 0x8}], 0x3, &(0x7f0000000400)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}, 0x10000)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000004c0), 0x10)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x2d, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x65, &(0x7f00000007c0)=""/101, 0x41100, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xe, 0xf, 0x7fffffff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000900)=[{0x0, 0x1, 0x5, 0xc}, {0x5, 0x5, 0x9, 0x3}, {0x5, 0x4, 0xa, 0x7}], 0x10, 0x3}, 0x94)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x7e8a762b, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0x0, 0x2, 0x14}, 0xc)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c40)=@generic={&(0x7f0000000c00)='./file0\x00', 0x0, 0x10}, 0x18)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@generic={&(0x7f0000000c80)='./file0\x00', 0x0, 0x28}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xf}]}, &(0x7f0000000540)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0xa, 0x4, 0x100}, 0x10, 0x0, r3, 0x2, &(0x7f0000000d00)=[r4, r5, r6, r7, r8, r9, 0x1, 0xffffffffffffffff, r0], &(0x7f0000000d40)=[{0x1, 0x2, 0xb, 0x7}, {0x3, 0x3, 0xb, 0xb}], 0x10, 0x4}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000e40)={0x1, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f00)={r6, 0x58, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, r10, 0x3, '\x00', r11, 0xffffffffffffffff, 0x1, 0x2}, 0x50)
ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000000fc0))
r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001040)=@generic={&(0x7f0000001000)='./file0/file0\x00', 0x0, 0x18}, 0x18)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x3, [@volatile={0x9, 0x0, 0x0, 0x9, 0x3}, @struct={0x1, 0x7, 0x0, 0x4, 0x1, 0x8, [{0x2, 0x0, 0x7}, {0x7, 0x3, 0x2}, {0x3, 0x5, 0x4}, {0x5, 0x1, 0xdcd}, {0xc, 0x0, 0x466d}, {0x5, 0x1, 0x5}, {0x6, 0x0, 0x400}]}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}, @ptr={0x10, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x2e]}}, &(0x7f0000001140)=""/119, 0x9f, 0x77, 0x0, 0x6, 0x10000}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x6, 0x0, r13, 0x10000, '\x00', r11, r14, 0x1, 0x5, 0x3}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001580)={&(0x7f0000001280)="62b8b035aff34753d7c2cfb2c2a24c410b19d32bb5c7c2eabd6358ba77d8fb98919c86e5f3c8bd04c2f5048bd7f9012a96dc92ad12ecca9e723fea68790c967c2ae5f8393ffdd22bf26f52ac1e60f5456f6913fcc30ad64ba2837581fb7098b3b7fa32a8607dc8d440586fc1ff4f6e29416737c29bea47126b4d638362e7a58129890a03f2aa556fb5966775feba932b50d3462ff27a7c0771778b8573a68d389e1e684b2771b1514a3fb95fe59e3633c7300ff4346efd9fced53a08eac2fde994dd2d2ed2dfbd5531f724c1d366560361e267b5102a65b6e0c0cf36f8fae52f3bbf492b22ac8dbd", &(0x7f0000001380)=""/59, &(0x7f00000013c0)="0a61c52a3730493b6db861f7150845409512a90f1543a8d03a08ae4bb52589d0e9ac9d47e3859f005dfe895c0978133451a69009caf6067b81cf71dff1eec2ef9bbe055370beabe2d9042a861c503287f8476c905cd7fa166f91788b0de3f3eb71b30dcaaf7bc60e885fc0df6a872d790d8f8d1198582c9de9cd61e1b914ef8b896faad067c5a09dd3f1ae2daeb811c7f65ce355485b81138a8eaf4f9eb269a6ecccd3d155c67490d7f15aee077c9f03c2e609c22ea72e7597ba5e827c9f5888ac7b76b353fbf79ee6b3a74f9e6e220ba848eef5d5276cc33e", &(0x7f00000014c0)="2af7c66d183eec46c77d489e45565aae4ab73925ef3ba1ff3d2fcc2c406b30903c79ece67e01a51175468737c7c3ff7e7dfa7949c9208f1453b34b0bd484bbf92e4cc198ae9cbab0874b9205e71b2562e05f86f3fb403e7cafaede21f08984392570a59eb676a16bbf8291b8184cf44fa3d8a9a885f45a25827b226da960bf23f05aa4274825b4ec665212078927fb280e60cfb7d3d36cbd005f6f0e615f2290", 0x9e28, r12, 0x4}, 0x38)
r15 = bpf$ITER_CREATE(0x21, &(0x7f00000015c0), 0x8)
mkdirat$cgroup(r15, &(0x7f0000001600)='syz0\x00', 0x1ff)
openat$tun(0xffffffffffffff9c, &(0x7f0000001640), 0xede8f7acdc962ba4, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@map=r4, 0xe, 0x0, 0x41, &(0x7f0000001680)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001a40)={0xffffffffffffffff, &(0x7f0000001840)="f236eb96e12e1f76b4a23056e4b2b40a4a1f9255ccb790260a58d52b369a393af135ca2f0f224d103773b14e9831b863701a4f429f60cd0cebbc2c09a5607b204b22735643c8a1befa8622a85e1f88a8296f7df0613e6762cd1b0202ea0daa5b5d1d954dfd71b6dd2a88db7dab0330b330e16248d1a34ba67ca8ca34c79feb24d644e775eb909ad1221bf7e8f2029a60e734de6efc514cb02154bbcf2265b4ed1840f8813a849b4285f9af778d33cb38c2131dbdbd4aff8f67e9f43fc24c34b25a013d8f5ca5410392345f5a6d", &(0x7f0000001940)=""/245}, 0x20)

2.818204438s ago: executing program 4 (id=1449):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)

1.015372065s ago: executing program 2 (id=1450):
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r2 = socket$kcm(0xa, 0x1, 0x106) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x9, r1, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) (async, rerun: 32)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 64)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f00000003c0)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8, 0x2}, 0x80, 0x0}, 0x20008011) (async, rerun: 64)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) (async, rerun: 64)
r5 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)}], 0x1}, 0x0) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32)
r7 = socket$kcm(0x23, 0x5, 0x0) (rerun: 32)
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89ed, 0x0)

959.919581ms ago: executing program 0 (id=1451):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f00000002c0)="7b054415491ecbacb88f08a582741c523b8135a49db0e11944c9294b6678b80ffab314e4f7e3e0fdb31aa6d177ebd085b1f7546a2f4e6c7ff128d3ab7424bea43ab58e", &(0x7f00000003c0)=""/100}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="240000002e000d190a762d7f08", 0xd}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff", 0x17}], 0x2}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000002000085000000d10000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x5452, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))

959.176381ms ago: executing program 4 (id=1452):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='cpu\t&-&&\t')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xffc1, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d61d4e2ab1e031b2ff6fdade11f0b43761e3a79d61607b3e36c7477d3297b96e8d6145f66f4dd08b8702f27d96ed60372e02eb62d0dffef", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x39)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x4000, 0xc8, 0xffff, 0x7, 0xfd, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x9}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r4}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe8000000000000010"], 0xfdef)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r9, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688884746", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc0000"], 0x50)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef)

938.057173ms ago: executing program 6 (id=1453):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x24, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0}, 0x40)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r9, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40002000)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b0300000000006c1d0010047e0c8131a6080c000af32c6e020075f800250002000f00e5aa000017d34460bc24eab556a705251e6182949a36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex=r8, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value=r3, @void, @void, r6}, 0x20)

815.256125ms ago: executing program 2 (id=1454):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x40049409, 0x5) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2, <r3=>r2}, &(0x7f0000000600), &(0x7f0000000640)=r0}, 0x1c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000940000000c62cdcd440000000000050095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

0s ago: executing program 2 (id=1455):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0)
write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000078009106000000000000004a0775bf3144"], 0xfe33)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)

kernel console output (not intermixed with test programs):

mand tx timeout
[   93.219646][ T5879] netlink: 'syz.1.2': attribute type 10 has an invalid length.
[   93.248409][ T5879] team0: Device ipvlan1 failed to register rx_handler
[   93.445405][ T5879] syz.1.2 (5879) used greatest stack depth: 19944 bytes left
[   93.489462][ T5900] : entered promiscuous mode
[   93.494249][ T5900] : entered allmulticast mode
[   93.763257][ T5917] netlink: 'syz.2.15': attribute type 27 has an invalid length.
[   93.862852][ T5917] netlink: 112 bytes leftover after parsing attributes in process `syz.2.15'.
[   93.905379][ T5920] Zero length message leads to an empty skb
[   94.479618][ T5942] netlink: 'syz.2.23': attribute type 1 has an invalid length.
[   94.494635][ T5942] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.23'.
[   94.558257][ T5938] warning: `syz.1.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   94.733761][ T5946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24'.
[   94.743254][ T5946] netlink: 60 bytes leftover after parsing attributes in process `syz.2.24'.
[   95.002746][ T5946] netlink: 'syz.2.24': attribute type 3 has an invalid length.
[   95.444558][ T5966] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   95.482051][ T5969] netlink: 'syz.2.32': attribute type 4 has an invalid length.
[   95.510770][ T5969] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   95.529118][ T5966] netlink: 'syz.0.30': attribute type 10 has an invalid length.
[   95.564240][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.574462][ T5966] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   95.626210][ T5961] bond0: entered promiscuous mode
[   95.631625][ T5961] bond_slave_0: entered promiscuous mode
[   95.642050][ T5961] bond_slave_1: entered promiscuous mode
[   95.650863][ T5961] batadv0: entered promiscuous mode
[   96.385874][ T5985] sctp: [Deprecated]: syz.2.36 (pid 5985) Use of struct sctp_assoc_value in delayed_ack socket option.
[   96.385874][ T5985] Use struct sctp_sack_info instead
[   98.686433][ T6016] netlink: 'syz.3.42': attribute type 21 has an invalid length.
[   99.042160][ T6031] netlink: 'syz.2.46': attribute type 10 has an invalid length.
[   99.050175][ T6031] __nla_validate_parse: 4 callbacks suppressed
[   99.050189][ T6031] netlink: 55 bytes leftover after parsing attributes in process `syz.2.46'.
[  100.166164][ T6055] netlink: 'syz.2.54': attribute type 23 has an invalid length.
[  100.272095][ T6055] netlink: 168 bytes leftover after parsing attributes in process `syz.2.54'.
[  101.935561][ T6072] delete_channel: no stack
[  102.124130][ T6082] netlink: 'syz.1.62': attribute type 33 has an invalid length.
[  102.146793][ T6082] netlink: 164 bytes leftover after parsing attributes in process `syz.1.62'.
[  102.377721][ T6077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  102.540798][ T6088] netlink: 'syz.2.64': attribute type 9 has an invalid length.
[  102.566339][ T6089] netlink: 'syz.2.64': attribute type 9 has an invalid length.
[  102.575020][ T6089] netlink: 399 bytes leftover after parsing attributes in process `syz.2.64'.
[  102.595449][ T6077] syz.0.59 (6077) used greatest stack depth: 19240 bytes left
[  102.673392][ T6088] netlink: 399 bytes leftover after parsing attributes in process `syz.2.64'.
[  102.986979][ T6099] netlink: 152 bytes leftover after parsing attributes in process `syz.0.67'.
[  103.033880][ T6099] tc_dump_action: action bad kind
[  103.428137][ T6109] netlink: 156 bytes leftover after parsing attributes in process `syz.1.69'.
[  103.528851][ T6104] delete_channel: no stack
[  104.405275][ T6125] netlink: 'syz.2.73': attribute type 10 has an invalid length.
[  104.582608][ T6125] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.644509][ T6125] team0: Port device batadv0 added
[  105.042533][ T6149] netlink: 'syz.3.79': attribute type 33 has an invalid length.
[  105.085433][ T6149] netlink: 152 bytes leftover after parsing attributes in process `syz.3.79'.
[  105.539647][ T6152] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  105.562623][ T6152] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  105.934226][ T6165] bridge_slave_1: left allmulticast mode
[  105.970794][ T6165] bridge_slave_1: left promiscuous mode
[  106.000522][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.221338][ T6165] bridge_slave_0: left allmulticast mode
[  106.238711][ T6165] bridge_slave_0: left promiscuous mode
[  106.260543][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.579169][ T6182] netlink: 'syz.1.89': attribute type 2 has an invalid length.
[  106.610486][ T6182] netlink: 'syz.1.89': attribute type 3 has an invalid length.
[  106.638275][ T6182] netlink: 132 bytes leftover after parsing attributes in process `syz.1.89'.
[  106.735012][ T6169] netlink: 'syz.0.86': attribute type 2 has an invalid length.
[  106.746843][ T6169] netlink: 'syz.0.86': attribute type 8 has an invalid length.
[  106.765264][ T6169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.86'.
[  107.062677][ T6193] netlink: 'syz.0.93': attribute type 3 has an invalid length.
[  107.075230][ T6193] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.93'.
[  107.106241][ T6193] netlink: 'syz.0.93': attribute type 3 has an invalid length.
[  107.124491][ T6193] netlink: 191168 bytes leftover after parsing attributes in process `syz.0.93'.
[  107.940785][ T6217] netlink: 132 bytes leftover after parsing attributes in process `syz.2.99'.
[  108.067733][ T6217] netlink: 'syz.2.99': attribute type 13 has an invalid length.
[  108.075467][ T6217] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.99'.
[  108.155439][ T6224] netlink: 'syz.1.101': attribute type 4 has an invalid length.
[  108.201659][ T6224] netlink: 152 bytes leftover after parsing attributes in process `syz.1.101'.
[  108.249312][ T6224] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  108.330953][ T6228] tap0: tun_chr_ioctl cmd 1074025677
[  108.359863][ T6228] tap0: linktype set to 1
[  108.834287][ T6240] IPv6: NLM_F_CREATE should be specified when creating new route
[  108.866626][ T6240] netlink: 1 bytes leftover after parsing attributes in process `syz.3.105'.
[  110.647749][ T6275] IPv6: Can't replace route, no match found
[  111.795839][ T6293] netlink: 'syz.3.120': attribute type 12 has an invalid length.
[  111.830863][ T6293] netlink: 132 bytes leftover after parsing attributes in process `syz.3.120'.
[  116.185358][ T6337] netlink: 'syz.0.134': attribute type 14 has an invalid length.
[  116.194770][ T6337] netlink: 164 bytes leftover after parsing attributes in process `syz.0.134'.
[  116.204335][ T6338] netlink: 192 bytes leftover after parsing attributes in process `syz.3.132'.
[  116.220959][ T6339] netlink: 'syz.0.134': attribute type 1 has an invalid length.
[  116.231615][ T6339] netlink: 176 bytes leftover after parsing attributes in process `syz.0.134'.
[  116.442653][ T6346] netlink: 168 bytes leftover after parsing attributes in process `syz.1.136'.
[  116.634237][ T6353] netlink: 'syz.2.140': attribute type 153 has an invalid length.
[  116.650230][ T6353] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.140'.
[  116.765289][ T6358] netlink: 'syz.3.138': attribute type 3 has an invalid length.
[  116.808143][ T6358] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.138'.
[  116.824119][ T6360] netlink: 'syz.1.142': attribute type 2 has an invalid length.
[  116.851958][ T6360] netlink: 'syz.1.142': attribute type 9 has an invalid length.
[  116.861174][ T6360] netlink: 132 bytes leftover after parsing attributes in process `syz.1.142'.
[  117.801794][ T6383] netlink: 19327 bytes leftover after parsing attributes in process `syz.3.146'.
[  118.244160][ T6397] netlink: 'syz.1.151': attribute type 27 has an invalid length.
[  118.252276][ T6397] netlink: 152 bytes leftover after parsing attributes in process `syz.1.151'.
[  118.292982][ T6397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  118.408769][ T6398] netlink: 763 bytes leftover after parsing attributes in process `syz.3.148'.
[  118.977912][ T6398] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.148'.
[  118.987518][ T6399] bridge0: port 3(bond0) entered blocking state
[  119.014958][ T6399] bridge0: port 3(bond0) entered disabled state
[  119.067348][ T6399] bond0: entered allmulticast mode
[  119.072565][ T6399] bond_slave_0: entered allmulticast mode
[  119.125167][ T6399] bond_slave_1: entered allmulticast mode
[  119.134049][ T6399] bond0: entered promiscuous mode
[  119.139814][ T6399] bond_slave_0: entered promiscuous mode
[  119.145846][ T6399] bond_slave_1: entered promiscuous mode
[  119.170524][ T6416] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.154'.
[  119.275095][ T6399] bridge0: port 3(bond0) entered blocking state
[  119.281969][ T6399] bridge0: port 3(bond0) entered forwarding state
[  119.676019][ T6414] delete_channel: no stack
[  120.082187][ T6439] netlink: 'syz.0.161': attribute type 3 has an invalid length.
[  120.129662][ T6439] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.161'.
[  120.399834][ T6442] netlink: set zone limit has 8 unknown bytes
[  120.798616][ T6460] pim6reg0: tun_chr_ioctl cmd 1074025672
[  120.826864][ T6460] pim6reg0: ignored: set checksum disabled
[  121.886993][ T6476] netlink: 'syz.1.172': attribute type 21 has an invalid length.
[  121.894823][ T6476] netlink: 'syz.1.172': attribute type 5 has an invalid length.
[  121.963382][ T6476] netlink: 128 bytes leftover after parsing attributes in process `syz.1.172'.
[  122.033813][ T6478] netlink: 'syz.0.173': attribute type 25 has an invalid length.
[  122.067032][ T6478] netlink: 'syz.0.173': attribute type 28 has an invalid length.
[  122.075529][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  122.098099][ T6481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  122.380998][ T6481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.401707][ T6481] batman_adv: batadv0: Removing interface: batadv_slave_1
[  122.586194][ T6479] netlink: 'syz.0.173': attribute type 21 has an invalid length.
[  122.615427][ T6474] netlink: 'syz.3.171': attribute type 10 has an invalid length.
[  122.702371][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.761265][ T6474] batadv0: entered promiscuous mode
[  122.768342][ T6474] batadv0: entered allmulticast mode
[  122.774726][ T6474] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  122.853868][ T6496] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.176'.
[  122.897705][ T6488] bridge0: port 3(bond0) entered disabled state
[  122.989817][   T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  122.999938][   T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  125.116187][ T6551] netlink: 'syz.2.188': attribute type 5 has an invalid length.
[  125.140682][ T6551] netlink: 176 bytes leftover after parsing attributes in process `syz.2.188'.
[  125.433648][ T6563] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[  125.484490][ T6563] team0: Port device macvlan0 added
[  125.984417][ T6582] syzkaller0: entered promiscuous mode
[  126.056423][ T6582] syzkaller0: entered allmulticast mode
[  127.641236][ T6628] netlink: 'syz.2.207': attribute type 1 has an invalid length.
[  127.696682][ T6628] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.207'.
[  128.279854][ T6637] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.209'.
[  129.188597][ T6653] netlink: 'syz.0.215': attribute type 29 has an invalid length.
[  131.482010][ T6653] netlink: 'syz.0.215': attribute type 29 has an invalid length.
[  131.747102][ T6679] netlink: 3 bytes leftover after parsing attributes in process `syz.1.220'.
[  132.630190][ T6700] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.223'.
[  132.727771][ T6706] syzkaller0: entered promiscuous mode
[  132.734666][ T6706] syzkaller0: entered allmulticast mode
[  133.132859][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  133.150056][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  135.416932][ T5082] Bluetooth: hci0: unexpected event 0x0b length: 151 > 11
[  135.621302][ T6720] netlink: 'syz.3.231': attribute type 10 has an invalid length.
[  135.644476][ T6720] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  135.661903][ T6720] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  135.670646][ T6720] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  135.854943][ T6744] netlink: 'syz.3.237': attribute type 21 has an invalid length.
[  135.935454][ T6744] netlink: 'syz.3.237': attribute type 13 has an invalid length.
[  135.996772][ T6744] netlink: 216 bytes leftover after parsing attributes in process `syz.3.237'.
[  136.067779][ T6748] netlink: 'syz.2.238': attribute type 21 has an invalid length.
[  136.113525][ T6748] netlink: 'syz.2.238': attribute type 6 has an invalid length.
[  136.186183][ T6748] netlink: 132 bytes leftover after parsing attributes in process `syz.2.238'.
[  139.533399][ T6794] syzkaller0: entered promiscuous mode
[  139.551676][ T6794] syzkaller0: entered allmulticast mode
[  139.713688][ T6808] netlink: 830 bytes leftover after parsing attributes in process `syz.1.254'.
[  140.247823][ T6824] netlink: 'syz.3.260': attribute type 29 has an invalid length.
[  140.272550][ T6824] netlink: 'syz.3.260': attribute type 29 has an invalid length.
[  140.333635][ T6824] netlink: 'syz.3.260': attribute type 29 has an invalid length.
[  140.352890][ T6824] netlink: 'syz.3.260': attribute type 29 has an invalid length.
[  140.375439][ T6829] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.261'.
[  140.409982][ T6829] netlink: 18187 bytes leftover after parsing attributes in process `syz.1.261'.
[  140.864253][ T6841] netlink: 'syz.0.265': attribute type 7 has an invalid length.
[  140.906840][ T6846] syzkaller0: tun_chr_ioctl cmd 1074025677
[  140.921346][ T6846] syzkaller0: linktype set to 804
[  141.788267][ T6867] pim6reg1: entered promiscuous mode
[  141.793649][ T6867] pim6reg1: entered allmulticast mode
[  141.933318][ T6867] veth1_macvtap: left promiscuous mode
[  141.942749][ T6867] macsec0: entered promiscuous mode
[  141.952909][ T6867] macsec0: entered allmulticast mode
[  142.533496][ T6889] netlink: 'syz.2.278': attribute type 33 has an invalid length.
[  142.640022][ T6889] delete_channel: no stack
[  142.647624][ T6888] sock: sock_timestamping_bind_phc: sock not bind to device
[  142.676220][ T6889] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.278'.
[  142.712641][ T6889] netlink: zone id is out of range
[  142.731242][ T6889] netlink: zone id is out of range
[  142.755637][ T6889] netlink: zone id is out of range
[  142.786208][ T6889] netlink: zone id is out of range
[  142.816129][ T6889] netlink: zone id is out of range
[  142.856736][ T6889] netlink: zone id is out of range
[  142.891642][ T6889] netlink: zone id is out of range
[  142.924547][ T6889] netlink: zone id is out of range
[  142.949477][ T6889] netlink: zone id is out of range
[  142.972738][ T6889] netlink: zone id is out of range
[  143.020266][ T6885] delete_channel: no stack
[  143.063918][ T6894] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.280'.
[  143.114238][ T6894] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.280'.
[  143.331442][ T6902] netlink: 'syz.2.281': attribute type 10 has an invalid length.
[  143.360631][ T6902] netlink: 40 bytes leftover after parsing attributes in process `syz.2.281'.
[  143.375214][ T6902] dummy0: entered promiscuous mode
[  143.398058][ T6897] netlink: 'syz.2.281': attribute type 10 has an invalid length.
[  143.407394][ T6897] netlink: 40 bytes leftover after parsing attributes in process `syz.2.281'.
[  143.598313][ T6899] C: renamed from team_slave_0 (while UP)
[  143.689015][ T6899] netlink: 'syz.3.282': attribute type 3 has an invalid length.
[  143.707503][ T6899] netlink: 152 bytes leftover after parsing attributes in process `syz.3.282'.
[  144.978955][ T6944] netlink: 'syz.0.294': attribute type 33 has an invalid length.
[  145.361317][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.298'.
[  145.383932][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'.
[  145.407047][ T6955] netlink: 33 bytes leftover after parsing attributes in process `syz.3.298'.
[  145.427098][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.298'.
[  145.501790][ T6961] netlink: 'syz.2.299': attribute type 21 has an invalid length.
[  145.720182][ T6968] netlink: 'syz.2.302': attribute type 29 has an invalid length.
[  145.728945][ T6968] netlink: 'syz.2.302': attribute type 29 has an invalid length.
[  145.747334][ T6968] netlink: 'syz.2.302': attribute type 29 has an invalid length.
[  146.967271][ T7005] validate_nla: 1 callbacks suppressed
[  146.967287][ T7005] netlink: 'syz.2.312': attribute type 4 has an invalid length.
[  147.283095][ T7008] netlink: 'syz.2.313': attribute type 3 has an invalid length.
[  147.426015][ T7014] syz.0.315 uses obsolete (PF_INET,SOCK_PACKET)
[  147.702033][ T7022] __nla_validate_parse: 5 callbacks suppressed
[  147.702049][ T7022] netlink: 10 bytes leftover after parsing attributes in process `syz.0.317'.
[  147.794808][ T7025] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.318'.
[  148.435535][ T7043] netlink: 'syz.3.324': attribute type 9 has an invalid length.
[  148.465932][ T7043] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.324'.
[  148.518002][ T7042] netlink: 'syz.1.323': attribute type 2 has an invalid length.
[  148.540967][ T7042] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.323'.
[  149.520538][ T7081] netlink: 'syz.0.335': attribute type 39 has an invalid length.
[  149.680389][ T7081] hsr_slave_1 (unregistering): left promiscuous mode
[  149.797606][ T7084] netlink: 'syz.3.337': attribute type 4 has an invalid length.
[  150.013356][ T7095] netlink: 'syz.3.340': attribute type 27 has an invalid length.
[  150.031450][ T7095] netlink: 'syz.3.340': attribute type 10 has an invalid length.
[  150.094858][ T7095] team0: Port device wlan1 added
[  150.111455][ T7096] net_ratelimit: 354 callbacks suppressed
[  150.111474][ T7096] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.381350][ T5137] udevd[5137]: worker [5778] terminated by signal 33 (Unknown signal 33)
[  155.393250][ T7213] netlink: 48 bytes leftover after parsing attributes in process `syz.1.375'.
[  155.408098][ T5137] udevd[5137]: worker [5778] failed while handling '/devices/virtual/block/loop0'
[  156.293633][ T7244] netlink: 'syz.3.386': attribute type 9 has an invalid length.
[  156.317338][ T7244] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.386'.
[  156.342667][ T7244] netlink: 'syz.3.386': attribute type 4 has an invalid length.
[  156.359900][ T7244] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.386'.
[  156.401267][ T7247] netlink: 'syz.0.388': attribute type 39 has an invalid length.
[  156.467917][ T7249] netlink: 'syz.2.387': attribute type 10 has an invalid length.
[  156.574213][ T7255] mac80211_hwsim hwsim7 O3ãc¤±: renamed from wlan1 (while UP)
[  156.711501][ T7263] netlink: 'syz.3.391': attribute type 21 has an invalid length.
[  156.736691][ T7263] netlink: 132 bytes leftover after parsing attributes in process `syz.3.391'.
[  157.054528][ T7273] netlink: 'syz.2.396': attribute type 21 has an invalid length.
[  157.269112][ T7279] Driver unsupported XDP return value 0 on prog  (id 412) dev N/A, expect packet loss!
[  157.568376][ T7284] netlink: 'syz.2.399': attribute type 10 has an invalid length.
[  160.398005][ T7284] team0: Device veth1_macvtap failed to register rx_handler
[  160.946764][ T7313] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.409'.
[  162.117500][ T7351] netlink: 'syz.2.419': attribute type 21 has an invalid length.
[  162.553591][ T7359] delete_channel: no stack
[  162.589512][ T7372] netlink: 140 bytes leftover after parsing attributes in process `syz.1.426'.
[  163.089568][ T7390] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.432'.
[  163.113496][ T7390] openvswitch: netlink: Duplicate key (type 0).
[  163.207880][ T7390] sock: sock_set_timeout: `syz.1.432' (pid 7390) tries to set negative timeout
[  163.337797][ T7393] netlink: 'syz.3.433': attribute type 46 has an invalid length.
[  163.406910][ T7397] veth0_vlan: entered allmulticast mode
[  163.999029][ T7410] netlink: 'syz.0.439': attribute type 153 has an invalid length.
[  164.095541][ T7410] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.439'.
[  165.382459][ T7448] netlink: 'syz.2.448': attribute type 49 has an invalid length.
[  166.123827][ T7470] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.454'.
[  166.614692][ T7477] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.458'.
[  167.685787][ T7503] netlink: 'syz.2.467': attribute type 9 has an invalid length.
[  167.706438][ T7503] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.467'.
[  167.802011][ T7504] netlink: 'syz.2.467': attribute type 9 has an invalid length.
[  167.828113][ T7504] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.467'.
[  167.828486][ T7503] netlink: 'syz.2.467': attribute type 39 has an invalid length.
[  168.031441][ T7514] netlink: 152 bytes leftover after parsing attributes in process `syz.2.470'.
[  168.054107][ T7514] netlink: 6 bytes leftover after parsing attributes in process `syz.2.470'.
[  168.934301][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'.
[  169.304944][ T7544] netlink: 'syz.3.477': attribute type 13 has an invalid length.
[  169.336720][ T7544] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.477'.
[  169.888878][ T7558] netlink: 'syz.3.483': attribute type 10 has an invalid length.
[  170.728461][ T7560] netlink: 'syz.0.484': attribute type 10 has an invalid length.
[  170.820122][ T7560] veth0_vlan: entered allmulticast mode
[  171.045763][ T7560] veth0_vlan: left promiscuous mode
[  171.158481][ T7560] veth0_vlan: entered promiscuous mode
[  171.208626][ T7560] team0: Device veth0_vlan failed to register rx_handler
[  171.417508][ T7575] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[  171.425259][ T7575] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.487'.
[  171.463175][ T7578] netlink: 'syz.2.487': attribute type 1 has an invalid length.
[  171.673753][ T7597] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.493'.
[  171.711062][ T7599] netlink: 10 bytes leftover after parsing attributes in process `syz.0.494'.
[  173.234625][ T5082] Bluetooth: hci3: ISO packet for unknown connection handle 3133
[  173.785217][ T7639] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664
[  174.375556][ T7641] bridge0: port 3(team0) entered blocking state
[  174.388963][ T7641] bridge0: port 3(team0) entered disabled state
[  174.400522][ T7641] team0: entered allmulticast mode
[  174.417191][ T7641] team_slave_0: entered allmulticast mode
[  174.425443][ T7641] team_slave_1: entered allmulticast mode
[  174.519301][ T7641] team0: entered promiscuous mode
[  174.524784][ T7641] team_slave_0: entered promiscuous mode
[  174.587826][ T7641] team_slave_1: entered promiscuous mode
[  174.629998][ T7641] bridge0: port 3(team0) entered blocking state
[  174.638087][ T7641] bridge0: port 3(team0) entered forwarding state
[  175.168266][ T7659] netlink: 'syz.2.514': attribute type 10 has an invalid length.
[  175.364500][ T7659] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  175.548877][ T7664] netlink: 'syz.3.516': attribute type 10 has an invalid length.
[  175.738649][ T7664] dummy0: entered promiscuous mode
[  175.745487][ T7664] dummy0: entered allmulticast mode
[  175.770716][ T7664] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  177.436753][ T7707] tap0: tun_chr_ioctl cmd 1074025677
[  177.442280][ T7707] tap0: linktype set to 0
[  177.486496][ T7706] tap0: tun_chr_ioctl cmd 1074025677
[  177.491971][ T7706] tap0: linktype set to 0
[  177.535205][ T7712] tap0: tun_chr_ioctl cmd 2147767517
[  177.546841][ T7707] tap0: tun_chr_ioctl cmd 1074025692
[  177.562670][ T7712] tap0: tun_chr_ioctl cmd 1074025692
[  177.599332][ T7711] netlink: 'syz.0.527': attribute type 7 has an invalid length.
[  177.615508][ T7706] netlink: 'syz.1.526': attribute type 1 has an invalid length.
[  177.633940][ T7706] netlink: 'syz.1.526': attribute type 3 has an invalid length.
[  177.661316][ T7706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.526'.
[  177.944737][ T7722] netlink: 'syz.2.530': attribute type 21 has an invalid length.
[  177.992474][ T7722] netlink: 132 bytes leftover after parsing attributes in process `syz.2.530'.
[  178.041486][ T7723] netlink: 'syz.2.530': attribute type 21 has an invalid length.
[  178.086774][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.530'.
[  179.293311][ T7759] hsr0: entered promiscuous mode
[  179.307384][ T7759] hsr0: entered allmulticast mode
[  179.319322][ T7759] hsr_slave_0: entered allmulticast mode
[  179.333056][ T7759] hsr_slave_1: entered allmulticast mode
[  179.499876][ T7767] Ÿë
: port 1(syz_tun) entered blocking state
[  179.526629][ T7767] Ÿë
: port 1(syz_tun) entered disabled state
[  179.533017][ T7767] syz_tun: entered allmulticast mode
[  179.581119][ T7767] syz_tun: entered promiscuous mode
[  180.186648][ T7796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.550'.
[  180.350897][ T7799] netlink: 'syz.3.551': attribute type 10 has an invalid length.
[  180.381392][ T7799] bond0: (slave dummy0): Releasing backup interface
[  180.389443][ T7799] dummy0: left promiscuous mode
[  180.408594][ T7799] dummy0: left allmulticast mode
[  180.434234][ T7799] team0: Port device dummy0 added
[  180.444889][ T7798] netlink: 'syz.3.551': attribute type 10 has an invalid length.
[  180.486590][ T7800] netlink: 'syz.3.551': attribute type 10 has an invalid length.
[  180.585042][ T7800] team0: Port device dummy0 removed
[  180.604599][ T7800] dummy0: entered promiscuous mode
[  180.611415][ T7800] dummy0: entered allmulticast mode
[  180.623052][ T7800] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  181.067244][ T7823] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.558'.
[  181.087196][ T7824] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.558'.
[  181.122228][ T7815] netlink: 1018 bytes leftover after parsing attributes in process `syz.2.556'.
[  181.801143][ T7849] netlink: 3 bytes leftover after parsing attributes in process `syz.0.563'.
[  181.874739][ T7852] syz.2.565[7852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  181.874865][ T7852] syz.2.565[7852] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  182.329507][ T7865] delete_channel: no stack
[  182.866442][ T7884] netlink: 40 bytes leftover after parsing attributes in process `syz.0.575'.
[  184.591218][ T7894] netlink: 'syz.1.578': attribute type 10 has an invalid length.
[  184.601602][ T7894] bond0: (slave bond_slave_0): Releasing backup interface
[  184.872345][ T7911] netlink: 'syz.3.583': attribute type 1 has an invalid length.
[  184.894062][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.579'.
[  184.925423][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.0.579'.
[  184.982751][ T7906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.579'.
[  185.022181][ T7908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.579'.
[  185.751729][ T7917] wg2: entered promiscuous mode
[  185.758602][ T7917] wg2: entered allmulticast mode
[  186.593115][ T7941] netlink: 'syz.0.591': attribute type 21 has an invalid length.
[  186.601128][ T7941] netlink: 156 bytes leftover after parsing attributes in process `syz.0.591'.
[  186.695310][ T7946] netlink: 'syz.2.592': attribute type 1 has an invalid length.
[  186.737214][ T7946] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.592'.
[  186.822233][ T7953] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.593'.
[  186.891299][ T7954] netlink: 'syz.2.592': attribute type 1 has an invalid length.
[  186.915853][ T7954] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.592'.
[  186.961533][ T5082] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  186.981105][   T51] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3
[  188.038984][ T7985] netlink: 'syz.3.602': attribute type 19 has an invalid length.
[  188.071278][ T7985] netlink: 172 bytes leftover after parsing attributes in process `syz.3.602'.
[  188.623431][ T8016] netlink: 'syz.2.610': attribute type 3 has an invalid length.
[  188.632226][ T8016] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.610'.
[  188.761241][ T8022] netlink: 'syz.1.612': attribute type 10 has an invalid length.
[  188.960349][ T8022] team0: Device veth1_macvtap failed to register rx_handler
[  190.384852][ T8068] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.625'.
[  190.406608][ T8068] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.625'.
[  190.415882][ T8068] netlink: 2 bytes leftover after parsing attributes in process `syz.0.625'.
[  192.574083][ T8099] syzkaller0: entered promiscuous mode
[  192.601247][ T8099] syzkaller0: entered allmulticast mode
[  192.928581][ T8126] netlink: 'syz.2.640': attribute type 1 has an invalid length.
[  192.943416][ T8126] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.640'.
[  193.100071][ T5082] Bluetooth: hci3: command 0x0406 tx timeout
[  194.472355][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  194.483141][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  194.686193][ T8128] netlink: 'syz.1.641': attribute type 10 has an invalid length.
[  194.694166][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.1.641'.
[  194.708580][ T8128] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  194.891413][ T8137] C: renamed from team_slave_0 (while UP)
[  194.912410][ T8137] netlink: 'syz.2.643': attribute type 3 has an invalid length.
[  194.931992][ T8137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  194.977051][ T8140] netlink: 180 bytes leftover after parsing attributes in process `syz.1.644'.
[  194.997959][ T8137] netlink: 9087 bytes leftover after parsing attributes in process `syz.2.643'.
[  195.207974][ T8158] netlink: 128 bytes leftover after parsing attributes in process `syz.2.650'.
[  195.378184][ T8163] netlink: 'syz.0.651': attribute type 10 has an invalid length.
[  195.445534][ T8165] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.654'.
[  195.585453][ T8163] team0: Port device geneve1 added
[  195.834013][ T8178] netlink: 'syz.1.656': attribute type 4 has an invalid length.
[  195.844018][ T8178] netlink: 140 bytes leftover after parsing attributes in process `syz.1.656'.
[  196.167724][ T8195] netlink: 'syz.1.661': attribute type 21 has an invalid length.
[  197.115137][ T8210] netlink: 'syz.0.666': attribute type 10 has an invalid length.
[  197.123123][ T8210] veth0_vlan: left allmulticast mode
[  197.132714][ T8210] veth0_vlan: left promiscuous mode
[  197.154330][ T8210] veth0_vlan: entered promiscuous mode
[  197.183648][ T8210] team0: Device veth0_vlan failed to register rx_handler
[  197.947461][ T8233] netlink: 'syz.1.672': attribute type 39 has an invalid length.
[  198.363742][ T8243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.674'.
[  198.493098][ T8243] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.674'.
[  198.751769][ T8250] netlink: 'syz.3.676': attribute type 21 has an invalid length.
[  199.013534][ T8261] netlink: 830 bytes leftover after parsing attributes in process `syz.0.681'.
[  199.257223][ T8265] netlink: 168 bytes leftover after parsing attributes in process `syz.3.682'.
[  200.269195][ T8291] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.691'.
[  200.844196][ T8293] netlink: 'syz.1.692': attribute type 39 has an invalid length.
[  201.167932][ T8300] syzkaller0: entered promiscuous mode
[  201.191385][ T8300] syzkaller0: entered allmulticast mode
[  206.776544][ T5775] Bluetooth: hci1: command 0x0406 tx timeout
[  206.790998][ T5769] Bluetooth: hci2: command 0x0406 tx timeout
[  206.791031][ T5779] Bluetooth: hci0: command 0x0406 tx timeout
[  207.238417][ T8344] netlink: 188 bytes leftover after parsing attributes in process `syz.2.706'.
[  207.405569][ T8359] netlink: 76 bytes leftover after parsing attributes in process `syz.2.710'.
[  208.301021][ T8360] netlink: 'syz.3.711': attribute type 10 has an invalid length.
[  208.332334][ T8395] netlink: 'syz.2.720': attribute type 10 has an invalid length.
[  208.388825][ T8395] team0: Device ipvlan1 failed to register rx_handler
[  208.490717][ T8395] syz.2.720 (8395) used greatest stack depth: 19048 bytes left
[  209.044862][ T8427] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.729'.
[  209.564820][ T8438] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.732'.
[  210.770369][ T8445] GPL: port 1(erspan0) entered blocking state
[  210.801710][ T8445] GPL: port 1(erspan0) entered disabled state
[  210.816926][ T8445] erspan0: entered allmulticast mode
[  210.832421][ T8445] erspan0: entered promiscuous mode
[  210.842696][ T8445] GPL: port 1(erspan0) entered blocking state
[  210.849001][ T8445] GPL: port 1(erspan0) entered forwarding state
[  211.004462][ T8471] netlink: 830 bytes leftover after parsing attributes in process `syz.0.739'.
[  211.418434][ T8477] netlink: 'syz.2.740': attribute type 23 has an invalid length.
[  211.516735][ T8477] netlink: 'syz.2.740': attribute type 10 has an invalid length.
[  211.796951][ T8477] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  211.842217][ T8489] netlink: 'syz.1.743': attribute type 153 has an invalid length.
[  211.870580][ T8489] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.743'.
[  212.056960][ T8494] syzkaller0: entered promiscuous mode
[  212.066633][ T8494] syzkaller0: entered allmulticast mode
[  212.222059][ T8499] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.746'.
[  212.284832][ T8497] netlink: 'syz.3.744': attribute type 3 has an invalid length.
[  212.358620][ T8497] netlink: 152 bytes leftover after parsing attributes in process `syz.3.744'.
[  212.401728][ T8497] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  212.736126][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.753'.
[  212.752577][ T8521] netlink: 'syz.2.753': attribute type 10 has an invalid length.
[  212.772963][ T8521] hsr0: left promiscuous mode
[  212.777883][ T8521] hsr0: left allmulticast mode
[  212.783916][ T8521] hsr_slave_0: left allmulticast mode
[  212.794111][ T8521] hsr_slave_1: left allmulticast mode
[  212.831473][ T8521] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  213.148707][ T8530] mac80211_hwsim hwsim5 O3ãc¤±: renamed from wlan1 (while UP)
[  213.795450][ T8557] netlink: 'syz.3.760': attribute type 10 has an invalid length.
[  213.931388][ T8557] veth0_to_bond: entered promiscuous mode
[  213.954486][ T8557] veth0_to_bond: entered allmulticast mode
[  213.969427][ T8557] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  214.177332][ T8575] netlink: 'syz.0.770': attribute type 2 has an invalid length.
[  214.196556][ T8575] netlink: 'syz.0.770': attribute type 8 has an invalid length.
[  214.204349][ T8575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.770'.
[  215.152269][ T8597] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.772'.
[  216.009630][ T8614] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.781'.
[  216.156666][ T8618] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.782'.
[  216.193782][ T8621] pim6reg1: entered promiscuous mode
[  216.209217][ T8621] pim6reg1: entered allmulticast mode
[  216.770846][ T8618] netlink: 'syz.0.782': attribute type 10 has an invalid length.
[  216.790288][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.782'.
[  216.820128][ T8618] batadv0: entered allmulticast mode
[  216.877186][ T8618] bond0: (slave batadv0): Releasing backup interface
[  216.933008][ T8618] bridge0: port 3(batadv0) entered blocking state
[  216.957177][ T8618] bridge0: port 3(batadv0) entered disabled state
[  217.222777][ T8630] syzkaller0: entered promiscuous mode
[  217.228956][ T8630] syzkaller0: entered allmulticast mode
[  217.433762][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.787'.
[  217.447758][   T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  217.457270][   T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  219.033959][ T8637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.787'.
[  219.043154][ T8637] netlink: 13 bytes leftover after parsing attributes in process `syz.0.787'.
[  219.053072][ T8641] netlink: 'syz.0.787': attribute type 46 has an invalid length.
[  219.061202][ T8641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.787'.
[  219.165349][ T8648] netlink: 'syz.0.790': attribute type 2 has an invalid length.
[  220.237814][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  220.247203][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  220.255421][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  220.269117][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  220.277303][   T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  220.285729][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  220.459323][ T8683] netlink: 176 bytes leftover after parsing attributes in process `syz.0.802'.
[  221.065418][ T8679] chnl_net:caif_netlink_parms(): no params data found
[  221.841092][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.861033][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.896596][ T8679] bridge_slave_0: entered allmulticast mode
[  221.904060][ T8679] bridge_slave_0: entered promiscuous mode
[  221.936605][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.943911][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.952571][ T8679] bridge_slave_1: entered allmulticast mode
[  221.960591][ T8679] bridge_slave_1: entered promiscuous mode
[  222.029382][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.049976][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.203095][ T8679] team0: Port device team_slave_0 added
[  222.234987][ T8679] team0: Port device team_slave_1 added
[  222.376558][   T51] Bluetooth: hci2: command tx timeout
[  222.442057][ T8725] netlink: 'syz.3.812': attribute type 10 has an invalid length.
[  222.525650][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.538580][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.575240][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.589830][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.601116][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.632297][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.659326][ T8729] netlink: 'syz.0.813': attribute type 10 has an invalid length.
[  222.714288][ T8729] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  223.062290][ T8679] hsr_slave_0: entered promiscuous mode
[  223.090191][ T8679] hsr_slave_1: entered promiscuous mode
[  223.122992][ T8679] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.131239][ T8679] Cannot create hsr debugfs directory
[  223.165888][ T8740] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.815'.
[  223.481277][ T8744] netlink: 'syz.3.817': attribute type 21 has an invalid length.
[  223.502478][ T8744] netlink: 'syz.3.817': attribute type 20 has an invalid length.
[  224.456462][   T51] Bluetooth: hci2: command tx timeout
[  225.363320][ T8756] netlink: 'syz.2.820': attribute type 3 has an invalid length.
[  225.391758][ T8756] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.820'.
[  225.394163][ T8757] netlink: 'syz.3.819': attribute type 10 has an invalid length.
[  225.711239][ T8679] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  225.757296][ T8679] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  225.797354][ T8679] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  225.814080][ T8679] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  225.846284][ T8766] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.822'.
[  225.881946][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.822'.
[  225.909830][ T8766] netlink: 'syz.3.822': attribute type 29 has an invalid length.
[  225.926066][ T8766] netlink: 'syz.3.822': attribute type 29 has an invalid length.
[  225.948576][ T8774] netlink: 'syz.0.823': attribute type 7 has an invalid length.
[  225.965883][ T8766] netlink: 'syz.3.822': attribute type 29 has an invalid length.
[  225.969401][ T8774] netlink: 'syz.0.823': attribute type 1 has an invalid length.
[  225.982553][ T8774] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.823'.
[  225.995839][ T8774] netlink: 'syz.0.823': attribute type 10 has an invalid length.
[  226.004627][ T8774] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.823'.
[  226.033734][ T8774] openvswitch: netlink: Flow key attr not present in new flow.
[  226.068975][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.113961][ T8679] 8021q: adding VLAN 0 to HW filter on device team0
[  226.133007][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.140263][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.214289][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.221508][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.291212][   T51] Bluetooth: hci0: ISO packet for unknown connection handle 9
[  226.342291][ T8783] pim6reg0: tun_chr_ioctl cmd 1074025675
[  226.390442][ T8783] pim6reg0: persist enabled
[  226.503444][ T8782] netlink: 'syz.3.825': attribute type 10 has an invalid length.
[  226.520209][ T8789] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.827'.
[  226.527203][ T8782] netlink: 168 bytes leftover after parsing attributes in process `syz.3.825'.
[  226.539406][   T51] Bluetooth: hci2: command tx timeout
[  226.557169][ T8789] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.827'.
[  226.577985][ T8789] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.827'.
[  226.949113][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0
[  226.967927][ T8802] netlink: 'syz.3.830': attribute type 1 has an invalid length.
[  227.955724][ T8679] veth0_vlan: entered promiscuous mode
[  228.000043][ T8679] veth1_vlan: entered promiscuous mode
[  228.001782][ T8831] openvswitch: netlink: IP tunnel dst address not specified
[  228.346062][ T8679] veth0_macvtap: entered promiscuous mode
[  228.361719][ T8679] veth1_macvtap: entered promiscuous mode
[  228.462713][ T8679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.473441][ T8679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.483441][ T8679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.494048][ T8679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.504065][ T8679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.514933][ T8679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.527500][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.583625][ T8679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.617168][   T51] Bluetooth: hci2: command tx timeout
[  228.647425][ T8679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.686511][ T8679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.718622][ T8679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.746388][ T8679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.775414][ T8679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.804538][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.843905][ T8679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.885863][ T8679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.902707][ T8679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.928647][ T8679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  230.656487][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.665037][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  230.787458][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  230.809052][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.240062][ T8874] netlink: 'syz.4.795': attribute type 3 has an invalid length.
[  231.259717][ T8874] netlink: 'syz.4.795': attribute type 1 has an invalid length.
[  231.287560][ T8874] __nla_validate_parse: 5 callbacks suppressed
[  231.287577][ T8874] netlink: 193404 bytes leftover after parsing attributes in process `syz.4.795'.
[  231.687105][ T8883] netlink: 'syz.4.849': attribute type 10 has an invalid length.
[  231.704349][ T8883] netlink: 55 bytes leftover after parsing attributes in process `syz.4.849'.
[  232.271643][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.282013][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.292079][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.302076][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.311784][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.321541][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.331684][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.341630][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.351321][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  232.361027][ T8893] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  233.238945][ T8888] veth0_vlan: entered allmulticast mode
[  233.284199][ T8890] veth0_vlan: left promiscuous mode
[  233.297370][ T8890] veth0_vlan: entered promiscuous mode
[  233.612487][ T8903] netlink: 'syz.0.856': attribute type 3 has an invalid length.
[  233.628905][ T8903] netlink: 'syz.0.856': attribute type 1 has an invalid length.
[  233.649075][ T8903] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.856'.
[  233.792807][ T8908] syzkaller0: entered promiscuous mode
[  233.800885][ T8908] syzkaller0: entered allmulticast mode
[  235.616196][ T8920] netlink: 'syz.4.860': attribute type 4 has an invalid length.
[  235.674874][ T8920] netlink: 140 bytes leftover after parsing attributes in process `syz.4.860'.
[  236.066538][ T8936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'.
[  236.108128][ T8936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'.
[  236.110896][ T8933] can: request_module (can-proto-5) failed.
[  236.119737][ T8936] netlink: 60 bytes leftover after parsing attributes in process `syz.0.866'.
[  236.279545][ T8945] netlink: 156 bytes leftover after parsing attributes in process `syz.2.869'.
[  236.399147][ T8948] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.870'.
[  237.310527][ T8979] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.877'.
[  237.377120][ T8982] netlink: 168 bytes leftover after parsing attributes in process `syz.3.879'.
[  238.994708][ T9018] IPv6: NLM_F_REPLACE set, but no existing node found!
[  239.889109][ T9051] netlink: 'syz.0.899': attribute type 4 has an invalid length.
[  239.921748][ T9051] netlink: 152 bytes leftover after parsing attributes in process `syz.0.899'.
[  239.952564][ T9051] .þ: renamed from bond0
[  240.205197][ T9061] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.901'.
[  240.626814][ T9065] syzkaller0: entered promiscuous mode
[  240.749284][ T9065] syzkaller0: entered allmulticast mode
[  240.991709][ T9065] netlink: 'syz.2.904': attribute type 10 has an invalid length.
[  241.038074][ T9065] netlink: 40 bytes leftover after parsing attributes in process `syz.2.904'.
[  241.169622][ T9065] net_ratelimit: 3320 callbacks suppressed
[  241.169639][ T9065] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  243.771893][ T9105] netlink: 1 bytes leftover after parsing attributes in process `syz.4.911'.
[  243.882830][ T9110] netlink: 'syz.4.913': attribute type 10 has an invalid length.
[  243.898902][ T9110] netlink: 40 bytes leftover after parsing attributes in process `syz.4.913'.
[  243.912786][ T9110] vcan0: entered promiscuous mode
[  243.919375][ T9110] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  244.078745][ T9111] syzkaller0: entered promiscuous mode
[  244.084295][ T9111] syzkaller0: entered allmulticast mode
[  244.196537][ T9111] netlink: 'syz.0.912': attribute type 10 has an invalid length.
[  244.215615][ T9111] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.223700][ T9111] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.298885][ T9133] can: request_module (can-proto-0) failed.
[  244.399274][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.407186][ T9111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.414759][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.422084][ T9111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.453273][ T9111] bridge0: entered promiscuous mode
[  244.461001][ T9111] .þ: (slave bridge0): Enslaving as an active interface with an up link
[  244.973238][ T9154] netlink: 'syz.2.924': attribute type 1 has an invalid length.
[  244.983070][ T9154] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.924'.
[  246.527347][ T9153] netlink: 'syz.4.923': attribute type 21 has an invalid length.
[  246.535649][ T9153] netlink: 132 bytes leftover after parsing attributes in process `syz.4.923'.
[  246.949915][ T9192] netlink: 164 bytes leftover after parsing attributes in process `syz.4.932'.
[  247.134703][ T9196] netlink: 'syz.2.933': attribute type 23 has an invalid length.
[  247.171036][ T9201] netlink: 14 bytes leftover after parsing attributes in process `syz.4.935'.
[  250.320947][ T9216] netlink: 'syz.2.939': attribute type 10 has an invalid length.
[  250.424257][ T9216] hsr_slave_0 (unregistering): left promiscuous mode
[  250.620789][ T9232] netlink: 'syz.0.944': attribute type 10 has an invalid length.
[  250.724926][ T9236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.945'.
[  250.783293][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.925354][ T9236] bridge_slave_0 (unregistering): left allmulticast mode
[  250.939428][ T9236] bridge_slave_0 (unregistering): left promiscuous mode
[  250.948169][ T9236] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.109642][ T9242] netlink: 830 bytes leftover after parsing attributes in process `syz.0.947'.
[  251.216489][ T9245] netlink: 60 bytes leftover after parsing attributes in process `syz.4.948'.
[  251.225628][ T9245] netlink: 60 bytes leftover after parsing attributes in process `syz.4.948'.
[  251.262356][ T9245] netlink: 'syz.4.948': attribute type 4 has an invalid length.
[  251.281258][ T9245] netlink: 152 bytes leftover after parsing attributes in process `syz.4.948'.
[  251.291342][ T9247] sctp: [Deprecated]: syz.0.949 (pid 9247) Use of int in maxseg socket option.
[  251.291342][ T9247] Use struct sctp_assoc_value instead
[  251.420635][ T9245] : renamed from bond0 (while UP)
[  251.806551][ T9260] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.954'.
[  252.208185][ T9262] Ÿë
: port 1(veth0_to_team) entered blocking state
[  252.229909][ T9262] Ÿë
: port 1(veth0_to_team) entered disabled state
[  252.258945][ T9262] veth0_to_team: entered allmulticast mode
[  252.278155][ T9262] veth0_to_team: entered promiscuous mode
[  252.789887][ T9288] netlink: 'syz.0.960': attribute type 10 has an invalid length.
[  252.833608][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.841222][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.207010][ T9304] netlink: 'syz.0.964': attribute type 12 has an invalid length.
[  253.235845][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.0.964'.
[  255.919565][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  255.925947][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  256.050983][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.078844][ T9308] netlink: 'syz.4.967': attribute type 7 has an invalid length.
[  256.161552][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.258245][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.342078][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.249923][ T9369] veth1_to_bond: entered allmulticast mode
[  257.283227][ T9371] netlink: 'syz.0.985': attribute type 10 has an invalid length.
[  257.303547][ T9371] netlink: 156 bytes leftover after parsing attributes in process `syz.0.985'.
[  257.345883][ T9372] »»»»»»: renamed from veth0_vlan (while UP)
[  257.414895][ T9374] netlink: 'syz.2.986': attribute type 2 has an invalid length.
[  257.425530][ T9374] netlink: 164 bytes leftover after parsing attributes in process `syz.2.986'.
[  257.618025][ T9377] netlink: 'syz.0.987': attribute type 9 has an invalid length.
[  257.631662][ T9377] netlink: 399 bytes leftover after parsing attributes in process `syz.0.987'.
[  259.243208][ T9396] netlink: 'syz.4.993': attribute type 9 has an invalid length.
[  259.254350][ T9396] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.993'.
[  259.537237][ T9378] netlink: 'syz.0.987': attribute type 10 has an invalid length.
[  259.560929][ T9378] team0: Port device dummy0 added
[  259.681779][   T11] hsr_slave_0: left promiscuous mode
[  259.689763][   T11] hsr_slave_1: left promiscuous mode
[  259.702936][   T11] team0: left allmulticast mode
[  259.712246][   T11] team_slave_0: left allmulticast mode
[  259.721852][   T11] team_slave_1: left allmulticast mode
[  259.728810][   T11] team0: left promiscuous mode
[  259.733803][   T11] team_slave_0: left promiscuous mode
[  259.744325][   T11] team_slave_1: left promiscuous mode
[  259.752020][   T11] bridge0: port 3(team0) entered disabled state
[  259.766496][   T11] bridge_slave_1: left allmulticast mode
[  259.772618][   T11] bridge_slave_1: left promiscuous mode
[  259.778924][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.795947][   T11] bridge_slave_0: left allmulticast mode
[  259.803606][   T11] bridge_slave_0: left promiscuous mode
[  259.811324][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.854358][   T11] veth0_macvtap: left promiscuous mode
[  259.860342][   T11] veth1_vlan: left promiscuous mode
[  259.868917][   T11] veth0_vlan: left promiscuous mode
[  259.910078][ T9399] syz.2.994[9399] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  259.910273][ T9399] syz.2.994[9399] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  260.106245][ T9403] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.995'.
[  260.668819][   T11] team0 (unregistering): Port device team_slave_1 removed
[  260.742415][   T11] team0 (unregistering): Port device team_slave_0 removed
[  260.803296][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.415317][   T11] bond0 (unregistering): Released all slaves
[  261.534357][ T9400] netlink: 'syz.2.994': attribute type 10 has an invalid length.
[  261.542448][ T9400] netlink: 55 bytes leftover after parsing attributes in process `syz.2.994'.
[  261.879960][ T9400] team0: Port device macvlan0 removed
[  262.415081][ T9414] netlink: 'syz.2.997': attribute type 3 has an invalid length.
[  262.471982][ T9414] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.997'.
[  262.822336][ T9436] netlink: 'syz.0.1002': attribute type 3 has an invalid length.
[  262.834823][ T9436] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.1002'.
[  263.445427][ T9450] sctp: [Deprecated]: syz.2.1007 (pid 9450) Use of int in maxseg socket option.
[  263.445427][ T9450] Use struct sctp_assoc_value instead
[  264.259239][ T9465] netlink: 'syz.4.1014': attribute type 21 has an invalid length.
[  264.268574][ T9465] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1014'.
[  264.278755][ T9465] netlink: 'syz.4.1014': attribute type 4 has an invalid length.
[  264.293975][ T9465] netlink: 'syz.4.1014': attribute type 5 has an invalid length.
[  264.310594][ T9465] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1014'.
[  264.484365][ T9476] netlink: 211 bytes leftover after parsing attributes in process `syz.4.1019'.
[  264.516208][ T9476] sit0: entered allmulticast mode
[  265.177359][ T9505] Dead loop on virtual device ip6_vti0, fix it urgently!
[  268.432621][ T5777] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  268.443777][ T5777] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  268.452184][ T5777] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  268.463883][ T5777] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  268.473555][ T5777] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  268.482168][ T5777] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  269.078883][ T5770] syz_tun (unregistering): left allmulticast mode
[  269.085468][ T5770] syz_tun (unregistering): left promiscuous mode
[  269.133654][ T5770] Ÿë
: port 1(syz_tun) entered disabled state
[  269.178493][ T9546] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  269.331220][ T9548] netlink: 'syz.4.1042': attribute type 10 has an invalid length.
[  269.341057][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1042'.
[  269.351089][ T9548] team0: entered promiscuous mode
[  269.357111][ T9548] team_slave_0: entered promiscuous mode
[  269.363881][ T9548] team_slave_1: entered promiscuous mode
[  269.373858][ T9548] team0: entered allmulticast mode
[  269.390554][ T9548] team_slave_0: entered allmulticast mode
[  269.396904][ T9548] team_slave_1: entered allmulticast mode
[  269.408457][ T9548] bridge0: port 1(team0) entered blocking state
[  269.415412][ T9548] bridge0: port 1(team0) entered disabled state
[  269.449313][ T9548] bridge0: port 1(team0) entered blocking state
[  269.456198][ T9548] bridge0: port 1(team0) entered forwarding state
[  269.510134][ T9555] netlink: 'syz.2.1043': attribute type 10 has an invalid length.
[  269.518366][ T9555] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1043'.
[  269.531180][ T9532] chnl_net:caif_netlink_parms(): no params data found
[  269.539088][ T9555] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  269.664753][ T9557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1044'.
[  270.227944][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.245532][ T9532] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.266062][ T9532] bridge_slave_0: entered allmulticast mode
[  270.275136][ T9532] bridge_slave_0: entered promiscuous mode
[  270.359238][ T9532] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.370685][ T9532] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.380751][ T9532] bridge_slave_1: entered allmulticast mode
[  270.395465][ T9532] bridge_slave_1: entered promiscuous mode
[  270.545453][ T5777] Bluetooth: hci4: command tx timeout
[  270.619749][ T9532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.644604][ T9532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.098770][ T9532] team0: Port device team_slave_0 added
[  271.691675][ T9532] team0: Port device team_slave_1 added
[  271.949776][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.973557][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.001034][ T9532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.048436][ T9532] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.068280][ T9532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.131636][ T9532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.190423][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1053'.
[  272.230254][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1053'.
[  272.257700][ T9532] hsr_slave_0: entered promiscuous mode
[  272.266757][ T9532] hsr_slave_1: entered promiscuous mode
[  272.273294][ T9532] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  272.282178][ T9532] Cannot create hsr debugfs directory
[  272.288817][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1053'.
[  272.616935][ T5777] Bluetooth: hci4: command tx timeout
[  272.751052][ T9532] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  272.810976][ T9532] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  272.877840][ T9532] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  272.900017][ T9532] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  272.908071][ T9648] netlink: 'syz.4.1056': attribute type 16 has an invalid length.
[  272.922001][ T9648] netlink: 'syz.4.1056': attribute type 3 has an invalid length.
[  272.935994][ T9648] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1056'.
[  273.144379][ T9532] 8021q: adding VLAN 0 to HW filter on device bond0
[  273.219452][ T9532] 8021q: adding VLAN 0 to HW filter on device team0
[  273.265636][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.272867][ T6588] bridge0: port 1(bridge_slave_0) entered forwarding state
[  273.283383][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.290600][ T6588] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.382452][ T9675] macsec0: entered allmulticast mode
[  273.745369][ T9689] netlink: 'syz.0.1063': attribute type 1 has an invalid length.
[  273.774742][ T9689] netlink: 'syz.0.1063': attribute type 4 has an invalid length.
[  273.806883][ T9689] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1063'.
[  274.404635][ T9532] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.697413][ T5777] Bluetooth: hci4: command tx timeout
[  275.592336][ T9701] tap0: tun_chr_ioctl cmd 1074025675
[  275.625530][ T9701] tap0: persist enabled
[  276.807933][ T5777] Bluetooth: hci4: command tx timeout
[  276.932500][ T9532] veth0_vlan: entered promiscuous mode
[  276.975217][ T9532] veth1_vlan: entered promiscuous mode
[  277.076294][ T9532] veth0_macvtap: entered promiscuous mode
[  277.101149][ T9532] veth1_macvtap: entered promiscuous mode
[  277.138879][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.149576][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.159998][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.170671][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.180663][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.196455][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.217289][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  277.234052][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.247300][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.271661][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.295433][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.315840][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.333502][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.349972][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.365270][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.382173][ T9532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  277.393174][ T9532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  277.412616][ T9532] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.450869][ T9532] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.481101][ T9532] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.505836][ T9532] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  277.533975][ T9532] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  277.702907][ T6588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.719628][ T6588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.773377][ T6787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  277.785116][ T6787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  277.945577][ T9729] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1071'.
[  278.366056][ T9740] netlink: 'syz.5.1076': attribute type 2 has an invalid length.
[  278.379870][ T9740] netlink: 'syz.5.1076': attribute type 8 has an invalid length.
[  278.394357][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1076'.
[  280.157408][ T9802] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1092'.
[  282.742062][ T9804] netlink: 'syz.0.1093': attribute type 10 has an invalid length.
[  282.947342][ T9809] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1095'.
[  286.113259][ T9830] bridge0: port 3(veth0_to_bridge) entered blocking state
[  286.151371][ T9830] bridge0: port 3(veth0_to_bridge) entered disabled state
[  286.202891][ T9830] veth0_to_bridge: entered allmulticast mode
[  286.219820][ T9830] veth0_to_bridge: entered promiscuous mode
[  286.257883][ T9830] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  286.346621][ T9830] bridge0: port 3(veth0_to_bridge) entered blocking state
[  286.353976][ T9830] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  287.078229][ T9842] netlink: 'syz.4.1103': attribute type 21 has an invalid length.
[  287.111087][ T9842] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1103'.
[  287.267752][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.281689][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.295139][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.308582][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.322021][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.335617][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.349106][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.362601][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.376072][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.389773][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  287.652488][ T9857] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1107'.
[  288.191708][ T9867] netlink: 'syz.5.1110': attribute type 10 has an invalid length.
[  288.261800][ T9867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1110'.
[  288.336950][ T9867] team0: entered promiscuous mode
[  288.366263][ T9867] team_slave_0: entered promiscuous mode
[  288.407552][ T9867] team_slave_1: entered promiscuous mode
[  288.442838][ T9867] team0: entered allmulticast mode
[  288.466771][ T9867] team_slave_0: entered allmulticast mode
[  288.496979][ T9867] team_slave_1: entered allmulticast mode
[  288.566624][ T9867] bridge0: port 4(team0) entered blocking state
[  288.573840][ T9867] bridge0: port 4(team0) entered disabled state
[  288.800826][ T9867] bridge0: port 4(team0) entered blocking state
[  288.807310][ T9867] bridge0: port 4(team0) entered forwarding state
[  288.907983][ T9869] netlink: 'syz.5.1110': attribute type 10 has an invalid length.
[  288.915896][ T9869] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1110'.
[  289.001028][ T9869] batman_adv: batadv0: Adding interface: virt_wifi0
[  289.055482][ T9869] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  289.130478][ T9869] batman_adv: batadv0: Interface activated: virt_wifi0
[  290.385308][ T9893] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1119'.
[  292.277044][    C1] net_ratelimit: 4190 callbacks suppressed
[  292.277064][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  292.295871][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.310170][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  292.323894][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.336719][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  292.349548][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.363160][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  292.377014][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  292.389797][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  292.402643][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.286882][    C1] net_ratelimit: 6024 callbacks suppressed
[  297.286900][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  297.305919][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.318483][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  297.331130][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.344349][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  297.357440][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.370295][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  297.382857][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  297.396107][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  297.408885][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  298.429080][ T9934] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1128'.
[  298.656464][ T5777] Bluetooth: hci4: unexpected event 0x16 length: 15 > 6
[  298.954361][ T9946] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1131'.
[  299.124017][ T9949] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1131'.
[  299.227375][ T9933] delete_channel: no stack
[  300.441631][ T9975] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1138'.
[  300.737544][ T9979] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1140'.
[  301.046614][ T9986] netlink: 'syz.5.1143': attribute type 28 has an invalid length.
[  301.054541][ T9986] netlink: 'syz.5.1143': attribute type 3 has an invalid length.
[  301.124050][ T9986] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1143'.
[  301.691704][T10006] FAULT_INJECTION: forcing a failure.
[  301.691704][T10006] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  301.751166][T10006] CPU: 0 PID: 10006 Comm: syz.4.1149 Not tainted syzkaller #0
[  301.758700][T10006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  301.768808][T10006] Call Trace:
[  301.772118][T10006]  <TASK>
[  301.775086][T10006]  dump_stack_lvl+0x16c/0x230
[  301.779823][T10006]  ? show_regs_print_info+0x20/0x20
[  301.785062][T10006]  ? load_image+0x3b0/0x3b0
[  301.789613][T10006]  ? __lock_acquire+0x7c80/0x7c80
[  301.794763][T10006]  ? snprintf+0xdb/0x120
[  301.799079][T10006]  should_fail_ex+0x39d/0x4d0
[  301.803804][T10006]  _copy_to_user+0x2f/0xa0
[  301.808280][T10006]  simple_read_from_buffer+0xe7/0x150
[  301.813712][T10006]  proc_fail_nth_read+0x1e3/0x250
[  301.818788][T10006]  ? proc_fault_inject_write+0x340/0x340
[  301.824483][T10006]  ? fsnotify_perm+0x271/0x5e0
[  301.829318][T10006]  ? proc_fault_inject_write+0x340/0x340
[  301.834985][T10006]  vfs_read+0x27e/0x920
[  301.839192][T10006]  ? kernel_read+0x1e0/0x1e0
[  301.843822][T10006]  ? __fget_files+0x28/0x4d0
[  301.848453][T10006]  ? __fget_files+0x44a/0x4d0
[  301.853178][T10006]  ? __fdget_pos+0x2a3/0x330
[  301.857811][T10006]  ? ksys_read+0x75/0x250
[  301.862185][T10006]  ksys_read+0x147/0x250
[  301.866478][T10006]  ? vfs_write+0x940/0x940
[  301.870941][T10006]  ? lockdep_hardirqs_on+0x98/0x150
[  301.876182][T10006]  do_syscall_64+0x55/0xb0
[  301.880636][T10006]  ? clear_bhb_loop+0x40/0x90
[  301.885361][T10006]  ? clear_bhb_loop+0x40/0x90
[  301.890093][T10006]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  301.896035][T10006] RIP: 0033:0x7f172438e15c
[  301.900494][T10006] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  301.920154][T10006] RSP: 002b:00007f1725162030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  301.928624][T10006] RAX: ffffffffffffffda RBX: 00007f17245e5fa0 RCX: 00007f172438e15c
[  301.936632][T10006] RDX: 000000000000000f RSI: 00007f17251620a0 RDI: 0000000000000007
[  301.944634][T10006] RBP: 00007f1725162090 R08: 0000000000000000 R09: 0000000000000000
[  301.952729][T10006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  301.960737][T10006] R13: 00007f17245e6038 R14: 00007f17245e5fa0 R15: 00007ffee0318fc8
[  301.968766][T10006]  </TASK>
[  302.297105][    C1] net_ratelimit: 5679 callbacks suppressed
[  302.297125][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.315628][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  302.328297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.341669][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  302.354878][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.367448][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  302.379997][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.393257][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  302.406462][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  302.418982][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  307.307715][    C1] net_ratelimit: 4606 callbacks suppressed
[  307.307733][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.326903][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  307.341389][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  307.353975][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.367151][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  307.379702][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.392297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.405449][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  307.419389][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  307.432549][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  309.141414][T10034] netlink: 'syz.5.1156': attribute type 10 has an invalid length.
[  309.489078][T10034] bridge0: port 4(team0) entered disabled state
[  309.590477][T10034] team0: left allmulticast mode
[  309.617582][T10034] team_slave_0: left allmulticast mode
[  309.666664][T10034] team_slave_1: left allmulticast mode
[  309.676907][T10034] team0: left promiscuous mode
[  309.712905][T10034] team_slave_0: left promiscuous mode
[  309.765839][T10034] team_slave_1: left promiscuous mode
[  309.799195][T10034] bridge0: port 4(team0) entered disabled state
[  309.889379][T10034] batman_adv: batadv0: Adding interface: team0
[  309.931737][T10034] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  310.007740][T10034] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  311.197345][T10073] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.1166'.
[  311.237413][T10074] netlink: 'syz.4.1165': attribute type 3 has an invalid length.
[  311.289815][T10074] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1165'.
[  312.148456][T10084] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1168'.
[  312.317400][    C1] net_ratelimit: 4790 callbacks suppressed
[  312.317420][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.336707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  312.351628][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  312.364289][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.377513][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  312.390199][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.402986][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.416472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  312.430444][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  312.443794][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  313.170140][T10093] delete_channel: no stack
[  313.610836][T10102] netlink: 'syz.0.1174': attribute type 10 has an invalid length.
[  314.233795][T10102] team0: Device veth1_macvtap failed to register rx_handler
[  314.968315][ T5777] Bluetooth: hci0: unknown advertising packet type: 0xff
[  314.968400][ T5777] Bluetooth: hci0: unknown advertising packet type: 0x80
[  314.976975][ T5777] Bluetooth: hci0: unknown advertising packet type: 0x09
[  314.984193][ T5777] Bluetooth: hci0: Malformed LE Event: 0x02
[  315.081767][ T5777] Bluetooth: hci4: Malformed LE Event: 0x02
[  315.377651][T10131] netlink: 142528 bytes leftover after parsing attributes in process `syz.2.1181'.
[  315.462404][T10131] netlink: 'syz.2.1181': attribute type 1 has an invalid length.
[  315.484710][T10132] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.1182'.
[  315.784652][T10139] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.1184'.
[  316.397820][T10151] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1188'.
[  316.423640][T10146] netlink: 'syz.2.1186': attribute type 2 has an invalid length.
[  316.464782][T10146] netlink: 'syz.2.1186': attribute type 9 has an invalid length.
[  316.527654][T10146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1186'.
[  316.898284][T10155] netlink: 'syz.4.1189': attribute type 10 has an invalid length.
[  316.949979][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1189'.
[  317.326830][    C1] net_ratelimit: 5535 callbacks suppressed
[  317.326851][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  317.346589][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  317.359062][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  317.372453][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  317.384876][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  317.397322][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  317.410228][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  317.423672][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  317.436530][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  317.450444][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  317.483498][T10164] netlink: 'syz.0.1191': attribute type 21 has an invalid length.
[  317.586677][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  317.599816][T10164] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1191'.
[  317.611555][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  317.673357][T10168] netlink: 'syz.4.1192': attribute type 21 has an invalid length.
[  317.710132][T10168] netlink: 'syz.4.1192': attribute type 12 has an invalid length.
[  317.743757][T10168] netlink: 'syz.4.1192': attribute type 13 has an invalid length.
[  317.778035][T10168] netlink: 'syz.4.1192': attribute type 14 has an invalid length.
[  317.812284][T10168] netlink: 'syz.4.1192': attribute type 15 has an invalid length.
[  317.850384][T10168] netlink: 12914 bytes leftover after parsing attributes in process `syz.4.1192'.
[  319.689819][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1198'.
[  322.337296][    C1] net_ratelimit: 5199 callbacks suppressed
[  322.337317][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  322.355603][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  322.368283][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  322.380615][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  322.393129][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  322.406066][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  322.419412][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  322.432229][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  322.446110][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  322.458561][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  322.958764][T10215] Ÿë
: port 2(gretap0) entered blocking state
[  322.965260][T10215] Ÿë
: port 2(gretap0) entered disabled state
[  322.977795][T10215] gretap0: entered allmulticast mode
[  322.984854][T10215] gretap0: entered promiscuous mode
[  323.012039][T10227] validate_nla: 4 callbacks suppressed
[  323.012057][T10227] netlink: 'syz.0.1207': attribute type 10 has an invalid length.
[  323.039400][T10227] .þ: left promiscuous mode
[  323.043973][T10227] bond_slave_0: left promiscuous mode
[  323.071063][T10227] bond_slave_1: left promiscuous mode
[  323.081194][T10227] bridge0: left promiscuous mode
[  323.108839][T10227] bond_slave_0: entered promiscuous mode
[  323.114828][T10227] bond_slave_1: entered promiscuous mode
[  323.158795][T10227] 8021q: adding VLAN 0 to HW filter on device .þ
[  323.183791][T10227] team0: Port device .þ added
[  323.297405][T10231] netlink: 'syz.4.1208': attribute type 5 has an invalid length.
[  323.601429][T10237] netlink: 'syz.0.1211': attribute type 39 has an invalid length.
[  323.707003][T10237] veth0_macvtap: left promiscuous mode
[  324.776857][T10246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1213'.
[  325.564818][T10265] netlink: 'syz.4.1217': attribute type 46 has an invalid length.
[  325.639473][T10265] netlink: 'syz.4.1217': attribute type 46 has an invalid length.
[  326.357164][T10284] netlink: 'syz.0.1222': attribute type 10 has an invalid length.
[  327.348214][    C1] net_ratelimit: 3379 callbacks suppressed
[  327.348250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  327.374241][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.388018][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  327.408597][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  327.421772][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.438931][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  327.452013][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.465708][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  327.480517][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  327.499800][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  328.476889][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1222'.
[  328.509803][T10284] team0: entered promiscuous mode
[  328.520455][T10284] team_slave_0: entered promiscuous mode
[  328.540930][T10284] team_slave_1: entered promiscuous mode
[  328.567085][T10284] geneve1: entered promiscuous mode
[  328.575770][T10284] dummy0: entered promiscuous mode
[  328.595733][T10284] .þ: entered promiscuous mode
[  328.605738][T10284] bridge0: entered promiscuous mode
[  328.632656][T10284] team0: entered allmulticast mode
[  328.678480][T10284] team_slave_0: entered allmulticast mode
[  328.684432][T10284] team_slave_1: entered allmulticast mode
[  328.715252][T10284] geneve1: entered allmulticast mode
[  328.734530][T10284] dummy0: entered allmulticast mode
[  328.746541][T10284] .þ: entered allmulticast mode
[  328.759968][T10284] bond_slave_0: entered allmulticast mode
[  328.771978][T10284] bond_slave_1: entered allmulticast mode
[  328.784015][T10284] bridge0: entered allmulticast mode
[  328.804989][T10284] bridge0: port 4(team0) entered blocking state
[  328.820954][T10284] bridge0: port 4(team0) entered disabled state
[  328.864692][T10292] netlink: 'syz.5.1223': attribute type 10 has an invalid length.
[  328.881910][T10292] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1223'.
[  328.895711][T10292] dummy0: entered promiscuous mode
[  328.905461][T10292] dummy0: entered allmulticast mode
[  328.918999][T10292] bridge0: port 4(dummy0) entered blocking state
[  328.932823][T10292] bridge0: port 4(dummy0) entered disabled state
[  328.944855][T10292] bridge0: port 4(dummy0) entered blocking state
[  328.951452][T10292] bridge0: port 4(dummy0) entered forwarding state
[  329.002239][T10291] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  329.030592][T10301] netlink: 'syz.2.1226': attribute type 2 has an invalid length.
[  329.812807][T10321] netlink: 'syz.2.1231': attribute type 1 has an invalid length.
[  331.102619][ T6588] wlan1: Trigger new scan to find an IBSS to join
[  332.366466][    C1] net_ratelimit: 3031 callbacks suppressed
[  332.366560][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.435139][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.466904][T10342] netlink: 'syz.4.1237': attribute type 10 has an invalid length.
[  332.470755][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  332.474783][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1237'.
[  332.569741][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  332.594007][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.641035][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.654016][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.667058][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  332.680705][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  332.695297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  334.081410][ T6588] wlan1: Trigger new scan to find an IBSS to join
[  336.057658][ T6787] wlan1: Creating new IBSS network, BSSID 32:94:17:b9:52:05
[  336.418988][T10408] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1255'.
[  336.583738][T10402] syzkaller0: entered promiscuous mode
[  336.705987][T10402] syzkaller0: entered allmulticast mode
[  337.376459][    C1] net_ratelimit: 3729 callbacks suppressed
[  337.376476][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  337.397599][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  337.410198][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.424404][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.436972][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.449651][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.462886][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  337.475672][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  337.489563][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  337.502711][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  337.600352][T10422] netlink: 'syz.4.1259': attribute type 3 has an invalid length.
[  337.664106][T10422] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1259'.
[  338.526959][T10442] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.1263'.
[  342.386551][    C1] net_ratelimit: 4792 callbacks suppressed
[  342.386572][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.405534][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  342.418175][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  342.431956][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.445172][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  342.459487][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.472038][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.485350][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  342.497914][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  342.511970][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  345.005257][T10447] netlink: 'syz.0.1264': attribute type 1 has an invalid length.
[  345.018609][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  345.042701][T10447] netlink: 'syz.0.1264': attribute type 4 has an invalid length.
[  345.064553][T10447] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1264'.
[  345.434023][T10461] netlink: 'syz.2.1268': attribute type 41 has an invalid length.
[  345.456767][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1268'.
[  345.483428][T10462] netlink: 'syz.0.1269': attribute type 39 has an invalid length.
[  346.253497][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  346.268726][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  346.279878][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  346.289399][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  346.298560][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  346.306096][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  347.396652][    C1] net_ratelimit: 5617 callbacks suppressed
[  347.396674][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.415301][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.428531][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  347.441049][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  347.454870][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.467942][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  347.481658][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.494179][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  347.507356][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  347.519869][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  348.376687][   T51] Bluetooth: hci3: command tx timeout
[  350.463083][   T51] Bluetooth: hci3: command tx timeout
[  352.406583][    C1] net_ratelimit: 6303 callbacks suppressed
[  352.406609][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.425617][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  352.438181][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.451988][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.465216][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  352.479036][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.491832][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.505116][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  352.517710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  352.531760][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  352.546793][   T51] Bluetooth: hci3: command tx timeout
[  354.616640][   T51] Bluetooth: hci3: command tx timeout
[  357.417261][    C1] net_ratelimit: 5937 callbacks suppressed
[  357.417281][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  357.435960][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.450204][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.463011][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.475710][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.488381][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.501662][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  357.514367][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  357.528220][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  357.541439][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  360.113265][ T6788] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  360.417260][T10498] sit0: entered allmulticast mode
[  360.975509][ T6788] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.103432][T10469] chnl_net:caif_netlink_parms(): no params data found
[  361.265281][ T6788] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.792945][ T6788] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  362.366942][T10518] syzkaller0: entered promiscuous mode
[  362.399268][T10518] syzkaller0: entered allmulticast mode
[  362.427073][    C1] net_ratelimit: 4868 callbacks suppressed
[  362.427089][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  362.445641][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.459791][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.473205][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  362.487376][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.500155][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.513672][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  362.526443][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  362.541131][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  362.553829][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  367.436503][    C1] net_ratelimit: 4430 callbacks suppressed
[  367.436521][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  367.455135][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  367.469353][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.482964][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  367.497073][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.509722][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.523200][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  367.535922][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  367.550494][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  367.563251][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  368.684043][T10522] netlink: 'syz.2.1282': attribute type 21 has an invalid length.
[  368.693028][T10522] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  368.700331][T10522] IPv6: NLM_F_CREATE should be set when creating new route
[  368.707813][T10522] IPv6: NLM_F_CREATE should be set when creating new route
[  368.715062][T10522] IPv6: NLM_F_CREATE should be set when creating new route
[  369.043683][T10469] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.069729][T10469] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.104183][T10469] bridge_slave_0: entered allmulticast mode
[  369.141034][T10469] bridge_slave_0: entered promiscuous mode
[  369.311956][T10469] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.331431][T10469] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.356221][T10469] bridge_slave_1: entered allmulticast mode
[  369.377792][T10469] bridge_slave_1: entered promiscuous mode
[  369.844977][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  370.115199][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  370.372508][T10469] team0: Port device team_slave_0 added
[  370.505846][T10546] netlink: 'syz.2.1290': attribute type 10 has an invalid length.
[  370.676512][T10547] delete_channel: no stack
[  370.928244][T10546] 8021q: adding VLAN 0 to HW filter on device team0
[  371.005828][T10546] bond0: (slave team0): Enslaving as an active interface with an up link
[  371.049911][T10469] team0: Port device team_slave_1 added
[  372.446962][    C1] net_ratelimit: 3931 callbacks suppressed
[  372.447017][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.471157][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  372.487796][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.518700][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  372.537821][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  372.552255][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.568921][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.590380][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  372.608326][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  372.631703][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  372.791271][T10545] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1289'.
[  372.822871][T10553] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1291'.
[  373.491598][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.519650][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.580359][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.622959][T10571] netlink: 'syz.4.1296': attribute type 10 has an invalid length.
[  373.701088][T10571] bridge0: port 1(team0) entered disabled state
[  373.812853][T10571] team0: left allmulticast mode
[  373.823833][T10571] team_slave_0: left allmulticast mode
[  373.847141][T10571] team_slave_1: left allmulticast mode
[  373.870360][T10571] team0: left promiscuous mode
[  373.885091][T10571] team_slave_0: left promiscuous mode
[  373.907624][T10571] team_slave_1: left promiscuous mode
[  373.934731][T10571] bridge0: port 1(team0) entered disabled state
[  374.007392][T10571] team0: Cannot enslave team device to itself
[  374.365862][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  374.386035][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.446325][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  374.725074][T10595] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  374.769411][T10594] IPv6: Can't replace route, no match found
[  375.349976][T10601] netlink: 'syz.2.1303': attribute type 58 has an invalid length.
[  375.371636][T10601] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1303'.
[  375.535948][T10469] hsr_slave_0: entered promiscuous mode
[  375.558037][T10469] hsr_slave_1: entered promiscuous mode
[  375.590846][T10469] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  375.615097][T10469] Cannot create hsr debugfs directory
[  375.643464][T10606] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.655001][T10606] bridge0: entered allmulticast mode
[  375.726693][T10607] bridge_slave_1: left allmulticast mode
[  375.732411][T10607] bridge_slave_1: left promiscuous mode
[  375.764386][T10607] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.457556][    C1] net_ratelimit: 4669 callbacks suppressed
[  377.457575][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.475929][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.489111][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  377.501672][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.515520][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  377.528017][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  377.540475][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.553111][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  377.566086][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  377.578637][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  377.821995][T10629] netlink: 'syz.2.1311': attribute type 9 has an invalid length.
[  377.840726][T10629] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1311'.
[  378.580465][T10628] delete_channel: no stack
[  378.787523][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  378.793958][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  378.858586][T10637] netlink: 207508 bytes leftover after parsing attributes in process `syz.4.1312'.
[  379.016381][T10635] netlink: 'syz.2.1311': attribute type 9 has an invalid length.
[  379.024313][T10635] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1311'.
[  382.467324][    C1] net_ratelimit: 5641 callbacks suppressed
[  382.467361][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.486362][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  382.500012][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.512564][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.525698][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ce:50:0d:1a:71:aa, vlan:0)
[  382.538229][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.552250][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  382.564789][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  382.577270][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  382.589859][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  383.233251][T10469] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  383.270675][T10663] netlink: 'syz.4.1322': attribute type 10 has an invalid length.
[  383.285714][T10663] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1322'.
[  383.358689][T10469] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  383.459696][T10469] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  383.812830][ T6788] hsr_slave_0: left promiscuous mode
[  383.980599][ T6788] hsr_slave_1: left promiscuous mode
[  384.126684][ T6788] batman_adv: batadv0: Removing interface: team0
[  384.192701][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.200420][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.214510][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.224074][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_1
[  384.233700][ T6788] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  384.241034][ T6788] batman_adv: batadv0: Removing interface: virt_wifi0
[  384.248942][ T6788] bridge0: port 4(dummy0) entered disabled state
[  384.271002][ T6788] veth0_to_bridge: left allmulticast mode
[  384.324663][ T6788] veth0_to_bridge: left promiscuous mode
[  384.383854][ T6788] bridge0: port 3(veth0_to_bridge) entered disabled state
[  384.426805][ T6788] bridge_slave_1: left allmulticast mode
[  384.432544][ T6788] bridge_slave_1: left promiscuous mode
[  384.438586][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.463233][ T6788] bridge_slave_0: left allmulticast mode
[  384.473894][ T6788] bridge_slave_0: left promiscuous mode
[  384.482239][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.599335][ T6788] veth1_macvtap: left promiscuous mode
[  384.604997][ T6788] veth0_macvtap: left promiscuous mode
[  384.614162][ T6788] veth1_vlan: left promiscuous mode
[  384.623619][ T6788] veth0_vlan: left promiscuous mode
[  386.174406][ T6788] team0 (unregistering): Port device team_slave_1 removed
[  386.295237][ T6788] team0 (unregistering): Port device team_slave_0 removed
[  386.391998][ T6788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  386.480416][ T6788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  388.013978][ T6788] bond0 (unregistering): Released all slaves
[  388.136326][T10469] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  388.557816][T10469] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.638625][T10469] 8021q: adding VLAN 0 to HW filter on device team0
[  388.690261][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.697535][ T6586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.728235][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.735472][ T6586] bridge0: port 2(bridge_slave_1) entered forwarding state
[  389.530280][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  390.194703][T10469] veth0_vlan: entered promiscuous mode
[  390.375028][T10469] veth1_vlan: entered promiscuous mode
[  390.506154][T10748] pimreg: tun_chr_ioctl cmd 1074025677
[  390.513731][T10748] pimreg: linktype set to 780
[  390.526209][T10469] veth0_macvtap: entered promiscuous mode
[  390.571265][T10469] veth1_macvtap: entered promiscuous mode
[  390.610338][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.621568][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.631972][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.643206][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.689850][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.700686][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.711079][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  390.721885][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.734550][T10469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.804492][T10753] netlink: 'syz.2.1345': attribute type 10 has an invalid length.
[  390.831016][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.842378][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.852402][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.863654][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.873766][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.884400][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.894303][T10469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.904977][T10469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.916729][T10469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  391.053778][T10469] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  391.069765][T10469] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  391.082145][T10469] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  391.106426][T10469] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  391.466987][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.474903][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.586500][ T6586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  391.603013][ T6586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  391.633743][T10781] netlink: 'syz.4.1351': attribute type 21 has an invalid length.
[  392.703942][T10824] netlink: 'syz.6.1362': attribute type 9 has an invalid length.
[  392.790728][T10824] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.1362'.
[  394.030517][T10835] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1367'.
[  394.685014][T10844] netlink: 'syz.2.1370': attribute type 9 has an invalid length.
[  394.709723][T10844] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1370'.
[  394.747125][T10845] netlink: 'syz.2.1370': attribute type 9 has an invalid length.
[  394.754938][T10845] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1370'.
[  395.689279][T10879] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.1380'.
[  396.224135][T10895] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1384'.
[  396.246074][T10895] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1384'.
[  396.271413][T10894] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1384'.
[  396.290806][T10895] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1384'.
[  396.512849][T10908] netlink: 'syz.6.1388': attribute type 10 has an invalid length.
[  396.529025][T10906] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1387'.
[  396.553169][T10908] macvlan0: entered allmulticast mode
[  396.588653][T10908] veth1_vlan: entered allmulticast mode
[  396.619922][T10908] team0: Port device macvlan0 added
[  396.804651][T10919] netlink: 'syz.2.1391': attribute type 10 has an invalid length.
[  396.964108][T10927] netlink: 'syz.2.1393': attribute type 39 has an invalid length.
[  397.266043][T10935] syz.6.1394[10935] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  397.266516][T10935] syz.6.1394[10935] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  397.416407][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  397.416956][ T5777] Bluetooth: hci1: Opcode 0x206a failed: -110
[  398.476084][T10961] __nla_validate_parse: 2 callbacks suppressed
[  398.476101][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1402'.
[  400.110484][T10961] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1402'.
[  400.346217][T10973] netlink: 'syz.2.1406': attribute type 21 has an invalid length.
[  400.376675][T10973] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1406'.
[  400.408819][T10973] netlink: 'syz.2.1406': attribute type 4 has an invalid length.
[  400.428482][T10973] netlink: 'syz.2.1406': attribute type 5 has an invalid length.
[  400.456843][T10973] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1406'.
[  400.878142][T10990] tap0: tun_chr_ioctl cmd 1074025680
[  401.979907][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1418'.
[  402.815726][T11022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1420'.
[  402.842807][T11022] netlink: 539 bytes leftover after parsing attributes in process `syz.2.1420'.
[  403.019940][T11028] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.1423'.
[  403.325753][T11043] netlink: 'syz.4.1429': attribute type 29 has an invalid length.
[  403.356975][T11043] netlink: 'syz.4.1429': attribute type 29 has an invalid length.
[  404.749972][T11080] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1439'.
[  408.216777][   T29] INFO: task syz.3.959:9286 blocked for more than 143 seconds.
[  408.236385][   T29]       Not tainted syzkaller #0
[  408.241509][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  408.287183][   T29] task:syz.3.959       state:D stack:22248 pid:9286  ppid:5770   flags:0x00004006
[  408.310836][   T29] Call Trace:
[  408.329211][   T29]  <TASK>
[  408.340822][   T29]  __schedule+0x14d2/0x44d0
[  408.356586][   T29]  ? rcu_is_watching+0x15/0xb0
[  408.361488][   T29]  ? asan.module_dtor+0x20/0x20
[  408.379430][   T29]  ? trace_contention_end+0x39/0xe0
[  408.384731][   T29]  ? task_work_cancel+0xa3/0x240
[  408.390265][   T29]  ? task_work_cancel_func+0x210/0x210
[  408.395803][   T29]  schedule+0xbd/0x170
[  408.404224][   T29]  ? _free_event+0xfe/0xf30
[  408.412798][   T29]  _free_event+0x174/0xf30
[  408.427951][   T29]  perf_event_release_kernel+0x836/0x8c0
[  408.446415][   T29]  ? __might_sleep+0xe0/0xe0
[  408.451112][   T29]  ? calc_timer_values+0x400/0x400
[  408.476489][   T29]  ? __fput+0x61c/0x970
[  408.480974][   T29]  ? perf_mmap+0x1630/0x1630
[  408.485637][   T29]  perf_release+0x3b/0x40
[  408.504292][   T29]  __fput+0x234/0x970
[  408.509462][   T29]  task_work_run+0x1ce/0x250
[  408.514170][   T29]  ? task_work_cancel+0x240/0x240
[  408.519913][   T29]  do_exit+0x90b/0x23c0
[  408.526854][   T29]  ? lock_chain_count+0x20/0x20
[  408.531772][   T29]  ? put_task_struct+0xc0/0xc0
[  408.538035][   T29]  ? asm_sysvec_irq_work+0x1a/0x20
[  408.543211][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  408.548904][   T29]  ? asm_sysvec_irq_work+0x1a/0x20
[  408.554137][   T29]  do_group_exit+0x21b/0x2d0
[  408.559305][   T29]  ? _raw_spin_unlock_irq+0x29/0x50
[  408.564555][   T29]  get_signal+0x12fc/0x1400
[  408.569566][   T29]  arch_do_signal_or_restart+0x9c/0x7b0
[  408.575200][   T29]  ? get_sigframe_size+0x20/0x20
[  408.580697][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  408.586694][   T29]  exit_to_user_mode_loop+0x70/0x110
[  408.592062][   T29]  exit_to_user_mode_prepare+0xf6/0x180
[  408.598356][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  408.603885][   T29]  do_syscall_64+0x61/0xb0
[  408.609847][   T29]  ? clear_bhb_loop+0x40/0x90
[  408.614583][   T29]  ? clear_bhb_loop+0x40/0x90
[  408.620989][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  408.627268][   T29] RIP: 0033:0x7fe9973b7e80
[  408.631866][   T29] RSP: 002b:00007fe99815c578 EFLAGS: 00000246
[  408.638869][   T29] RAX: 0000000000000000 RBX: 00007fe9975e5fa8 RCX: 00007fe99738f749
[  408.647296][   T29] RDX: 00007fe99815c580 RSI: 00007fe99815c6b0 RDI: 0000000000000021
[  408.655329][   T29] RBP: 00007fe9975e5fa0 R08: 0000000000745d1e R09: 0000000000000000
[  408.663926][   T29] R10: 0000000000000017 R11: 0000000000000246 R12: 0000000000000000
[  408.672224][   T29] R13: 00007fe9975e6038 R14: 00007ffd3e1d6920 R15: 00007ffd3e1d6a08
[  408.680799][   T29]  </TASK>
[  408.683985][   T29] 
[  408.683985][   T29] Showing all locks held in the system:
[  408.701165][   T29] 1 lock held by rcu_tasks_trace/15:
[  408.706916][   T29] 1 lock held by khungtaskd/29:
[  408.711885][   T29]  #0: ffffffff8cd2ff20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  408.723597][   T29] 3 locks held by kworker/u4:3/49:
[  408.729092][   T29] 2 locks held by getty/5529:
[  408.733933][   T29]  #0: ffff8880312fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  408.744713][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380
[  408.755111][   T29] 2 locks held by syz.0.1451/11123:
[  408.760399][   T29]  #0: ffffffff8cd85ea8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140
[  408.770131][   T29]  #1: ffffffff8cd358f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x448/0x830
[  408.781334][   T29] 1 lock held by syz.4.1452/11125:
[  408.786579][   T29]  #0: ffffffff8cd85ea8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140
[  408.796410][   T29] 1 lock held by syz.6.1453/11130:
[  408.801562][   T29]  #0: ffffffff8cd85ea8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140
[  408.811390][   T29] 
[  408.826322][   T29] =============================================
[  408.826322][   T29] 
[  408.834891][   T29] NMI backtrace for cpu 1
[  408.839266][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  408.846489][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  408.856566][   T29] Call Trace:
[  408.859875][   T29]  <TASK>
[  408.862844][   T29]  dump_stack_lvl+0x16c/0x230
[  408.867592][   T29]  ? show_regs_print_info+0x20/0x20
[  408.872905][   T29]  ? load_image+0x3b0/0x3b0
[  408.877472][   T29]  nmi_cpu_backtrace+0x39b/0x3d0
[  408.882462][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  408.888661][   T29]  ? _printk+0xd0/0x110
[  408.892857][   T29]  ? load_image+0x3b0/0x3b0
[  408.897403][   T29]  ? load_image+0x3b0/0x3b0
[  408.901955][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  408.908071][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  408.914104][   T29]  watchdog+0xf41/0xf80
[  408.918297][   T29]  ? watchdog+0x1e1/0xf80
[  408.922672][   T29]  kthread+0x2fa/0x390
[  408.926779][   T29]  ? hungtask_pm_notify+0x90/0x90
[  408.931840][   T29]  ? kthread_blkcg+0xd0/0xd0
[  408.936496][   T29]  ret_from_fork+0x48/0x80
[  408.940944][   T29]  ? kthread_blkcg+0xd0/0xd0
[  408.945571][   T29]  ret_from_fork_asm+0x11/0x20
[  408.950402][   T29]  </TASK>
[  408.954104][   T29] Sending NMI from CPU 1 to CPUs 0:
[  408.959510][    C0] NMI backtrace for cpu 0
[  408.959533][    C0] CPU: 0 PID: 11124 Comm: syz.0.1451 Not tainted syzkaller #0
[  408.959553][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  408.959563][    C0] RIP: 0010:__sanitizer_cov_trace_switch+0xb2/0x120
[  408.959588][    C0] Code: 77 4e 8b 54 ce 10 65 44 8b 1d b2 1f 7e 7e 41 81 e3 00 01 ff 00 74 13 41 81 fb 00 01 00 00 75 d9 41 83 b8 1c 16 00 00 00 74 cf <45> 8b 98 f8 15 00 00 41 83 fb 03 75 c2 4d 8b 98 00 16 00 00 45 8b
[  408.959602][    C0] RSP: 0018:ffffc900044cf1b0 EFLAGS: 00000246
[  408.959617][    C0] RAX: 0000000000000002 RBX: ffffffff8ed936d6 RCX: 0000000000000003
[  408.959628][    C0] RDX: ffffffff813aa995 RSI: ffffffff8cb9e740 RDI: 0000000000000002
[  408.959638][    C0] RBP: ffffc900044cf2f8 R08: ffff888059bcbc00 R09: 0000000000000001
[  408.959649][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc900044cf2a8
[  408.959660][    C0] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffffff8ed936db
[  408.959671][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  408.959684][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  408.959695][    C0] CR2: 00007f32221adf98 CR3: 000000002b6cd000 CR4: 00000000003506f0
[  408.959709][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  408.959719][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  408.959729][    C0] Call Trace:
[  408.959734][    C0]  <TASK>
[  408.959741][    C0]  unwind_next_frame+0x655/0x2970
[  408.959771][    C0]  ? __reset_page_owner+0x4d/0x190
[  408.959797][    C0]  ? __reset_page_owner+0x4e/0x190
[  408.959821][    C0]  ? __reset_page_owner+0x4e/0x190
[  408.959844][    C0]  ? stack_trace_save+0xe0/0xe0
[  408.959862][    C0]  arch_stack_walk+0x144/0x190
[  408.959881][    C0]  ? __reset_page_owner+0x4e/0x190
[  408.959907][    C0]  stack_trace_save+0x9c/0xe0
[  408.959925][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  408.959949][    C0]  save_stack+0xf7/0x1f0
[  408.959974][    C0]  ? __reset_page_owner+0x190/0x190
[  408.960005][    C0]  ? page_ext_get+0x22/0x2b0
[  408.960024][    C0]  ? page_ext_get+0x1e2/0x2b0
[  408.960043][    C0]  __reset_page_owner+0x4e/0x190
[  408.960067][    C0]  ? rcu_is_watching+0x15/0xb0
[  408.960090][    C0]  free_unref_page_prepare+0x7ce/0x8e0
[  408.960117][    C0]  free_unref_page_list+0xbe/0x860
[  408.960140][    C0]  ? __folio_memcg+0x63/0x160
[  408.960157][    C0]  ? folio_memcg+0x127/0x480
[  408.960175][    C0]  release_pages+0x1fa0/0x2220
[  408.960210][    C0]  ? mlock_drain_local+0x79/0x490
[  408.960233][    C0]  ? lru_cache_disable+0x30/0x30
[  408.960252][    C0]  ? free_swap_cache+0xe9/0x760
[  408.960279][    C0]  tlb_flush_mmu+0x368/0x4f0
[  408.960305][    C0]  tlb_finish_mmu+0xc3/0x1d0
[  408.960340][    C0]  ? free_pgtables+0x743/0x770
[  408.960363][    C0]  exit_mmap+0x3f0/0xb50
[  408.960383][    C0]  ? exit_mm_release+0x1a/0x30
[  408.960401][    C0]  ? vm_brk+0x30/0x30
[  408.960419][    C0]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  408.960448][    C0]  ? uprobe_clear_state+0x278/0x290
[  408.960479][    C0]  ? mm_update_next_owner+0x562/0x6c0
[  408.960505][    C0]  __mmput+0x118/0x3c0
[  408.960521][    C0]  exit_mm+0x1da/0x2c0
[  408.960552][    C0]  ? do_exit+0x23c0/0x23c0
[  408.960593][    C0]  ? taskstats_exit+0x35e/0x9e0
[  408.960622][    C0]  do_exit+0x88e/0x23c0
[  408.960650][    C0]  ? put_task_struct+0xc0/0xc0
[  408.960676][    C0]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  408.960694][    C0]  ? get_signal+0x1068/0x1400
[  408.960721][    C0]  ? lock_chain_count+0x20/0x20
[  408.960738][    C0]  ? _raw_spin_lock_irq+0xaf/0xe0
[  408.960758][    C0]  do_group_exit+0x21b/0x2d0
[  408.960802][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  408.960823][    C0]  get_signal+0x12fc/0x1400
[  408.960861][    C0]  arch_do_signal_or_restart+0x9c/0x7b0
[  408.960886][    C0]  ? __ia32_sys_get_robust_list+0x110/0x110
[  408.960902][    C0]  ? blkcg_maybe_throttle_current+0x19e/0xa40
[  408.960924][    C0]  ? get_sigframe_size+0x20/0x20
[  408.960958][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  408.960983][    C0]  exit_to_user_mode_loop+0x70/0x110
[  408.961006][    C0]  exit_to_user_mode_prepare+0xf6/0x180
[  408.961029][    C0]  syscall_exit_to_user_mode+0x1a/0x50
[  408.961056][    C0]  do_syscall_64+0x61/0xb0
[  408.961070][    C0]  ? clear_bhb_loop+0x40/0x90
[  408.961090][    C0]  ? clear_bhb_loop+0x40/0x90
[  408.961111][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  408.961131][    C0] RIP: 0033:0x7f923998f749
[  408.961143][    C0] Code: Unable to access opcode bytes at 0x7f923998f71f.
[  408.961151][    C0] RSP: 002b:00007f923a8a30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  408.961167][    C0] RAX: fffffffffffffe00 RBX: 00007f9239be5fa8 RCX: 00007f923998f749
[  408.961179][    C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9239be5fa8
[  408.961189][    C0] RBP: 00007f9239be5fa0 R08: 0000000000000000 R09: 0000000000000000
[  408.961199][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  408.961210][    C0] R13: 00007f9239be6038 R14: 00007fffc7bc9590 R15: 00007fffc7bc9678
[  408.961231][    C0]  </TASK>
[  408.962758][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  409.453427][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  409.460646][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  409.470771][   T29] Call Trace:
[  409.474099][   T29]  <TASK>
[  409.477046][   T29]  dump_stack_lvl+0x16c/0x230
[  409.481767][   T29]  ? show_regs_print_info+0x20/0x20
[  409.487033][   T29]  ? load_image+0x3b0/0x3b0
[  409.491662][   T29]  panic+0x2c0/0x710
[  409.495579][   T29]  ? schedule_preempt_disabled+0x20/0x20
[  409.501255][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  409.505788][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  409.511380][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  409.517557][   T29]  watchdog+0xf80/0xf80
[  409.521739][   T29]  ? watchdog+0x1e1/0xf80
[  409.526142][   T29]  kthread+0x2fa/0x390
[  409.530252][   T29]  ? hungtask_pm_notify+0x90/0x90
[  409.535323][   T29]  ? kthread_blkcg+0xd0/0xd0
[  409.539951][   T29]  ret_from_fork+0x48/0x80
[  409.544400][   T29]  ? kthread_blkcg+0xd0/0xd0
[  409.549013][   T29]  ret_from_fork_asm+0x11/0x20
[  409.553815][   T29]  </TASK>
[  409.557431][   T29] Kernel Offset: disabled
[  409.561789][   T29] Rebooting in 86400 seconds..