last executing test programs:

10.599551121s ago: executing program 0 (id=3274):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair(0x5, 0x2, 0x4, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48)
r2 = socket$kcm(0xa, 0x2, 0x73)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
sendmsg$inet(r2, 0x0, 0x0)

9.847777827s ago: executing program 4 (id=3279):
socket$kcm(0xa, 0x922000000003, 0x11)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x2, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200"/31], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000"], 0x0, 0x44}, 0x28)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4080)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x326684230b85cfdc)

9.83176087s ago: executing program 1 (id=3280):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12)

9.42306311s ago: executing program 2 (id=3283):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f04", 0x8}, {&(0x7f0000001500)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b80fe6aaeb1ae2f6e8bcb5ee52dc0605dd7e1a3c5102a1bca0b646a7ce904f090000003219c233e60ddc36024a99a63e729f9b06f96137c89dfc224f008c56815b5c", 0x59}], 0x2}, 0x24048040)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x844)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x24004044)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))

9.350106924s ago: executing program 4 (id=3284):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000380)="b41609e09d2fe1395c465501f29207", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x40047451, 0x0)

9.348769514s ago: executing program 3 (id=3285):
gettid()
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x20000, 0xc2b8, 0x5, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2000000020008107090f9becdb4cb96b02000020fd0000010064000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x61}, {0x6}]})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

8.017084292s ago: executing program 0 (id=3286):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xbdf55c5ca5705acd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

7.138304943s ago: executing program 1 (id=3287):
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3fffc0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x0, 0x4, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$kcm(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)}, {&(0x7f0000000400)}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="90000000000000000600000006000000e6a0104b09c0bd0ccce10fc2619557b7d18053c317baed335d7d3a69060e608406b547f98acb876a2debc9be6c55a2a14f6357e413e40299a2bd3bab4d709e9048e0afb875b7cc7638caf440a5f5ff4d817ad99671df9246845e4210bad72a1e58bdb85f340d728d12874fb4ce021340342d7c782acdc5171913000000000000f8000000000000001801000001000100444d66a39ae710b96944bc6d478b5456e35987ef4744e0ce9b7bc4c79c6bc1fec41e57068f867bba10454034131f25bcd5c9d71d8c85a47be67ced175eafd20cde2477ceb398372f5b091b89468319b14e953ca68f41cf2ea6e7714c3a1be00fb6be4609dfe28e7d1afcc7da11e5d0d03113f924607073b230024fce9dc904cba04cc6013795d6a72ca2f48bef3d2679a9cc45e7600dc77b28ae114ceb70b632ccbedb9bdf08980a98189de85eafc90fe45af25763044271b5a80f6c26b887f05fdd1c16e0cc72170811af51b73fe3982afe60fe10f6be957acd02c40bd8b31ecb1ebe67384d5d00880000000000000009010000040000004d9d87e8e44f180e9bc8868dfd47179961bd4efdb08652c36c93b0502297ea542959cdc70aa6674ad14edd2b239971584c6dbeb96ef6b6fee13d7a3baf4fe3cb2c3dfb1d7cf8665d48703fe47ad4bdf120a33263dd7aec1d595d5b6dd0456f4bac2b57ae8847d88a4f5bf7103459c569e1358599ac00000060000000000000000e010000d100000001cab87dd12e3cf427167bf8bf677da551fe7ebc1a0b0dca93e624683a7f5bd2a4f9e228e755539b686b9431b2bdbdb6a7a0f36646f63a62113f4411af13488a25670e52724628ba8cb3886e1f00000090000000000000000e01000007000000c8199f43ea055729f5f2fa97a35b0492eeb1c09dc1ffa0a5f6e070c0728b164d4b4e55882392a051299cf8d03f5bbd99c0931bc29767f325a23867455539f2b95dff1f6aa0e14ab13b1ff8f94a2025e30c4d4368c5da64618cf34d0e6c00a5b4cc4c28739c022cb7ddabb0cf744521d5579ff6da70bcc170ddb38cafec7f00003c1ff0d07cca797a2e5362d5626d42174d28985490513438e2747c293a35a1b4953054c2dd8323370087fbe2f195f77518a3d3a158911a58435f6e25afefade20153f95c36e1c295ecdeacaf4b"], 0x300}, 0x4083)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007901b8000000000085000000310000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops}, 0x23)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200})
r1 = socket$kcm(0x2, 0x5, 0x84)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x84, 0x13, &(0x7f0000000000)=r2, 0x4)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))

5.947733685s ago: executing program 2 (id=3288):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5)

5.853643453s ago: executing program 3 (id=3289):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

5.853477053s ago: executing program 4 (id=3290):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x2000000, 0x8dde, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_config_ext={0x4, 0xf9}, 0x806, 0xc8, 0x22, 0x4, 0x400, 0x0, 0x0, 0x0, 0x4d9, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfdef)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000)

5.852562133s ago: executing program 1 (id=3291):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfd)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = gettid()
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x20, 0x4f3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r3, 0xfff7fffffffffffd, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)

5.71331748s ago: executing program 0 (id=3292):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00'/10], 0x48)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe2b, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x10180}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000"], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6, 0x0, 0x10000, @value=r1}, 0x28)
r2 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x88, 0xa, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x40)

5.312275118s ago: executing program 2 (id=3293):
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xb0142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0f"], 0x0}, 0x94)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

4.607564665s ago: executing program 2 (id=3294):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808"], 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x50)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000400)=0xa1, &(0x7f00000004c0)=r1}, 0x20)
close(r2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x35, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
close(0x3)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180))

4.607334355s ago: executing program 3 (id=3295):
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00'}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001980))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11404, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r1 = socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r1, 0x29, 0x48, &(0x7f0000000100)=r2, 0x120)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0)

4.607127755s ago: executing program 4 (id=3296):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id, 0x80, 0x0}, 0x0)
recvmsg$kcm(r0, 0x0, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @alu={0x7, 0x1, 0x4, 0x9, 0x4, 0x80, 0x10}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
r1 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)

4.605689705s ago: executing program 1 (id=3304):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfd)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = gettid()
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x20, 0x4f3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r3, 0xfff7fffffffffffd, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.873168488s ago: executing program 1 (id=3297):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socketpair(0x5, 0x2, 0x4, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r0, 0x0, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48)
r2 = socket$kcm(0xa, 0x2, 0x73)
openat$cgroup(r0, 0x0, 0x200002, 0x0)
sendmsg$inet(r2, 0x0, 0x0)

3.872873538s ago: executing program 3 (id=3298):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x4b, 0x0, 0x0, 0xff, 0x5cc0d1b89fca497e, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0x3, 0x5d}, 0x0, 0xca, 0x0, 0x2, 0x3, 0x3ff, 0x40, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40))
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12)

3.596201721s ago: executing program 3 (id=3299):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0}, 0x28)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000004e007f04", 0x8}, {&(0x7f0000001500)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b80fe6aaeb1ae2f6e8bcb5ee52dc0605dd7e1a3c5102a1bca0b646a7ce904f090000003219c233e60ddc36024a99a63e729f9b06f96137c89dfc224f008c56815b5c", 0x59}], 0x2}, 0x24048040)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50)
socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x844)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x24004044)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))

3.593711542s ago: executing program 0 (id=3310):
r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0xfd)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r3 = gettid()
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x20, 0x4f3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, r3, 0xfff7fffffffffffd, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)

3.483558273s ago: executing program 2 (id=3300):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x6, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/ipc\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
socket$kcm(0xa, 0x5, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.373384029s ago: executing program 0 (id=3301):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x11, 0xa, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c750", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xc, 0x1}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xe}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x42000000}, 0x48)

2.372159429s ago: executing program 4 (id=3313):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="03b2", 0x2}], 0x1}, 0xa)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, 0x0, 0x37}, 0x40011013)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xa0000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021f080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

98.008841ms ago: executing program 2 (id=3302):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200003a000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(0xffffffffffffffff)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500), 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000380)="b41609e09d2fe1395c465501f29207", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r3, 0x40047451, 0x0)

97.400091ms ago: executing program 3 (id=3303):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

407.7µs ago: executing program 0 (id=3305):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500))
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

181.95µs ago: executing program 1 (id=3306):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000400), 0x12)
r4 = openat$cgroup_int(r2, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0)=0xa, 0x12)

0s ago: executing program 4 (id=3307):
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x9)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r3}, 0x20)
close(r3)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 ? do_raw_spin_unlock+0x11d/0x230
[  296.723170][ T4287]  kobject_add_internal+0x617/0xca0
[  296.728481][ T4287]  kobject_add+0x160/0x230
[  296.733021][ T4287]  ? kobject_init+0x1c0/0x1c0
[  296.737716][ T4287]  ? __raw_spin_lock_init+0x41/0x100
[  296.743017][ T4287]  ? klist_children_get+0x50/0x50
[  296.748314][ T4287]  ? get_device_parent+0x121/0x3e0
[  296.753540][ T4287]  device_add+0x470/0x1050
[  296.758082][ T4287]  hci_conn_add_sysfs+0xd1/0x1e0
[  296.763042][ T4287]  le_conn_complete_evt+0xf93/0x15c0
[  296.768358][ T4287]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  296.774608][ T4287]  ? bt_info+0x180/0x180
[  296.778865][ T4287]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  296.784511][ T4287]  ? mutex_unlock+0x10/0x10
[  296.789030][ T4287]  ? skb_pull_data+0xec/0x1f0
[  296.793720][ T4287]  hci_le_enh_conn_complete_evt+0x185/0x460
[  296.799714][ T4287]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  296.806316][ T4287]  ? hci_remote_host_features_evt+0x230/0x230
[  296.812490][ T4287]  hci_event_packet+0x7b3/0x1290
[  296.817463][ T4287]  ? lock_chain_count+0x20/0x20
[  296.822329][ T4287]  ? bis_list+0x280/0x280
[  296.826670][ T4287]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  296.832576][ T4287]  ? kcov_remote_start+0x50f/0x810
[  296.837733][ T4287]  ? lockdep_hardirqs_on+0x94/0x140
[  296.842956][ T4287]  ? hci_send_to_monitor+0x9c/0x4a0
[  296.848170][ T4287]  hci_rx_work+0x3eb/0xd40
[  296.852627][ T4287]  ? _raw_spin_unlock+0x40/0x40
[  296.857579][ T4287]  ? process_one_work+0x7b4/0x1160
[  296.862806][ T4287]  process_one_work+0x8ab/0x1160
[  296.867774][ T4287]  ? worker_detach_from_pool+0x240/0x240
[  296.873612][ T4287]  ? _raw_spin_lock_irq+0xb7/0xf0
[  296.878657][ T4287]  ? _raw_spin_lock_irqsave+0x100/0x100
[  296.884238][ T4287]  ? wq_worker_running+0x97/0x190
[  296.889369][ T4287]  worker_thread+0xaf5/0x12a0
[  296.894072][ T4287]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  296.899986][ T4287]  kthread+0x29d/0x330
[  296.904062][ T4287]  ? worker_clr_flags+0x1a0/0x1a0
[  296.909103][ T4287]  ? kthread_blkcg+0xd0/0xd0
[  296.913702][ T4287]  ret_from_fork+0x1f/0x30
[  296.918234][ T4287]  </TASK>
[  296.933643][ T4287] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  296.947440][ T4287] Bluetooth: hci2: failed to register connection device
[  297.409510][ T6862] netlink: 'syz.4.896': attribute type 13 has an invalid length.
[  297.694255][ T6867] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.897'.
[  298.976607][ T4287] Bluetooth: hci2: command 0x2016 tx timeout
[  300.691325][   T49] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  301.461957][ T6924] netlink: 'syz.4.914': attribute type 10 has an invalid length.
[  301.734178][ T6924] device veth0_vlan left promiscuous mode
[  301.782363][ T6924] device veth0_vlan entered promiscuous mode
[  301.857829][ T6924] team0: Device veth0_vlan failed to register rx_handler
[  301.994387][ T6924] syz.4.914 (6924) used greatest stack depth: 18096 bytes left
[  302.737222][   T49] Bluetooth: hci3: command 0x2016 tx timeout
[  303.134103][ T6959] netlink: 'syz.2.929': attribute type 21 has an invalid length.
[  303.163517][ T6959] netlink: 9618 bytes leftover after parsing attributes in process `syz.2.929'.
[  304.185409][   T49] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  304.194548][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  304.207853][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  304.215325][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  304.225445][   T49] Workqueue: hci3 hci_rx_work
[  304.230212][   T49] Call Trace:
[  304.233533][   T49]  <TASK>
[  304.236501][   T49]  dump_stack_lvl+0x188/0x24e
[  304.241235][   T49]  ? show_regs_print_info+0x12/0x12
[  304.246492][   T49]  ? load_image+0x410/0x410
[  304.251075][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  304.256250][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  304.261400][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  304.266303][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  304.271621][   T49]  kobject_add_internal+0x617/0xca0
[  304.276983][   T49]  kobject_add+0x160/0x230
[  304.281458][   T49]  ? kobject_init+0x1c0/0x1c0
[  304.286195][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  304.291521][   T49]  ? klist_children_get+0x50/0x50
[  304.296581][   T49]  ? get_device_parent+0x121/0x3e0
[  304.301744][   T49]  device_add+0x470/0x1050
[  304.306217][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  304.311224][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  304.316689][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  304.322967][   T49]  ? bt_info+0x180/0x180
[  304.327346][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  304.333022][   T49]  ? mutex_unlock+0x10/0x10
[  304.337559][   T49]  ? skb_pull_data+0xec/0x1f0
[  304.342289][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  304.348893][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  304.355521][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  304.361626][   T49]  hci_event_packet+0x7b3/0x1290
[  304.366708][   T49]  ? lock_chain_count+0x20/0x20
[  304.371600][   T49]  ? bis_list+0x280/0x280
[  304.375958][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  304.381895][   T49]  ? kcov_remote_start+0x50f/0x810
[  304.387041][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  304.392289][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  304.397591][   T49]  hci_rx_work+0x3eb/0xd40
[  304.402051][   T49]  ? _raw_spin_unlock+0x40/0x40
[  304.406957][   T49]  ? process_one_work+0x7b4/0x1160
[  304.412109][   T49]  process_one_work+0x8ab/0x1160
[  304.417126][   T49]  ? worker_detach_from_pool+0x240/0x240
[  304.422825][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  304.427900][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  304.432969][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  304.438560][   T49]  ? wq_worker_running+0x97/0x190
[  304.443622][   T49]  worker_thread+0xaf5/0x12a0
[  304.448427][   T49]  kthread+0x29d/0x330
[  304.452520][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  304.457575][   T49]  ? kthread_blkcg+0xd0/0xd0
[  304.462202][   T49]  ret_from_fork+0x1f/0x30
[  304.466696][   T49]  </TASK>
[  304.476450][   T49] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  304.492862][   T49] Bluetooth: hci3: failed to register connection device
[  304.653244][ T6980] netlink: 'syz.1.932': attribute type 10 has an invalid length.
[  304.741552][ T6980] device veth0_vlan left promiscuous mode
[  304.769738][ T6980] device veth0_vlan entered promiscuous mode
[  304.805905][ T6980] team0: Device veth0_vlan failed to register rx_handler
[  306.587053][   T49] Bluetooth: hci3: command 0x2016 tx timeout
[  306.813068][ T4287] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  306.821464][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  306.831349][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:6 Not tainted syzkaller #0
[  306.838968][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  306.849437][ T4287] Workqueue: hci4 hci_rx_work
[  306.854176][ T4287] Call Trace:
[  306.857570][ T4287]  <TASK>
[  306.860532][ T4287]  dump_stack_lvl+0x188/0x24e
[  306.865256][ T4287]  ? show_regs_print_info+0x12/0x12
[  306.870605][ T4287]  ? load_image+0x410/0x410
[  306.875195][ T4287]  sysfs_create_dir_ns+0x26a/0x290
[  306.880344][ T4287]  ? __lock_acquire+0x7ea0/0x7ea0
[  306.885404][ T4287]  ? sysfs_warn_dup+0xa0/0xa0
[  306.890128][ T4287]  ? do_raw_spin_unlock+0x11d/0x230
[  306.895369][ T4287]  kobject_add_internal+0x617/0xca0
[  306.900638][ T4287]  kobject_add+0x160/0x230
[  306.905106][ T4287]  ? kobject_init+0x1c0/0x1c0
[  306.909834][ T4287]  ? __raw_spin_lock_init+0x41/0x100
[  306.915148][ T4287]  ? klist_children_get+0x50/0x50
[  306.920207][ T4287]  ? get_device_parent+0x121/0x3e0
[  306.925458][ T4287]  device_add+0x470/0x1050
[  306.929948][ T4287]  hci_conn_add_sysfs+0xd1/0x1e0
[  306.934952][ T4287]  le_conn_complete_evt+0xf93/0x15c0
[  306.940301][ T4287]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  306.946582][ T4287]  ? bt_info+0x180/0x180
[  306.950874][ T4287]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  306.956581][ T4287]  ? mutex_unlock+0x10/0x10
[  306.961117][ T4287]  ? skb_pull_data+0xec/0x1f0
[  306.965841][ T4287]  hci_le_enh_conn_complete_evt+0x185/0x460
[  306.971860][ T4287]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  306.978401][ T4287]  ? hci_remote_host_features_evt+0x230/0x230
[  306.984525][ T4287]  hci_event_packet+0x7b3/0x1290
[  306.989625][ T4287]  ? lock_chain_count+0x20/0x20
[  306.994599][ T4287]  ? bis_list+0x280/0x280
[  306.999037][ T4287]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  307.005054][ T4287]  ? kcov_remote_start+0x50f/0x810
[  307.010292][ T4287]  ? lockdep_hardirqs_on+0x94/0x140
[  307.015547][ T4287]  ? hci_send_to_monitor+0x9c/0x4a0
[  307.020893][ T4287]  hci_rx_work+0x3eb/0xd40
[  307.025374][ T4287]  ? _raw_spin_unlock+0x40/0x40
[  307.030451][ T4287]  ? process_one_work+0x7b4/0x1160
[  307.035598][ T4287]  process_one_work+0x8ab/0x1160
[  307.040613][ T4287]  ? worker_detach_from_pool+0x240/0x240
[  307.046292][ T4287]  ? _raw_spin_lock_irq+0xb7/0xf0
[  307.051450][ T4287]  ? _raw_spin_lock_irqsave+0x100/0x100
[  307.057042][ T4287]  ? wq_worker_running+0x97/0x190
[  307.062101][ T4287]  worker_thread+0xaf5/0x12a0
[  307.067071][ T4287]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  307.073026][ T4287]  kthread+0x29d/0x330
[  307.077118][ T4287]  ? worker_clr_flags+0x1a0/0x1a0
[  307.082174][ T4287]  ? kthread_blkcg+0xd0/0xd0
[  307.086797][ T4287]  ret_from_fork+0x1f/0x30
[  307.091288][ T4287]  </TASK>
[  307.101613][ T4287] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  307.120589][ T4287] Bluetooth: hci4: failed to register connection device
[  307.220207][ T7020] netlink: 'syz.2.944': attribute type 39 has an invalid length.
[  308.102477][ T4287] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  309.136479][ T4287] Bluetooth: hci4: command 0x2016 tx timeout
[  309.341752][ T7069] bridge0: port 2(bridge_slave_1) entered disabled state
[  309.350658][ T7069] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.404326][ T7070] netlink: 'syz.3.961': attribute type 10 has an invalid length.
[  309.469168][ T7070] device veth0_vlan left promiscuous mode
[  309.506654][ T7070] device veth0_vlan entered promiscuous mode
[  309.528185][ T7070] team0: Device veth0_vlan failed to register rx_handler
[  309.639684][ T7069] bridge0: port 2(bridge_slave_1) entered blocking state
[  309.646992][ T7069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  309.654650][ T7069] bridge0: port 1(bridge_slave_0) entered blocking state
[  309.661901][ T7069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  309.706841][ T7069] device bridge0 entered promiscuous mode
[  309.718152][ T7072] netlink: 'syz.4.965': attribute type 39 has an invalid length.
[  310.435618][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  310.631718][ T7077] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.969'.
[  310.646930][ T7077] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.969'.
[  310.686700][ T7077] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.969'.
[  311.513627][ T7108] netlink: 'syz.0.978': attribute type 10 has an invalid length.
[  312.164000][ T7108] device veth0_vlan left promiscuous mode
[  312.328002][ T7108] device veth0_vlan entered promiscuous mode
[  312.433827][ T7108] team0: Device veth0_vlan failed to register rx_handler
[  312.576076][ T7118] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.583531][ T7118] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.613204][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.620464][ T7121] bridge0: port 2(bridge_slave_1) entered listening state
[  312.627883][ T7121] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.635088][ T7121] bridge0: port 1(bridge_slave_0) entered listening state
[  312.653975][ T7121] device bridge0 entered promiscuous mode
[  313.657850][ T7137] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.987'.
[  313.687879][ T7137] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.987'.
[  313.769010][ T7137] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.987'.
[  313.839652][ T7144] netlink: 'syz.1.985': attribute type 39 has an invalid length.
[  316.691911][ T7159] netlink: 'syz.2.998': attribute type 10 has an invalid length.
[  316.702410][ T7159] device veth0_vlan left promiscuous mode
[  316.709543][ T7159] device veth0_vlan entered promiscuous mode
[  316.726212][ T7159] team0: Device veth0_vlan failed to register rx_handler
[  316.796047][ T7169] ������: renamed from vlan1
[  317.131537][ T7184] device bond0 entered promiscuous mode
[  317.166747][ T7184] device bond_slave_0 entered promiscuous mode
[  317.173473][ T7184] device bond_slave_1 entered promiscuous mode
[  317.215732][ T7182] netlink: 'syz.4.1019': attribute type 39 has an invalid length.
[  317.259104][ T7186] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.1008'.
[  317.278665][ T7186] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.1008'.
[  317.304429][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.308655][ T7186] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.1008'.
[  317.310831][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  319.060537][ T7211] device syzkaller0 entered promiscuous mode
[  319.867282][ T7224] netlink: 5427 bytes leftover after parsing attributes in process `syz.2.1023'.
[  319.891751][ T7224] netlink: 52477 bytes leftover after parsing attributes in process `syz.2.1023'.
[  319.932750][ T7224] netlink: 71676 bytes leftover after parsing attributes in process `syz.2.1023'.
[  320.083311][ T7233] device bond0 entered promiscuous mode
[  320.089135][ T7233] device bond_slave_1 entered promiscuous mode
[  321.182217][ T7259] device syzkaller0 entered promiscuous mode
[  321.353292][   T49] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  321.361446][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  321.371782][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  321.379206][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  321.389278][   T49] Workqueue: hci3 hci_rx_work
[  321.393985][   T49] Call Trace:
[  321.397275][   T49]  <TASK>
[  321.400226][   T49]  dump_stack_lvl+0x188/0x24e
[  321.404929][   T49]  ? show_regs_print_info+0x12/0x12
[  321.410145][   T49]  ? load_image+0x410/0x410
[  321.414679][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  321.419823][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  321.424866][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  321.429652][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  321.434903][   T49]  kobject_add_internal+0x617/0xca0
[  321.440141][   T49]  kobject_add+0x160/0x230
[  321.444755][   T49]  ? kobject_init+0x1c0/0x1c0
[  321.449453][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  321.454753][   T49]  ? klist_children_get+0x50/0x50
[  321.459792][   T49]  ? get_device_parent+0x121/0x3e0
[  321.464925][   T49]  device_add+0x470/0x1050
[  321.469398][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  321.474368][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  321.479699][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  321.485955][   T49]  ? bt_info+0x180/0x180
[  321.490212][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  321.495865][   T49]  ? mutex_unlock+0x10/0x10
[  321.500392][   T49]  ? skb_pull_data+0xec/0x1f0
[  321.505088][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  321.511001][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  321.517436][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  321.523532][   T49]  hci_event_packet+0x7b3/0x1290
[  321.528495][   T49]  ? lock_chain_count+0x20/0x20
[  321.533370][   T49]  ? bis_list+0x280/0x280
[  321.537713][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  321.543622][   T49]  ? kcov_remote_start+0x50f/0x810
[  321.548747][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  321.554054][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  321.559461][   T49]  hci_rx_work+0x3eb/0xd40
[  321.563896][   T49]  ? _raw_spin_unlock+0x40/0x40
[  321.568880][   T49]  ? process_one_work+0x7b4/0x1160
[  321.574033][   T49]  process_one_work+0x8ab/0x1160
[  321.579274][   T49]  ? worker_detach_from_pool+0x240/0x240
[  321.584932][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  321.590078][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  321.595119][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  321.600794][   T49]  ? wq_worker_running+0x97/0x190
[  321.605840][   T49]  worker_thread+0xaf5/0x12a0
[  321.610560][   T49]  kthread+0x29d/0x330
[  321.614630][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  321.619663][   T49]  ? kthread_blkcg+0xd0/0xd0
[  321.624358][   T49]  ret_from_fork+0x1f/0x30
[  321.628801][   T49]  </TASK>
[  321.633366][   T49] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  321.646714][   T49] Bluetooth: hci3: failed to register connection device
[  323.696951][   T49] Bluetooth: hci3: command 0x2016 tx timeout
[  324.393406][ T7272] device bond0 entered promiscuous mode
[  324.399503][ T7272] device bond_slave_0 entered promiscuous mode
[  324.405996][ T7272] device bond_slave_1 entered promiscuous mode
[  324.441108][ T7275] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.1037'.
[  324.450816][ T7275] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.1037'.
[  324.461429][ T7275] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.1037'.
[  325.954482][ T7309] device syzkaller0 entered promiscuous mode
[  328.177653][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  328.186180][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  329.673156][ T7325] device bond0 entered promiscuous mode
[  329.741286][ T7325] device bond_slave_1 entered promiscuous mode
[  329.768393][ T7330] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1058'.
[  333.014986][   T49] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  333.022755][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  333.033338][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  333.040775][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  333.050877][   T49] Workqueue: hci2 hci_rx_work
[  333.055619][   T49] Call Trace:
[  333.058934][   T49]  <TASK>
[  333.061904][   T49]  dump_stack_lvl+0x188/0x24e
[  333.066635][   T49]  ? show_regs_print_info+0x12/0x12
[  333.071875][   T49]  ? load_image+0x410/0x410
[  333.076446][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  333.081615][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  333.086771][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  333.091567][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  333.096790][   T49]  kobject_add_internal+0x617/0xca0
[  333.102052][   T49]  kobject_add+0x160/0x230
[  333.106711][   T49]  ? kobject_init+0x1c0/0x1c0
[  333.111499][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  333.116832][   T49]  ? klist_children_get+0x50/0x50
[  333.121902][   T49]  ? get_device_parent+0x121/0x3e0
[  333.127084][   T49]  device_add+0x470/0x1050
[  333.131593][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  333.136582][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  333.141920][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  333.148205][   T49]  ? bt_info+0x180/0x180
[  333.152492][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  333.158175][   T49]  ? mutex_unlock+0x10/0x10
[  333.162732][   T49]  ? skb_pull_data+0xec/0x1f0
[  333.167502][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  333.173527][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  333.179991][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  333.186193][   T49]  hci_event_packet+0x7b3/0x1290
[  333.191445][   T49]  ? lock_chain_count+0x20/0x20
[  333.196338][   T49]  ? bis_list+0x280/0x280
[  333.201094][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  333.207036][   T49]  ? kcov_remote_start+0x50f/0x810
[  333.212276][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  333.217549][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  333.222806][   T49]  hci_rx_work+0x3eb/0xd40
[  333.227276][   T49]  ? _raw_spin_unlock+0x40/0x40
[  333.232172][   T49]  ? process_one_work+0x7b4/0x1160
[  333.237418][   T49]  process_one_work+0x8ab/0x1160
[  333.242421][   T49]  ? worker_detach_from_pool+0x240/0x240
[  333.248181][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  333.253256][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  333.258334][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  333.263944][   T49]  ? wq_worker_running+0x97/0x190
[  333.269108][   T49]  worker_thread+0xaf5/0x12a0
[  333.273877][   T49]  kthread+0x29d/0x330
[  333.278244][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  333.283315][   T49]  ? kthread_blkcg+0xd0/0xd0
[  333.288052][   T49]  ret_from_fork+0x1f/0x30
[  333.292542][   T49]  </TASK>
[  333.303343][   T49] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  333.316731][   T49] Bluetooth: hci2: failed to register connection device
[  335.376630][   T49] Bluetooth: hci2: command 0x2016 tx timeout
[  336.150819][ T7380] device bond0 entered promiscuous mode
[  336.164442][ T7380] device bond_slave_1 entered promiscuous mode
[  336.650747][ T7396] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  337.633082][   T49] Bluetooth: hci2: unknown advertising packet type: 0xff
[  337.633116][   T49] Bluetooth: hci2: unknown advertising packet type: 0xa9
[  338.282699][   T49] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  338.299360][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0'
[  338.308957][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  338.316389][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  338.326497][   T49] Workqueue: hci4 hci_rx_work
[  338.331229][   T49] Call Trace:
[  338.334545][   T49]  <TASK>
[  338.337524][   T49]  dump_stack_lvl+0x188/0x24e
[  338.342248][   T49]  ? show_regs_print_info+0x12/0x12
[  338.347509][   T49]  ? load_image+0x410/0x410
[  338.352220][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  338.357391][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  338.362455][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  338.367216][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  338.372456][   T49]  kobject_add_internal+0x617/0xca0
[  338.377725][   T49]  kobject_add+0x160/0x230
[  338.382190][   T49]  ? kobject_init+0x1c0/0x1c0
[  338.387007][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  338.392493][   T49]  ? klist_children_get+0x50/0x50
[  338.397675][   T49]  ? get_device_parent+0x121/0x3e0
[  338.402914][   T49]  device_add+0x470/0x1050
[  338.407395][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  338.412394][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  338.417739][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  338.424027][   T49]  ? bt_info+0x180/0x180
[  338.428308][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  338.433982][   T49]  ? mutex_unlock+0x10/0x10
[  338.438522][   T49]  ? skb_pull_data+0xec/0x1f0
[  338.443249][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  338.449203][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  338.455651][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  338.461755][   T49]  hci_event_packet+0x7b3/0x1290
[  338.466755][   T49]  ? lock_chain_count+0x20/0x20
[  338.471639][   T49]  ? bis_list+0x280/0x280
[  338.475994][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  338.481928][   T49]  ? kcov_remote_start+0x50f/0x810
[  338.487066][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  338.492316][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  338.497573][   T49]  hci_rx_work+0x3eb/0xd40
[  338.502203][   T49]  ? _raw_spin_unlock+0x40/0x40
[  338.507107][   T49]  ? process_one_work+0x7b4/0x1160
[  338.512272][   T49]  process_one_work+0x8ab/0x1160
[  338.517390][   T49]  ? worker_detach_from_pool+0x240/0x240
[  338.523063][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  338.528250][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  338.533317][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  338.538993][   T49]  ? wq_worker_running+0x97/0x190
[  338.544061][   T49]  worker_thread+0xaf5/0x12a0
[  338.548861][   T49]  kthread+0x29d/0x330
[  338.552965][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  338.558020][   T49]  ? kthread_blkcg+0xd0/0xd0
[  338.562650][   T49]  ret_from_fork+0x1f/0x30
[  338.567169][   T49]  </TASK>
[  338.572846][   T49] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  338.588947][   T49] Bluetooth: hci4: failed to register connection device
[  340.112372][ T7461] device syzkaller0 entered promiscuous mode
[  340.666651][   T49] Bluetooth: hci4: command 0x2016 tx timeout
[  343.539126][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  343.549073][    C0] bridge0: topology change detected, propagating
[  343.573082][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  343.583279][    C0] bridge0: topology change detected, propagating
[  348.939644][ T4905] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  348.952638][ T7493] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'.
[  353.036734][ T7536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1136'.
[  353.152090][ T7538] device syzkaller0 entered promiscuous mode
[  354.094877][ T7555] netlink: 'syz.1.1143': attribute type 4 has an invalid length.
[  354.130831][ T7555] netlink: 'syz.1.1143': attribute type 26 has an invalid length.
[  354.169517][ T7555] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.1143'.
[  354.870112][   T49] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[  355.282770][ T7568] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1148'.
[  361.279680][ T7610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1162'.
[  361.514073][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1166'.
[  361.594817][ T7612] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1166'.
[  362.389327][   T49] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  362.397531][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  362.407818][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  362.415247][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  362.425434][   T49] Workqueue: hci0 hci_rx_work
[  362.430607][   T49] Call Trace:
[  362.433938][   T49]  <TASK>
[  362.436930][   T49]  dump_stack_lvl+0x188/0x24e
[  362.441718][   T49]  ? show_regs_print_info+0x12/0x12
[  362.447066][   T49]  ? load_image+0x410/0x410
[  362.451688][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  362.456925][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  362.462185][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  362.467106][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  362.472380][   T49]  kobject_add_internal+0x617/0xca0
[  362.477774][   T49]  kobject_add+0x160/0x230
[  362.482256][   T49]  ? kobject_init+0x1c0/0x1c0
[  362.487019][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  362.492435][   T49]  ? klist_children_get+0x50/0x50
[  362.497650][   T49]  ? get_device_parent+0x121/0x3e0
[  362.502973][   T49]  device_add+0x470/0x1050
[  362.507447][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  362.512589][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  362.518052][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  362.524516][   T49]  ? bt_info+0x180/0x180
[  362.528794][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  362.534641][   T49]  ? mutex_unlock+0x10/0x10
[  362.539364][   T49]  ? skb_pull_data+0xec/0x1f0
[  362.544121][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  362.550050][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  362.556497][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  362.562626][   T49]  hci_event_packet+0x7b3/0x1290
[  362.567755][   T49]  ? lock_chain_count+0x20/0x20
[  362.572676][   T49]  ? bis_list+0x280/0x280
[  362.577063][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  362.583008][   T49]  ? kcov_remote_start+0x50f/0x810
[  362.588315][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  362.593637][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  362.598873][   T49]  hci_rx_work+0x3eb/0xd40
[  362.603334][   T49]  ? _raw_spin_unlock+0x40/0x40
[  362.608230][   T49]  ? process_one_work+0x7b4/0x1160
[  362.613451][   T49]  process_one_work+0x8ab/0x1160
[  362.618610][   T49]  ? worker_detach_from_pool+0x240/0x240
[  362.624451][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  362.629529][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  362.634590][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  362.640177][   T49]  ? wq_worker_running+0x97/0x190
[  362.645231][   T49]  worker_thread+0xaf5/0x12a0
[  362.649970][   T49]  kthread+0x29d/0x330
[  362.654065][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  362.659115][   T49]  ? kthread_blkcg+0xd0/0xd0
[  362.663820][   T49]  ret_from_fork+0x1f/0x30
[  362.668405][   T49]  </TASK>
[  362.676420][   T49] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  362.694858][   T49] Bluetooth: hci0: failed to register connection device
[  363.790786][ T7646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1180'.
[  364.737834][   T49] Bluetooth: hci0: command 0x2016 tx timeout
[  364.954289][ T7667] syz_tun: tun_net_xmit 42
[  366.019156][    C1] syz_tun: tun_net_xmit 42
[  366.301487][   T49] Bluetooth: hci2: Malformed LE Event: 0x0b
[  367.056484][    C1] syz_tun: tun_net_xmit 42
[  368.712738][   T49] Bluetooth: hci4: Malformed LE Event: 0x0b
[  368.733282][ T7731] syz_tun: tun_net_xmit 42
[  369.785957][    C0] syz_tun: tun_net_xmit 42
[  370.818075][    C0] syz_tun: tun_net_xmit 42
[  377.823239][ T7881] device veth1_macvtap left promiscuous mode
[  377.839363][ T7882] device veth1_macvtap entered promiscuous mode
[  377.856467][ T7882] device macsec0 entered promiscuous mode
[  378.772159][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.778579][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  383.828942][ T7918] device macsec0 entered promiscuous mode
[  383.836742][ T7917] device veth1_macvtap left promiscuous mode
[  383.842972][ T7917] device macsec0 left promiscuous mode
[  384.215723][ T7939] netlink: 'syz.4.1265': attribute type 7 has an invalid length.
[  385.017017][ T4340] syz_tun: tun_net_xmit 90
[  385.549098][ T7963] netlink: 'syz.1.1274': attribute type 27 has an invalid length.
[  385.593108][ T7963] netlink: 'syz.1.1274': attribute type 25 has an invalid length.
[  385.715008][   T22] syz_tun: tun_net_xmit 90
[  386.420549][ T7967] device veth1_macvtap left promiscuous mode
[  386.453543][ T7968] device veth1_macvtap entered promiscuous mode
[  386.464341][ T7968] device macsec0 entered promiscuous mode
[  391.389223][ T8006] netlink: 'syz.2.1289': attribute type 27 has an invalid length.
[  391.411478][ T8006] netlink: 'syz.2.1289': attribute type 25 has an invalid length.
[  391.501459][ T8011] device veth1_macvtap left promiscuous mode
[  391.593925][ T8015] device veth1_macvtap entered promiscuous mode
[  391.624600][ T8015] device macsec0 entered promiscuous mode
[  391.660696][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  393.024366][   T49] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  399.152694][ T8062] netlink: 'syz.3.1307': attribute type 27 has an invalid length.
[  399.180446][ T8062] netlink: 'syz.3.1307': attribute type 25 has an invalid length.
[  400.268113][   T49] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  400.275910][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  400.286585][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  400.294193][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  400.304553][   T49] Workqueue: hci0 hci_rx_work
[  400.309290][   T49] Call Trace:
[  400.312604][   T49]  <TASK>
[  400.315575][   T49]  dump_stack_lvl+0x188/0x24e
[  400.320513][   T49]  ? show_regs_print_info+0x12/0x12
[  400.325761][   T49]  ? load_image+0x410/0x410
[  400.330323][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  400.335505][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  400.340587][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  400.345400][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  400.350641][   T49]  kobject_add_internal+0x617/0xca0
[  400.355896][   T49]  kobject_add+0x160/0x230
[  400.360387][   T49]  ? kobject_init+0x1c0/0x1c0
[  400.365129][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  400.370551][   T49]  ? klist_children_get+0x50/0x50
[  400.375721][   T49]  ? get_device_parent+0x121/0x3e0
[  400.380982][   T49]  device_add+0x470/0x1050
[  400.385465][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  400.390856][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  400.396212][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  400.402809][   T49]  ? bt_info+0x180/0x180
[  400.407106][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  400.412801][   T49]  ? mutex_unlock+0x10/0x10
[  400.417363][   T49]  ? skb_pull_data+0xec/0x1f0
[  400.422109][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  400.428052][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  400.434533][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  400.440663][   T49]  hci_event_packet+0x7b3/0x1290
[  400.445757][   T49]  ? lock_chain_count+0x20/0x20
[  400.450679][   T49]  ? bis_list+0x280/0x280
[  400.455084][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  400.461025][   T49]  ? kcov_remote_start+0x50f/0x810
[  400.466186][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  400.471533][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  400.476878][   T49]  hci_rx_work+0x3eb/0xd40
[  400.481360][   T49]  ? _raw_spin_unlock+0x40/0x40
[  400.486261][   T49]  ? process_one_work+0x7b4/0x1160
[  400.491420][   T49]  process_one_work+0x8ab/0x1160
[  400.496430][   T49]  ? worker_detach_from_pool+0x240/0x240
[  400.502103][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  400.507182][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  400.512259][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  400.517867][   T49]  ? wq_worker_running+0x97/0x190
[  400.522941][   T49]  worker_thread+0xaf5/0x12a0
[  400.527783][   T49]  kthread+0x29d/0x330
[  400.531892][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  400.536956][   T49]  ? kthread_blkcg+0xd0/0xd0
[  400.541584][   T49]  ret_from_fork+0x1f/0x30
[  400.546153][   T49]  </TASK>
[  400.556412][   T49] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  400.569791][   T49] Bluetooth: hci0: failed to register connection device
[  401.748528][ T8138] syz_tun: tun_net_xmit 42
[  402.818697][    C0] syz_tun: tun_net_xmit 42
[  403.856391][    C0] syz_tun: tun_net_xmit 42
[  405.141549][   T49] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  405.150188][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  405.160031][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  405.167458][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  405.177621][   T49] Workqueue: hci2 hci_rx_work
[  405.182324][   T49] Call Trace:
[  405.185613][   T49]  <TASK>
[  405.188558][   T49]  dump_stack_lvl+0x188/0x24e
[  405.193256][   T49]  ? show_regs_print_info+0x12/0x12
[  405.198562][   T49]  ? load_image+0x410/0x410
[  405.203096][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  405.208236][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  405.213281][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  405.218087][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  405.223300][   T49]  kobject_add_internal+0x617/0xca0
[  405.228523][   T49]  kobject_add+0x160/0x230
[  405.232963][   T49]  ? kobject_init+0x1c0/0x1c0
[  405.237667][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  405.242959][   T49]  ? klist_children_get+0x50/0x50
[  405.247995][   T49]  ? get_device_parent+0x121/0x3e0
[  405.253122][   T49]  device_add+0x470/0x1050
[  405.257558][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  405.262511][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  405.267823][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  405.274079][   T49]  ? bt_info+0x180/0x180
[  405.278341][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  405.283994][   T49]  ? mutex_unlock+0x10/0x10
[  405.288515][   T49]  ? skb_pull_data+0xec/0x1f0
[  405.293207][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  405.299114][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  405.305537][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  405.311703][   T49]  hci_event_packet+0x7b3/0x1290
[  405.316749][   T49]  ? lock_chain_count+0x20/0x20
[  405.321613][   T49]  ? bis_list+0x280/0x280
[  405.326037][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  405.331951][   T49]  ? kcov_remote_start+0x50f/0x810
[  405.337098][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  405.343033][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  405.348448][   T49]  hci_rx_work+0x3eb/0xd40
[  405.352912][   T49]  ? _raw_spin_unlock+0x40/0x40
[  405.357848][   T49]  ? process_one_work+0x7b4/0x1160
[  405.363019][   T49]  process_one_work+0x8ab/0x1160
[  405.367991][   T49]  ? worker_detach_from_pool+0x240/0x240
[  405.373635][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  405.378679][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  405.383723][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  405.389382][   T49]  ? wq_worker_running+0x97/0x190
[  405.394423][   T49]  worker_thread+0xaf5/0x12a0
[  405.399140][   T49]  kthread+0x29d/0x330
[  405.403216][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  405.408259][   T49]  ? kthread_blkcg+0xd0/0xd0
[  405.412875][   T49]  ret_from_fork+0x1f/0x30
[  405.417325][   T49]  </TASK>
[  405.425507][   T49] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  405.446437][   T49] Bluetooth: hci2: failed to register connection device
[  407.269126][ T4276] syz_tun: tun_net_xmit 90
[  407.346907][   T26] syz_tun: tun_net_xmit 90
[  408.178505][   T26] syz_tun: tun_net_xmit 90
[  412.017354][ T8262] syz_tun: tun_net_xmit 42
[  412.934268][ T8278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1359'.
[  413.045190][ T8278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1359'.
[  413.061690][    C1] syz_tun: tun_net_xmit 42
[  413.555128][ T8291] netlink: 'syz.3.1363': attribute type 9 has an invalid length.
[  413.598992][ T8291] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1363'.
[  413.921187][ T8305] syz_tun: tun_net_xmit 42
[  414.096426][    C1] syz_tun: tun_net_xmit 42
[  414.839022][ T8319] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1374'.
[  414.873570][ T8320] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1374'.
[  414.976523][    C1] syz_tun: tun_net_xmit 42
[  415.258567][ T8325] device syzkaller0 entered promiscuous mode
[  416.020140][    C1] syz_tun: tun_net_xmit 42
[  417.904639][ T8357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1384'.
[  418.152177][ T8361] bridge0: port 3(team0) entered blocking state
[  418.178577][ T8361] bridge0: port 3(team0) entered disabled state
[  418.244081][ T8361] device team0 entered promiscuous mode
[  418.307273][ T8361] device team_slave_0 entered promiscuous mode
[  418.345574][ T8361] device team_slave_1 entered promiscuous mode
[  418.354765][ T8361] device geneve1 entered promiscuous mode
[  418.370816][ T8361] bridge0: port 3(team0) entered blocking state
[  418.378432][ T8361] bridge0: port 3(team0) entered listening state
[  418.946004][ T8377] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1390'.
[  419.012709][ T8377] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1390'.
[  419.322407][   T49] Bluetooth: hci0: Unknown advertising packet type: 0x2e70
[  419.322453][   T49] Bluetooth: hci0: Malformed LE Event: 0x0d
[  419.994388][   T49] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  420.040058][ T8414] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1404'.
[  420.405260][   T49] Bluetooth: hci4: Unknown advertising packet type: 0x2e70
[  420.405305][   T49] Bluetooth: hci4: Malformed LE Event: 0x0d
[  422.556163][ T8461] device syzkaller0 entered promiscuous mode
[  423.285375][   T49] Bluetooth: hci2: Unknown advertising packet type: 0x2e70
[  423.285426][   T49] Bluetooth: hci2: Malformed LE Event: 0x0d
[  427.112041][ T8526] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1440'.
[  429.235817][ T8557] netlink: 'syz.1.1453': attribute type 4 has an invalid length.
[  429.282902][ T8557] netlink: 'syz.1.1453': attribute type 26 has an invalid length.
[  429.316981][ T8557] netlink: 'syz.1.1453': attribute type 26 has an invalid length.
[  429.361984][ T8557] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.1453'.
[  432.399142][ T8589] bridge0: port 3(team0) entered blocking state
[  432.522617][ T8589] bridge0: port 3(team0) entered disabled state
[  432.748115][ T8589] device team0 entered promiscuous mode
[  432.848726][ T8589] device team_slave_0 entered promiscuous mode
[  432.986957][ T8589] device team_slave_1 entered promiscuous mode
[  432.994716][ T8589] device geneve1 entered promiscuous mode
[  433.087842][ T8589] bridge0: port 3(team0) entered blocking state
[  433.094512][ T8589] bridge0: port 3(team0) entered forwarding state
[  433.166428][ T8597] netlink: 'syz.3.1475': attribute type 10 has an invalid length.
[  434.749981][ T8624] netlink: 'syz.0.1472': attribute type 3 has an invalid length.
[  434.771591][ T8624] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1472'.
[  435.413642][ T8640] bridge0: port 4(team0) entered blocking state
[  435.445895][ T8640] bridge0: port 4(team0) entered disabled state
[  435.562326][ T8640] device team0 entered promiscuous mode
[  435.586087][ T8640] device team_slave_0 entered promiscuous mode
[  435.625789][ T8640] device team_slave_1 entered promiscuous mode
[  435.651781][ T8640] device geneve1 entered promiscuous mode
[  435.697149][ T8640] bridge0: port 4(team0) entered blocking state
[  435.704453][ T8640] bridge0: port 4(team0) entered forwarding state
[  436.581282][ T8664] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1494'.
[  437.387267][ T8663] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1486'.
[  437.519910][ T8663] device team_slave_0 left promiscuous mode
[  437.544395][ T8663] team0: Port device team_slave_0 removed
[  437.569738][   T49] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  437.622329][ T8670] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  438.222527][ T8684] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1493'.
[  440.023714][ T7786] wlan1: Trigger new scan to find an IBSS to join
[  440.179484][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  440.186510][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  440.687719][ T8712] netlink: 'syz.2.1503': attribute type 3 has an invalid length.
[  440.816860][ T8712] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1503'.
[  441.198995][ T8720] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1506'.
[  441.916958][ T8720] device team_slave_0 left promiscuous mode
[  441.971945][ T8720] team0: Port device team_slave_0 removed
[  442.885974][ T8731] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  443.057979][ T7829] wlan1: Trigger new scan to find an IBSS to join
[  443.116006][ T8741] netlink: 'syz.1.1511': attribute type 10 has an invalid length.
[  443.151992][ T8741] device veth0_vlan left promiscuous mode
[  443.185383][ T8741] device veth0_vlan entered promiscuous mode
[  443.217401][ T8738] netlink: 'syz.0.1510': attribute type 3 has an invalid length.
[  443.248084][ T8738] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1510'.
[  443.253975][ T8741] team0: Device veth0_vlan failed to register rx_handler
[  444.650142][ T8758] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1518'.
[  444.698719][ T8752] netlink: 'syz.4.1517': attribute type 3 has an invalid length.
[  444.708724][ T8752] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1517'.
[  445.762819][ T8772] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1524'.
[  446.983263][ T7822] wlan1: Trigger new scan to find an IBSS to join
[  447.898724][ T8772] team0: Port device team_slave_0 removed
[  447.973752][ T7810] wlan1: Creating new IBSS network, BSSID 8e:98:19:c4:45:b2
[  448.372001][ T8779] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  448.500372][    C1] bridge0: port 3(team0) entered learning state
[  448.942425][ T8786] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1531'.
[  449.100074][ T8792] bridge0: port 3(team0) entered blocking state
[  449.146980][ T8792] bridge0: port 3(team0) entered disabled state
[  449.266847][ T8792] device team0 entered promiscuous mode
[  449.315627][ T8792] device team_slave_1 entered promiscuous mode
[  449.338979][ T8792] device geneve1 entered promiscuous mode
[  449.347519][ T8792] bridge0: port 3(team0) entered blocking state
[  449.354012][ T8792] bridge0: port 3(team0) entered listening state
[  450.062324][ T8800] netlink: 'syz.3.1533': attribute type 3 has an invalid length.
[  450.078870][ T8800] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1533'.
[  450.760102][ T8814] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1540'.
[  451.251614][ T8824] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1542'.
[  451.603756][ T8826] netlink: 'syz.2.1544': attribute type 3 has an invalid length.
[  451.628531][ T8826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1544'.
[  451.636211][ T8824] team0: Port device team_slave_0 removed
[  451.732306][   T49] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  451.741043][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0'
[  451.750497][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  451.758001][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  451.768075][   T49] Workqueue: hci1 hci_rx_work
[  451.772786][   T49] Call Trace:
[  451.776079][   T49]  <TASK>
[  451.779109][   T49]  dump_stack_lvl+0x188/0x24e
[  451.783821][   T49]  ? show_regs_print_info+0x12/0x12
[  451.789032][   T49]  ? load_image+0x410/0x410
[  451.793673][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  451.798804][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  451.803872][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  451.808672][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  451.813890][   T49]  kobject_add_internal+0x617/0xca0
[  451.819133][   T49]  kobject_add+0x160/0x230
[  451.823666][   T49]  ? kobject_init+0x1c0/0x1c0
[  451.828371][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  451.833674][   T49]  ? klist_children_get+0x50/0x50
[  451.838713][   T49]  ? get_device_parent+0x121/0x3e0
[  451.843847][   T49]  device_add+0x470/0x1050
[  451.848384][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  451.853340][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  451.858656][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  451.864916][   T49]  ? bt_info+0x180/0x180
[  451.869178][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  451.874839][   T49]  ? mutex_unlock+0x10/0x10
[  451.879356][   T49]  ? skb_pull_data+0xec/0x1f0
[  451.884072][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  451.889985][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  451.896428][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  451.902514][   T49]  hci_event_packet+0x7b3/0x1290
[  451.907472][   T49]  ? lock_chain_count+0x20/0x20
[  451.912345][   T49]  ? bis_list+0x280/0x280
[  451.916888][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  451.922795][   T49]  ? kcov_remote_start+0x50f/0x810
[  451.927924][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  451.933141][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  451.938367][   T49]  hci_rx_work+0x3eb/0xd40
[  451.942809][   T49]  ? _raw_spin_unlock+0x40/0x40
[  451.947865][   T49]  ? process_one_work+0x7b4/0x1160
[  451.952993][   T49]  process_one_work+0x8ab/0x1160
[  451.958003][   T49]  ? worker_detach_from_pool+0x240/0x240
[  451.963738][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  451.969318][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  451.974366][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  451.980012][   T49]  ? wq_worker_running+0x97/0x190
[  451.985058][   T49]  worker_thread+0xaf5/0x12a0
[  451.989779][   T49]  kthread+0x29d/0x330
[  451.993855][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  451.998893][   T49]  ? kthread_blkcg+0xd0/0xd0
[  452.003583][   T49]  ret_from_fork+0x1f/0x30
[  452.008157][   T49]  </TASK>
[  452.012405][   T49] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  452.025776][   T49] Bluetooth: hci1: failed to register connection device
[  454.709376][ T8845] bridge0: port 3(team0) entered blocking state
[  454.761214][ T8845] bridge0: port 3(team0) entered disabled state
[  454.803313][ T8845] device team0 entered promiscuous mode
[  454.837649][ T8845] device team_slave_1 entered promiscuous mode
[  454.884953][ T8845] device geneve1 entered promiscuous mode
[  454.927722][ T8845] bridge0: port 3(team0) entered blocking state
[  454.934177][ T8845] bridge0: port 3(team0) entered listening state
[  456.203775][   T49] Bluetooth: hci3: Unknown advertising packet type: 0x8100
[  456.203805][   T49] Bluetooth: hci3: Malformed LE Event: 0x0d
[  456.385502][ T8857] netlink: 'syz.2.1563': attribute type 33 has an invalid length.
[  456.541198][ T8857] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1563'.
[  457.014923][ T8856] netlink: 'syz.1.1550': attribute type 3 has an invalid length.
[  457.023103][ T8856] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1550'.
[  457.545369][ T8872] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1557'.
[  457.910194][ T8883] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1559'.
[  458.044922][ T8883] device team_slave_0 left promiscuous mode
[  458.060928][ T8883] team0: Port device team_slave_0 removed
[  458.992643][ T8901] netlink: 'syz.0.1570': attribute type 3 has an invalid length.
[  459.046909][ T8901] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1570'.
[  459.503432][ T8909] netlink: 'syz.3.1572': attribute type 33 has an invalid length.
[  459.630341][ T8909] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1572'.
[  460.332055][ T8916] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1576'.
[  460.610145][   T49] Bluetooth: hci1: Unknown advertising packet type: 0x8100
[  460.610195][   T49] Bluetooth: hci1: Malformed LE Event: 0x0d
[  460.731493][ T8924] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1581'.
[  461.027236][   T49] Bluetooth: hci4: Unknown advertising packet type: 0x8100
[  461.027277][   T49] Bluetooth: hci4: Malformed LE Event: 0x0d
[  461.454189][ T8938] netlink: 'syz.1.1586': attribute type 3 has an invalid length.
[  461.490967][ T8938] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1586'.
[  461.741864][ T8941] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  461.937789][ T8947] netlink: 'syz.0.1600': attribute type 3 has an invalid length.
[  461.950543][ T8947] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1600'.
[  464.017137][ T7829] wlan1: Trigger new scan to find an IBSS to join
[  464.496425][    C1] bridge0: port 3(team0) entered learning state
[  464.621727][ T8975] netlink: 'syz.0.1611': attribute type 39 has an invalid length.
[  465.205950][ T8988] netlink: 'syz.1.1605': attribute type 3 has an invalid length.
[  465.235462][ T8988] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1605'.
[  465.418030][ T8994] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  465.904333][ T9009] netlink: 'syz.0.1615': attribute type 10 has an invalid length.
[  465.933575][ T9009] device veth0_vlan left promiscuous mode
[  465.962049][ T9014] netlink: 'syz.3.1614': attribute type 9 has an invalid length.
[  465.980223][ T9014] netlink: 123820 bytes leftover after parsing attributes in process `syz.3.1614'.
[  466.002710][ T9009] device veth0_vlan entered promiscuous mode
[  466.108390][ T9009] team0: Device veth0_vlan failed to register rx_handler
[  467.090659][   T11] wlan1: Trigger new scan to find an IBSS to join
[  467.478577][ T9038] netlink: 'syz.0.1623': attribute type 3 has an invalid length.
[  467.524385][ T9038] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1623'.
[  468.074920][ T7810] wlan1: Trigger new scan to find an IBSS to join
[  468.821616][ T9059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  468.829066][ T9059] IPv6: NLM_F_CREATE should be set when creating new route
[  468.836471][ T9059] IPv6: NLM_F_CREATE should be set when creating new route
[  468.843848][ T9059] IPv6: NLM_F_CREATE should be set when creating new route
[  469.904731][ T9071] netlink: 'syz.2.1637': attribute type 3 has an invalid length.
[  469.923846][ T9071] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1637'.
[  470.019929][ T7810] wlan1: Creating new IBSS network, BSSID 26:76:f6:8d:be:aa
[  470.183080][ T9086] netlink: 'syz.3.1642': attribute type 15 has an invalid length.
[  472.332237][ T9112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  472.339665][ T9112] IPv6: NLM_F_CREATE should be set when creating new route
[  472.347187][ T9112] IPv6: NLM_F_CREATE should be set when creating new route
[  472.354478][ T9112] IPv6: NLM_F_CREATE should be set when creating new route
[  472.531886][ T9118] netlink: 'syz.2.1650': attribute type 1 has an invalid length.
[  472.576589][ T9118] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1650'.
[  472.976776][ T7829] wlan1: Trigger new scan to find an IBSS to join
[  473.095809][ T9129] netlink: 'syz.4.1657': attribute type 3 has an invalid length.
[  473.118230][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1657'.
[  473.142917][ T9126] netlink: 'syz.3.1653': attribute type 3 has an invalid length.
[  473.186784][ T9126] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1653'.
[  474.879035][ T7786] wlan1: Creating new IBSS network, BSSID c6:40:5f:83:d1:81
[  475.473991][ T9154] netlink: 'syz.3.1674': attribute type 3 has an invalid length.
[  475.516768][ T9154] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1674'.
[  475.542189][ T9155] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  476.050593][ T9173] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  476.058123][ T9173] IPv6: NLM_F_CREATE should be set when creating new route
[  476.065462][ T9173] IPv6: NLM_F_CREATE should be set when creating new route
[  476.072866][ T9173] IPv6: NLM_F_CREATE should be set when creating new route
[  476.172331][ T9172] netlink: 'syz.3.1680': attribute type 3 has an invalid length.
[  476.188380][ T9172] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1680'.
[  476.641412][ T9179] netlink: 'syz.3.1669': attribute type 1 has an invalid length.
[  476.697352][ T9179] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1669'.
[  476.841566][ T9175] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  476.997583][ T9182] netlink: 'syz.0.1685': attribute type 3 has an invalid length.
[  477.022523][ T9182] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1685'.
[  477.443576][ T9197] netlink: 'syz.0.1673': attribute type 3 has an invalid length.
[  477.538153][ T9197] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1673'.
[  477.973934][ T7786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  478.637921][    C1] bridge0: port 3(team0) entered forwarding state
[  478.647359][    C1] bridge0: topology change detected, propagating
[  479.104630][ T9215] netlink: 'syz.1.1688': attribute type 1 has an invalid length.
[  479.143038][ T9215] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1688'.
[  479.736074][ T9223] netlink: 'syz.0.1690': attribute type 3 has an invalid length.
[  479.831635][ T9223] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1690'.
[  479.866412][    C1] bridge0: port 3(team0) entered forwarding state
[  479.872939][    C1] bridge0: topology change detected, propagating
[  480.182750][ T9240] netlink: 'syz.1.1693': attribute type 3 has an invalid length.
[  480.236970][ T9240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1693'.
[  481.472399][ T9255] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1712'.
[  482.150034][ T9264] netlink: 'syz.3.1707': attribute type 3 has an invalid length.
[  482.173199][ T9264] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1707'.
[  483.140034][ T9271] netlink: 'syz.2.1709': attribute type 2 has an invalid length.
[  483.186658][ T9271] netlink: 'syz.2.1709': attribute type 5 has an invalid length.
[  484.359694][ T9293] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1720'.
[  484.570546][ T9300] netlink: 2631 bytes leftover after parsing attributes in process `syz.0.1722'.
[  484.883312][ T9303] netlink: 'syz.2.1723': attribute type 3 has an invalid length.
[  484.958016][ T9303] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1723'.
[  484.977138][    C0] bridge0: port 3(team0) entered learning state
[  485.612842][ T9314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1728'.
[  486.042852][ T9327] netlink: 'syz.4.1733': attribute type 39 has an invalid length.
[  487.719140][ T9346] netlink: 'syz.3.1737': attribute type 3 has an invalid length.
[  487.755880][ T9346] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1737'.
[  489.003358][ T9358] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1742'.
[  489.290358][ T9361] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1743'.
[  491.267916][ T9379] netlink: 'syz.2.1760': attribute type 2 has an invalid length.
[  491.275743][ T9379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1760'.
[  492.705452][ T9405] netlink: 'syz.2.1759': attribute type 39 has an invalid length.
[  492.980678][   T49] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9
[  493.865338][ T9434] netlink: 'syz.1.1771': attribute type 10 has an invalid length.
[  493.924999][ T9434] bridge0: port 3(team0) entered disabled state
[  493.931965][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.940282][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.077633][ T9434] team0: Device bridge0 is already an upper device of the team interface
[  495.139105][ T9451] netlink: 'syz.3.1779': attribute type 39 has an invalid length.
[  496.028636][ T9476] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1788'.
[  496.686064][ T9473] netlink: 'syz.3.1787': attribute type 2 has an invalid length.
[  496.706392][ T9473] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1787'.
[  498.142352][ T7786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  499.002994][ T9515] netlink: 'syz.1.1798': attribute type 39 has an invalid length.
[  501.618959][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.625969][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  504.161768][ T9579] netlink: 'syz.0.1822': attribute type 10 has an invalid length.
[  504.368306][ T9579] bridge0: port 4(team0) entered disabled state
[  504.375256][ T9579] bridge0: port 3(dummy0) entered disabled state
[  504.382607][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.390469][ T9579] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.477094][ T9579] team0: Device bridge0 is already an upper device of the team interface
[  504.901045][ T7810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  509.222265][ T7829] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  512.239570][ T9639] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1842'.
[  514.163799][ T9667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1851'.
[  515.056459][    C0] bridge0: port 3(team0) entered forwarding state
[  515.063006][    C0] bridge0: topology change detected, propagating
[  515.201033][ T9674] netlink: 'syz.4.1855': attribute type 10 has an invalid length.
[  515.271169][ T9674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1855'.
[  515.375407][ T9674] device veth0_vlan left promiscuous mode
[  515.386835][ T9674] device veth0_vlan entered promiscuous mode
[  515.921060][ T9674] bridge0: port 4(veth0_vlan) entered blocking state
[  515.986969][ T9674] bridge0: port 4(veth0_vlan) entered disabled state
[  516.019794][ T9674] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  516.101586][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  516.130422][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  516.171822][ T7797] IPv6: ADDRCONF(NETDEV_CHANGE): ������: link becomes ready
[  516.682400][ T9686] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1857'.
[  521.935082][ T9727] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1873'.
[  524.714795][ T9755] netlink: 'syz.4.1881': attribute type 6 has an invalid length.
[  526.179252][ T9770] netlink: 'syz.2.1886': attribute type 10 has an invalid length.
[  526.216934][ T9770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1886'.
[  526.249329][ T9770] device veth0_vlan left promiscuous mode
[  526.282429][ T9770] device veth0_vlan entered promiscuous mode
[  526.313005][   T49] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  526.321058][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0'
[  526.331996][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  526.339410][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  526.349477][   T49] Workqueue: hci2 hci_rx_work
[  526.354185][   T49] Call Trace:
[  526.357574][   T49]  <TASK>
[  526.360549][   T49]  dump_stack_lvl+0x188/0x24e
[  526.365247][   T49]  ? show_regs_print_info+0x12/0x12
[  526.370576][   T49]  ? load_image+0x410/0x410
[  526.375303][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  526.380519][   T49]  ? __lock_acquire+0x7ea0/0x7ea0
[  526.385655][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  526.390452][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  526.395752][   T49]  kobject_add_internal+0x617/0xca0
[  526.400974][   T49]  kobject_add+0x160/0x230
[  526.405414][   T49]  ? kobject_init+0x1c0/0x1c0
[  526.410381][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  526.415712][   T49]  ? klist_children_get+0x50/0x50
[  526.420761][   T49]  ? get_device_parent+0x121/0x3e0
[  526.425890][   T49]  device_add+0x470/0x1050
[  526.430351][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  526.435385][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  526.440717][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  526.446976][   T49]  ? bt_info+0x180/0x180
[  526.451255][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  526.456909][   T49]  ? mutex_unlock+0x10/0x10
[  526.461438][   T49]  ? skb_pull_data+0xec/0x1f0
[  526.466145][   T49]  hci_le_enh_conn_complete_evt+0x185/0x460
[  526.472056][   T49]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  526.478504][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  526.484674][   T49]  hci_event_packet+0x7b3/0x1290
[  526.489729][   T49]  ? lock_chain_count+0x20/0x20
[  526.494685][   T49]  ? bis_list+0x280/0x280
[  526.499287][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  526.505375][   T49]  ? kcov_remote_start+0x50f/0x810
[  526.510852][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  526.516107][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  526.521328][   T49]  hci_rx_work+0x3eb/0xd40
[  526.525788][   T49]  ? _raw_spin_unlock+0x40/0x40
[  526.530655][   T49]  ? process_one_work+0x7b4/0x1160
[  526.535867][   T49]  process_one_work+0x8ab/0x1160
[  526.540921][   T49]  ? worker_detach_from_pool+0x240/0x240
[  526.547260][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  526.552393][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  526.557435][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  526.563095][   T49]  ? wq_worker_running+0x97/0x190
[  526.568242][   T49]  worker_thread+0xaf5/0x12a0
[  526.572961][   T49]  kthread+0x29d/0x330
[  526.577308][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  526.582366][   T49]  ? kthread_blkcg+0xd0/0xd0
[  526.587059][   T49]  ret_from_fork+0x1f/0x30
[  526.591682][   T49]  </TASK>
[  526.602374][   T49] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  526.616448][   T49] Bluetooth: hci2: failed to register connection device
[  526.982008][ T9770] bridge0: port 4(veth0_vlan) entered blocking state
[  527.000149][ T9770] bridge0: port 4(veth0_vlan) entered disabled state
[  527.012229][ T9770] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  527.102809][ T9774] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1889'.
[  527.149790][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  527.186800][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  527.212883][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  528.703598][ T9808] netlink: 'syz.2.1899': attribute type 6 has an invalid length.
[  529.011394][ T9817] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1904'.
[  529.160223][ T5037] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  533.090390][ T9870] netlink: 'syz.3.1922': attribute type 6 has an invalid length.
[  533.778426][ T9878] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1924'.
[  535.929387][ T5037] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  536.081117][ T9900] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1938'.
[  538.720418][ T9935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  538.766659][ T9935] batman_adv: batadv0: Removing interface: batadv_slave_0
[  540.535642][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  540.584011][ T9935] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  540.625483][ T9935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  540.821565][ T9940] device syzkaller0 entered promiscuous mode
[  541.384653][ T9956] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1941'.
[  541.991203][ T9974] netlink: 'syz.1.1947': attribute type 10 has an invalid length.
[  542.044142][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1947'.
[  542.056611][ T9974] device veth0_vlan left promiscuous mode
[  542.062796][ T9974] device veth0_vlan entered promiscuous mode
[  542.090571][ T9974] bridge0: port 4(veth0_vlan) entered blocking state
[  542.116459][ T9974] bridge0: port 4(veth0_vlan) entered disabled state
[  542.127302][ T9974] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  542.286697][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  542.328352][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  542.372400][   T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  546.870589][T10038] netlink: 'syz.3.1962': attribute type 10 has an invalid length.
[  546.918066][T10038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1962'.
[  546.984347][T10038] device veth0_vlan left promiscuous mode
[  547.029901][T10038] device veth0_vlan entered promiscuous mode
[  547.730328][T10038] bridge0: port 4(veth0_vlan) entered blocking state
[  547.778567][T10038] bridge0: port 4(veth0_vlan) entered disabled state
[  548.019627][T10038] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  548.207033][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  548.236823][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  548.277559][ T7810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  552.003089][ T9781] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11
[  552.904294][T10086] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1980'.
[  553.049992][T10091] netlink: 'syz.0.1981': attribute type 10 has an invalid length.
[  553.085619][T10091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1981'.
[  553.113754][T10091] device veth0_vlan left promiscuous mode
[  553.127093][T10091] device veth0_vlan entered promiscuous mode
[  553.517656][T10091] bridge0: port 5(veth0_vlan) entered blocking state
[  553.545781][T10091] bridge0: port 5(veth0_vlan) entered disabled state
[  553.763735][T10091] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  553.861918][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  553.901981][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  553.935090][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  554.018654][ T4287] Bluetooth: hci3: command 0x0419 tx timeout
[  554.294179][T10104] netlink: 'syz.1.1986': attribute type 4 has an invalid length.
[  554.316567][T10104] netlink: 'syz.1.1986': attribute type 1 has an invalid length.
[  554.336396][T10104] netlink: 'syz.1.1986': attribute type 26 has an invalid length.
[  554.365408][T10104] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.1986'.
[  555.052082][T10120] netlink: 'syz.3.1989': attribute type 6 has an invalid length.
[  556.097107][ T4287] Bluetooth: hci3: command 0x0406 tx timeout
[  556.739195][T10136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'.
[  556.904526][T10142] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1998'.
[  557.055065][T10145] netlink: 'syz.2.1999': attribute type 10 has an invalid length.
[  557.076438][T10145] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1999'.
[  557.092540][T10145] bridge0: port 4(veth0_vlan) entered blocking state
[  557.117902][T10145] bridge0: port 4(veth0_vlan) entered disabled state
[  557.323573][T10145] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  557.845889][T10153] netlink: 'syz.2.2003': attribute type 4 has an invalid length.
[  557.896161][T10158] netlink: 'syz.3.2004': attribute type 3 has an invalid length.
[  557.907498][T10153] netlink: 'syz.2.2003': attribute type 1 has an invalid length.
[  557.920834][T10156] netlink: 'syz.3.2004': attribute type 3 has an invalid length.
[  557.931455][T10156] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2004'.
[  557.969376][T10153] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.2003'.
[  557.980944][T10158] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2004'.
[  559.293240][T10179] validate_nla: 1 callbacks suppressed
[  559.293381][T10179] netlink: 'syz.1.2013': attribute type 10 has an invalid length.
[  559.430010][T10179] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2013'.
[  559.501114][T10179] bridge0: port 4(veth0_vlan) entered blocking state
[  559.573463][T10179] bridge0: port 4(veth0_vlan) entered disabled state
[  559.857826][T10179] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  560.263252][T10191] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2016'.
[  560.614811][T10197] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2017'.
[  560.700589][T10195] netlink: 'syz.4.2018': attribute type 4 has an invalid length.
[  560.709112][ T7829] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  560.749308][T10195] netlink: 'syz.4.2018': attribute type 1 has an invalid length.
[  560.772291][T10195] netlink: 'syz.4.2018': attribute type 26 has an invalid length.
[  560.806770][T10195] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.2018'.
[  562.412710][T10225] netlink: 'syz.0.2027': attribute type 10 has an invalid length.
[  562.466577][T10225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2027'.
[  562.508634][T10225] bridge0: port 5(veth0_vlan) entered blocking state
[  562.538918][T10225] bridge0: port 5(veth0_vlan) entered disabled state
[  562.827492][T10225] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  563.059765][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  563.066579][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  564.568802][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.622651][T10242] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.673624][T10242] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.697396][T10242] batman_adv: batadv0: Removing interface: batadv_slave_1
[  565.627679][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2032'.
[  566.525332][T10275] netlink: 'syz.0.2041': attribute type 10 has an invalid length.
[  566.546310][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2041'.
[  566.555583][T10275] bridge0: port 5(veth0_vlan) entered blocking state
[  566.563577][T10275] bridge0: port 5(veth0_vlan) entered disabled state
[  566.588524][T10275] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  566.623184][T10267] device syzkaller0 entered promiscuous mode
[  566.955411][ T5037] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  567.252692][T10288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  567.274141][T10288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  567.315084][T10288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  567.345700][T10288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  568.312318][T10297] netlink: 'syz.1.2060': attribute type 2 has an invalid length.
[  568.337200][T10297] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2060'.
[  568.744345][T10311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2054'.
[  569.081170][T10320] netlink: 'syz.1.2057': attribute type 1 has an invalid length.
[  569.098567][T10320] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2057'.
[  571.665298][ T7786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  573.285157][T10336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  573.447374][T10336] batman_adv: batadv0: Removing interface: batadv_slave_0
[  573.567064][T10336] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  573.590758][T10336] batman_adv: batadv0: Removing interface: batadv_slave_1
[  576.634068][T10336] batman_adv: batadv0: Removing interface: netdevsim0
[  577.665102][T10362] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2070'.
[  577.693403][T10362] netlink: zone id is out of range
[  577.718723][T10362] netlink: zone id is out of range
[  577.751457][T10362] netlink: zone id is out of range
[  577.763030][T10362] netlink: zone id is out of range
[  577.776723][T10362] netlink: zone id is out of range
[  577.784233][T10362] netlink: zone id is out of range
[  577.813565][T10362] netlink: zone id is out of range
[  577.830063][T10362] netlink: zone id is out of range
[  577.842842][T10362] netlink: zone id is out of range
[  577.859109][T10362] netlink: zone id is out of range
[  583.642154][T10405] device syzkaller0 entered promiscuous mode
[  583.859305][T10408] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2088'.
[  583.901182][T10408] net_ratelimit: 3 callbacks suppressed
[  583.901219][T10408] openvswitch: netlink: Key type 386 is out of range max 32
[  584.800549][T10414] netlink: 'syz.0.2100': attribute type 1 has an invalid length.
[  584.819486][T10414] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2100'.
[  591.735857][ T7810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  592.067291][T10494] netlink: 'syz.2.2114': attribute type 1 has an invalid length.
[  592.075697][T10494] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2114'.
[  592.214151][T10503] netlink: 'syz.4.2116': attribute type 2 has an invalid length.
[  592.223766][T10503] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2116'.
[  592.696398][T10517] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2120'.
[  593.072067][T10521] netlink: 'syz.3.2121': attribute type 10 has an invalid length.
[  593.088174][T10521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2121'.
[  597.494939][T10554] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2143'.
[  597.913398][T10565] netlink: 'syz.3.2131': attribute type 2 has an invalid length.
[  597.976855][T10565] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2131'.
[  598.085353][ T7810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  598.880435][ T4287] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4
[  601.936141][T10587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2141'.
[  602.900046][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  602.908707][ T4287] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  602.919224][ T4287] Bluetooth: hci0: Injecting HCI hardware error event
[  602.930549][ T9781] Bluetooth: hci0: hardware error 0x00
[  605.011186][T10604] netlink: 'syz.0.2158': attribute type 21 has an invalid length.
[  605.046827][T10604] IPv6: NLM_F_CREATE should be specified when creating new route
[  605.083170][T10604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  605.090873][T10604] IPv6: NLM_F_CREATE should be set when creating new route
[  605.098339][T10604] IPv6: NLM_F_CREATE should be set when creating new route
[  605.118866][T10608] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2158'.
[  606.656425][ T9781] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  606.949910][T10637] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  607.079313][T10637] device syzkaller0 entered promiscuous mode
[  607.103831][T10631] netlink: 'syz.0.2152': attribute type 2 has an invalid length.
[  607.115771][T10631] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2152'.
[  612.450806][T10654] netlink: 'syz.1.2164': attribute type 10 has an invalid length.
[  612.459128][T10654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2164'.
[  612.469911][T10654] batman_adv: batadv0: Adding interface: virt_wifi0
[  612.476656][T10654] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  612.502505][T10654] batman_adv: batadv0: Interface activated: virt_wifi0
[  612.549082][T10657] device syzkaller0 entered promiscuous mode
[  612.623127][   T11] tipc: Subscription rejected, illegal request
[  614.646602][T10682] netlink: 'syz.1.2169': attribute type 2 has an invalid length.
[  614.654506][T10682] netlink: 'syz.1.2169': attribute type 8 has an invalid length.
[  614.676331][T10682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2169'.
[  615.053137][T10687] netlink: 'syz.3.2172': attribute type 2 has an invalid length.
[  615.131075][T10687] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2172'.
[  616.773778][T10736] netlink: 'syz.0.2190': attribute type 2 has an invalid length.
[  616.801348][T10736] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2190'.
[  617.287307][T10759] netlink: 'syz.0.2195': attribute type 10 has an invalid length.
[  617.405223][T10759] device wg1 entered promiscuous mode
[  617.421687][T10759] team0: Device wg1 is of different type
[  618.431014][T10769] device syzkaller0 entered promiscuous mode
[  619.632410][T10782] netlink: 'syz.2.2206': attribute type 2 has an invalid length.
[  619.640999][T10782] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2206'.
[  622.839253][ T5037] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  622.861886][T10832] : port 1(ip6gretap0) entered blocking state
[  622.922013][T10832] : port 1(ip6gretap0) entered disabled state
[  623.035745][T10832] device ip6gretap0 entered promiscuous mode
[  623.771505][T10831] netlink: 'syz.0.2220': attribute type 2 has an invalid length.
[  623.786883][T10831] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2220'.
[  623.809968][T10838] device ip6gretap0 left promiscuous mode
[  623.817131][T10838] : port 1(ip6gretap0) entered disabled state
[  624.270543][ T9781] Bluetooth: hci2: adv larger than maximum supported
[  624.270596][ T9781] Bluetooth: hci2: Malformed LE Event: 0x0d
[  624.735519][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.742108][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  625.781238][T10872] netlink: 'syz.1.2234': attribute type 21 has an invalid length.
[  626.041759][T10879] netlink: 'syz.3.2235': attribute type 10 has an invalid length.
[  626.131564][T10879] device vlan0 entered promiscuous mode
[  626.207729][T10879] team0: Port device vlan0 added
[  626.292569][T10869] device syzkaller0 entered promiscuous mode
[  626.812516][ T9781] Bluetooth: hci3: Malformed LE Event: 0x0d
[  627.279353][ T9781] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11
[  627.749455][ T9781] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10
[  627.921785][ T9781] Bluetooth: hci3: Malformed LE Event: 0x0d
[  628.463417][ T9781] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  628.959308][ T9781] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5
[  629.776369][ T9781] Bluetooth: hci2: command 0x0409 tx timeout
[  631.364722][ T7810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  634.538880][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  637.129097][T10948] device syzkaller0 entered promiscuous mode
[  637.600830][ T4287] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  640.252053][T10980] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  640.285681][T10985] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2275'.
[  640.327293][T10985] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  640.345437][T10985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  640.396380][T10987] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2275'.
[  640.438875][T10987] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  640.596454][T10987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  640.612116][T10995] device lo entered promiscuous mode
[  643.061745][ T5037] wlan1: Trigger new scan to find an IBSS to join
[  643.733489][T11062] netlink: 'syz.1.2299': attribute type 1 has an invalid length.
[  643.742660][T11062] netlink: 'syz.1.2299': attribute type 2 has an invalid length.
[  643.784839][T11062] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2299'.
[  645.310741][T11093] netlink: 'syz.3.2309': attribute type 29 has an invalid length.
[  645.330770][T11093] netlink: 'syz.3.2309': attribute type 29 has an invalid length.
[  645.353209][T11093] netlink: 'syz.3.2309': attribute type 29 has an invalid length.
[  645.374656][T11093] netlink: 'syz.3.2309': attribute type 29 has an invalid length.
[  645.488107][T11098] netlink: 'syz.3.2309': attribute type 29 has an invalid length.
[  645.756048][T11107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2313'.
[  646.184692][T11114] syzkaller0: create flow: hash 2260323993 index 1
[  646.806701][ T1172] syzkaller0: tun_net_xmit 76
[  646.812023][ T1172] syzkaller0: tun_net_xmit 48
[  646.899223][T11111] syzkaller0: delete flow: hash 2260323993 index 1
[  647.001284][ T7810] wlan1: Trigger new scan to find an IBSS to join
[  647.955510][ T7797] wlan1: Creating new IBSS network, BSSID aa:e9:fb:bd:ba:f2
[  650.349102][T11156] netlink: 'syz.0.2327': attribute type 16 has an invalid length.
[  650.358601][T11156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2327'.
[  652.102851][T11147] device syzkaller0 entered promiscuous mode
[  654.207766][ T7786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  654.768060][T11167] netlink: 'syz.4.2330': attribute type 20 has an invalid length.
[  655.171458][T11188] device syzkaller0 entered promiscuous mode
[  655.202523][T11195] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2341'.
[  655.235489][T11192] netlink: 'syz.2.2340': attribute type 10 has an invalid length.
[  655.276524][T11192] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2340'.
[  655.311031][T11192] bridge0: port 4(veth0_vlan) entered blocking state
[  655.351246][T11192] bridge0: port 4(veth0_vlan) entered disabled state
[  655.414026][T11192] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  657.981564][T11218] netlink: 'syz.3.2348': attribute type 10 has an invalid length.
[  657.994541][T11218] device virt_wifi0 entered promiscuous mode
[  658.004268][T11218] team0: Port device virt_wifi0 added
[  658.614574][T11233] netlink: 'syz.0.2353': attribute type 2 has an invalid length.
[  658.634377][T11237] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2355'.
[  658.851972][T11237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  658.863480][T11237] device bond_slave_1 left promiscuous mode
[  658.889309][T11237] bond0 (unregistering): Released all slaves
[  658.999893][T11233] device 0 entered promiscuous mode
[  659.321663][T11257] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2361'.
[  659.496023][T11256] netlink: 'syz.0.2361': attribute type 10 has an invalid length.
[  659.517522][T11256] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  659.582777][T11265] netlink: 'syz.2.2363': attribute type 2 has an invalid length.
[  659.649711][T11265] netlink: 'syz.2.2363': attribute type 8 has an invalid length.
[  659.709212][T11265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2363'.
[  664.403626][T11311] netlink: 'syz.2.2379': attribute type 13 has an invalid length.
[  664.443009][T11311] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.2379'.
[  664.743370][T11321] netlink: 'syz.2.2384': attribute type 27 has an invalid length.
[  664.824719][T11322] netlink: 'syz.4.2385': attribute type 1 has an invalid length.
[  664.910615][T11322] netlink: 'syz.4.2385': attribute type 3 has an invalid length.
[  664.980952][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2385'.
[  665.688865][ T7810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  668.735199][ T4287] Bluetooth: hci4: Unknown advertising packet type: 0x100
[  669.758316][T11431] netlink: 'syz.3.2422': attribute type 21 has an invalid length.
[  669.829388][T11431] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2422'.
[  670.330357][T11447] netlink: 'syz.4.2429': attribute type 15 has an invalid length.
[  670.374164][T11447] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2429'.
[  671.778808][ T4287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  671.787702][ T4287] Bluetooth: hci1: Injecting HCI hardware error event
[  671.801689][ T4287] Bluetooth: hci1: hardware error 0x00
[  674.155673][T11472] netlink: 'syz.3.2436': attribute type 10 has an invalid length.
[  674.399520][T11472] bridge0: port 3(team0) entered disabled state
[  674.444440][T11481] netlink: 'syz.4.2439': attribute type 29 has an invalid length.
[  674.561583][T11472] device team0 left promiscuous mode
[  674.568142][T11472] device team_slave_1 left promiscuous mode
[  674.579135][T11472] device geneve1 left promiscuous mode
[  674.590318][T11472] device virt_wifi0 left promiscuous mode
[  674.599420][T11472] bridge0: port 3(team0) entered disabled state
[  674.697215][T11472] device team0 entered promiscuous mode
[  674.711668][T11472] device team_slave_1 entered promiscuous mode
[  674.731733][T11472] device geneve1 entered promiscuous mode
[  674.756162][T11472] device virt_wifi0 entered promiscuous mode
[  674.792634][T11472] bond0: (slave team0): Enslaving as an active interface with an up link
[  674.825960][T11481] netlink: 'syz.4.2439': attribute type 29 has an invalid length.
[  674.884282][T11486] netlink: 'syz.4.2439': attribute type 29 has an invalid length.
[  675.936387][ T4287] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  676.860056][T11511] device syzkaller0 left promiscuous mode
[  676.939249][T11512] netlink: 'syz.4.2447': attribute type 16 has an invalid length.
[  676.949852][T11512] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2447'.
[  677.550512][T11521] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2451'.
[  677.956657][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  678.039295][T11541] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.2457'.
[  678.406636][T11548] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2461'.
[  679.941007][T11577] netlink: 'syz.3.2471': attribute type 10 has an invalid length.
[  680.126046][T11581] TCP: TCP_TX_DELAY enabled
[  680.129580][T11585] device syzkaller0 entered promiscuous mode
[  680.802983][T11608] IPv6: Can't replace route, no match found
[  680.908842][T11612] netlink: 'syz.1.2487': attribute type 4 has an invalid length.
[  680.996404][T11612] netlink: 'syz.1.2487': attribute type 1 has an invalid length.
[  681.013177][T11612] netlink: 'syz.1.2487': attribute type 1 has an invalid length.
[  681.035551][T11612] netlink: 'syz.1.2487': attribute type 4 has an invalid length.
[  681.064082][T11612] netlink: 'syz.1.2487': attribute type 26 has an invalid length.
[  681.087828][T11612] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.2487'.
[  681.708395][T11641] netlink: 'syz.4.2498': attribute type 15 has an invalid length.
[  681.757243][T11641] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2498'.
[  684.172515][T11667] netlink: 'syz.1.2508': attribute type 10 has an invalid length.
[  684.311987][T11667] device nlmon0 entered promiscuous mode
[  684.366528][T11667] team0: Device nlmon0 is of different type
[  685.204533][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  685.946866][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.953250][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.440835][T11701] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2519'.
[  690.037290][   T27] audit: type=1800 audit(1791034161.646:2): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2525" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  690.069751][T11723] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  690.120290][T11723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  690.193905][T11723] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  690.686672][T11742] netlink: 'syz.0.2531': attribute type 10 has an invalid length.
[  690.831249][T11742] device bridge_slave_1 left promiscuous mode
[  690.864041][T11742] bridge0: port 2(bridge_slave_1) entered disabled state
[  690.912773][ T4287] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6
[  691.019674][T11742] device bridge_slave_1 entered promiscuous mode
[  691.052672][T11742] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  693.290286][T11785] device veth1_macvtap left promiscuous mode
[  693.298337][T11785] device macsec0 left promiscuous mode
[  693.718791][T11791] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2546'.
[  694.353406][T11791] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  697.105280][ T7810] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  697.463111][T11824] delete_channel: no stack
[  697.900310][T11851] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2567'.
[  698.059428][T11851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  698.173070][T11844] netlink: 'syz.0.2566': attribute type 3 has an invalid length.
[  698.194186][T11850] netlink: 'syz.4.2568': attribute type 2 has an invalid length.
[  698.194580][T11844] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2566'.
[  698.788123][T11863] netlink: 'syz.4.2573': attribute type 39 has an invalid length.
[  699.171362][T11871] IPv6: NLM_F_CREATE should be specified when creating new route
[  699.210906][T11866] netlink: 463 bytes leftover after parsing attributes in process `syz.1.2575'.
[  699.219027][T11871] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2576'.
[  699.445548][T11876] netlink: 16362 bytes leftover after parsing attributes in process `syz.0.2577'.
[  700.835229][T11891] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2582'.
[  702.576620][T11925] netlink: 'syz.2.2595': attribute type 2 has an invalid length.
[  702.637013][T11925] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2595'.
[  704.365305][T11959] netlink: 'syz.3.2604': attribute type 29 has an invalid length.
[  704.428670][T11959] netlink: 'syz.3.2604': attribute type 29 has an invalid length.
[  705.445774][T11987] netlink: 'syz.4.2612': attribute type 2 has an invalid length.
[  705.633435][T11987] device .*! entered promiscuous mode
[  705.730646][T11983] netlink: 'syz.1.2613': attribute type 9 has an invalid length.
[  705.749656][T11983] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2613'.
[  706.430298][T11998] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2617'.
[  706.897067][T12015] netlink: 'syz.2.2622': attribute type 1 has an invalid length.
[  708.937490][T12042] netlink: 'syz.1.2631': attribute type 10 has an invalid length.
[  709.059435][T12042] device team0 left promiscuous mode
[  709.069305][T12042] device team_slave_1 left promiscuous mode
[  709.075544][T12042] device geneve1 left promiscuous mode
[  709.091789][T12042] bridge0: port 3(team0) entered disabled state
[  709.124564][T12042] team0 (unregistering): Port device team_slave_1 removed
[  709.185654][T12042] team0 (unregistering): Port device geneve1 removed
[  709.534878][ T7822] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  711.455126][T12078] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2643'.
[  711.470493][T12078] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  711.569420][T12078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  711.597754][T12079] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2643'.
[  712.560474][T12094] netdevsim netdevsim3: Direct firmware load for � failed with error -2
[  712.570680][T12094] netdevsim netdevsim3: Falling back to sysfs fallback for: �
[  712.724382][T12097] netlink: 'syz.0.2649': attribute type 10 has an invalid length.
[  712.775112][T12097] device macvlan0 entered promiscuous mode
[  712.845096][T12097] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  713.255734][ T4287] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4
[  713.482155][T12117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2656'.
[  713.757871][T12115] netlink: 'syz.0.2657': attribute type 3 has an invalid length.
[  713.784145][T12115] netlink: 42775 bytes leftover after parsing attributes in process `syz.0.2657'.
[  714.438531][T12131] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.2661'.
[  716.255465][ T7829] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  716.384328][T12133] netlink: 'syz.4.2662': attribute type 10 has an invalid length.
[  716.386084][T12131] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  716.401991][   T27] audit: type=1800 audit(1791034187.996:3): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2661" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  716.406522][T12131] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  716.441773][T12131] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  717.029882][T12154] netlink: 'syz.3.2670': attribute type 11 has an invalid length.
[  717.040007][T12154] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2670'.
[  717.288952][T12163] netlink: 'syz.2.2671': attribute type 10 has an invalid length.
[  717.297249][ T4287] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  717.305973][ T4287] Bluetooth: hci3: Injecting HCI hardware error event
[  717.315154][ T4287] Bluetooth: hci3: hardware error 0x00
[  717.366515][T12162] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2672'.
[  717.832992][T12153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  717.890756][T12163] device wlan1 entered promiscuous mode
[  717.937374][T12163] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  718.933806][T12183] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2679'.
[  719.873766][T12183] syz.1.2679 (12183) used greatest stack depth: 15200 bytes left
[  719.936439][ T4287] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  720.828738][T12223] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2693'.
[  721.813961][T12218] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2691'.
[  721.962711][T12230] netlink: 'syz.3.2695': attribute type 10 has an invalid length.
[  722.017808][T12230] device wlan1 entered promiscuous mode
[  722.040108][T12230] team0: Port device wlan1 added
[  722.553395][T12244] netlink: 'syz.3.2700': attribute type 4 has an invalid length.
[  722.607859][T12244] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2700'.
[  724.016537][ T7810] wlan1: Trigger new scan to find an IBSS to join
[  725.620666][T12294] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2717'.
[  725.712159][T12295] netlink: 105 bytes leftover after parsing attributes in process `syz.3.2717'.
[  725.758571][T12295] netlink: 105 bytes leftover after parsing attributes in process `syz.3.2717'.
[  726.536243][T12303] netlink: 'syz.2.2720': attribute type 2 has an invalid length.
[  726.656752][T12303] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2720'.
[  727.021838][T12312] netlink: 'syz.1.2722': attribute type 5 has an invalid length.
[  727.094917][ T7810] wlan1: Trigger new scan to find an IBSS to join
[  727.114378][T12314] netlink: 'syz.4.2723': attribute type 2 has an invalid length.
[  727.163380][T12314] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2723'.
[  727.561405][T12319] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  728.234596][ T7786] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  728.678558][T12329] device syzkaller0 entered promiscuous mode
[  731.160338][T12364] netlink: 'syz.4.2739': attribute type 2 has an invalid length.
[  731.175706][T12364] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.2739'.
[  731.840667][T12339] netlink: 'syz.3.2733': attribute type 10 has an invalid length.
[  731.864262][T12339] device netdevsim0 entered promiscuous mode
[  731.878162][T12339] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  732.014314][T12366] Q�6�`Ҙ: renamed from lo
[  732.064950][T12370] netlink: 'syz.2.2742': attribute type 10 has an invalid length.
[  732.093277][T12370] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2742'.
[  732.108268][T12370] device ipvlan1 entered promiscuous mode
[  732.153470][T12369] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.2741'.
[  732.294924][T12370] bridge0: port 4(ipvlan1) entered blocking state
[  732.360441][T12370] bridge0: port 4(ipvlan1) entered disabled state
[  732.585748][T12370] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  732.700562][T12374] netlink: 'syz.4.2744': attribute type 10 has an invalid length.
[  732.741623][T12374] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2744'.
[  732.798439][T12374] device dummy0 entered promiscuous mode
[  732.854637][T12374] bridge0: port 4(dummy0) entered blocking state
[  732.883454][T12374] bridge0: port 4(dummy0) entered disabled state
[  732.951214][T12374] bridge0: port 4(dummy0) entered blocking state
[  732.958439][T12374] bridge0: port 4(dummy0) entered listening state
[  734.293066][T12406] netlink: 'syz.1.2755': attribute type 10 has an invalid length.
[  735.082429][T12420] netlink: 134268 bytes leftover after parsing attributes in process `syz.3.2761'.
[  735.378742][T12431] netlink: 'syz.1.2762': attribute type 4 has an invalid length.
[  735.451799][T12431] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2762'.
[  735.501389][T12439] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2765'.
[  735.715663][T12444] netlink: 'syz.3.2767': attribute type 10 has an invalid length.
[  738.235143][T12492] netlink: 'syz.0.2785': attribute type 25 has an invalid length.
[  738.245648][T12492] netlink: 'syz.0.2785': attribute type 29 has an invalid length.
[  738.511462][T12500] netlink: 'syz.2.2789': attribute type 1 has an invalid length.
[  738.531265][T12500] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2789'.
[  740.734200][T12517] delete_channel: no stack
[  740.991419][T12530] netlink: 'syz.3.2801': attribute type 5 has an invalid length.
[  742.270155][ T7797] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  744.303182][T12555] tipc: Started in network mode
[  744.336783][T12555] tipc: Node identity 9215a268, cluster identity 4711
[  744.344122][T12555] tipc: Node number set to 2450891368
[  744.711825][T12569] netlink: 'syz.4.2816': attribute type 5 has an invalid length.
[  745.473246][T12589] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  745.776099][T12581] netlink: 'syz.3.2820': attribute type 2 has an invalid length.
[  745.896888][T12581] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2820'.
[  746.014860][T12594] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2823'.
[  747.303957][T12628] netlink: 'syz.2.2833': attribute type 5 has an invalid length.
[  747.441880][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.448421][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  747.687727][T12642] netlink: 'syz.4.2836': attribute type 2 has an invalid length.
[  747.787241][T12642] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2836'.
[  747.882751][T12641] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  748.988615][T12659] netlink: 'syz.2.2846': attribute type 4 has an invalid length.
[  749.035897][T12659] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2846'.
[  749.882655][T12673] netlink: 134268 bytes leftover after parsing attributes in process `syz.4.2850'.
[  750.073516][T12675] netlink: 'syz.0.2852': attribute type 5 has an invalid length.
[  750.318989][T12685] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  751.140590][T12699] netlink: 'syz.0.2858': attribute type 2 has an invalid length.
[  751.218429][T12699] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2858'.
[  751.277982][T12695] netlink: 'syz.4.2862': attribute type 10 has an invalid length.
[  751.440757][T12695] device veth0_vlan left promiscuous mode
[  751.454506][T12695] device veth0_vlan entered promiscuous mode
[  751.470986][T12695] team0: Device veth0_vlan failed to register rx_handler
[  751.812898][T12710] netlink: 'syz.3.2875': attribute type 10 has an invalid length.
[  751.824776][T12710] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2875'.
[  751.837945][T12710] device ipvlan1 entered promiscuous mode
[  751.872210][T12710] bridge0: port 3(ipvlan1) entered blocking state
[  751.880977][T12710] bridge0: port 3(ipvlan1) entered disabled state
[  751.921312][T12710] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  752.224968][T12725] netlink: 'syz.0.2868': attribute type 5 has an invalid length.
[  752.369315][T12721] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2867'.
[  752.713293][T12734] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  752.864630][T12743] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.2876'.
[  752.973442][T12745] netlink: 'syz.3.2877': attribute type 10 has an invalid length.
[  752.993899][T12745] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2877'.
[  753.005235][T12745] device dummy0 entered promiscuous mode
[  753.027942][T12745] bridge0: port 3(dummy0) entered blocking state
[  753.058474][T12745] bridge0: port 3(dummy0) entered disabled state
[  753.123557][T12745] bridge0: port 3(dummy0) entered blocking state
[  753.131817][T12745] bridge0: port 3(dummy0) entered listening state
[  753.240464][T12753] device lo left promiscuous mode
[  753.520830][T12756] Q�6�`Ҙ: renamed from lo
[  753.603602][T12761] netlink: 'syz.1.2879': attribute type 2 has an invalid length.
[  753.684028][T12761] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2879'.
[  753.742019][T12766] netlink: 'syz.0.2883': attribute type 10 has an invalid length.
[  753.772656][T12766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2883'.
[  753.890211][T12766] device ipvlan1 entered promiscuous mode
[  754.134438][T12766] bridge0: port 2(ipvlan1) entered blocking state
[  754.150590][T12766] bridge0: port 2(ipvlan1) entered disabled state
[  754.229891][T12766] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  754.888525][T12790] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  755.412229][T12796] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.2891'.
[  757.014753][T12833] Q�6�`Ҙ: renamed from lo
[  757.580092][T12842] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  758.087641][T12852] netlink: 'syz.4.2909': attribute type 10 has an invalid length.
[  758.095991][T12852] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2909'.
[  758.143313][T12852] device ipvlan1 entered promiscuous mode
[  758.207052][T12852] bridge0: port 5(ipvlan1) entered blocking state
[  758.215023][T12852] bridge0: port 5(ipvlan1) entered disabled state
[  758.262535][T12852] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  759.302954][T12879] netlink: 'syz.1.2921': attribute type 4 has an invalid length.
[  759.364253][T12879] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2921'.
[  760.173060][T12891] netlink: 'syz.2.2925': attribute type 2 has an invalid length.
[  760.265957][T12891] netlink: 119 bytes leftover after parsing attributes in process `syz.2.2925'.
[  761.259198][T12905] netlink: 'syz.4.2930': attribute type 10 has an invalid length.
[  761.874852][T12905] device wlan1 entered promiscuous mode
[  761.894373][T12905] team0: Port device wlan1 added
[  762.744963][T12933] netlink: 'syz.2.2939': attribute type 4 has an invalid length.
[  762.797742][T12933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2939'.
[  763.376285][    C1] bridge0: port 4(dummy0) entered learning state
[  764.075888][T12953] netlink: 'syz.1.2951': attribute type 10 has an invalid length.
[  767.278378][T13003] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2972'.
[  767.526542][T13009] netlink: 'syz.4.2974': attribute type 10 has an invalid length.
[  767.607826][T13009] device wlan1 left promiscuous mode
[  767.619570][T13009] team0: Port device wlan1 removed
[  767.647910][T13009] device wlan1 entered promiscuous mode
[  767.664623][T13009] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  768.222844][T13032] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2978'.
[  768.252526][T13032] netlink: zone id is out of range
[  768.280993][T13032] netlink: zone id is out of range
[  768.294607][T13032] netlink: zone id is out of range
[  768.312377][T13032] netlink: zone id is out of range
[  768.333074][T13032] netlink: zone id is out of range
[  768.333658][T13031] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2980'.
[  768.339670][T13032] netlink: zone id is out of range
[  768.366290][T13032] netlink: zone id is out of range
[  768.371677][T13032] netlink: zone id is out of range
[  768.377454][T13032] netlink: zone id is out of range
[  768.383027][T13032] netlink: zone id is out of range
[  768.498148][    C1] bridge0: port 3(dummy0) entered learning state
[  769.547667][T13057] netlink: 'syz.1.2989': attribute type 10 has an invalid length.
[  770.247176][T13066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2991'.
[  770.492448][T13068] netlink: 'syz.3.2990': attribute type 3 has an invalid length.
[  770.507850][T13073] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3003'.
[  770.537161][T13068] netlink: 42732 bytes leftover after parsing attributes in process `syz.3.2990'.
[  770.706063][T13073] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  771.047947][T13078] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2994'.
[  771.152764][T13082] device syzkaller0 entered promiscuous mode
[  771.901348][T13096] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3002'.
[  771.943313][T13096] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  776.262990][T13097] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3002'.
[  776.273783][T13116] netlink: 'syz.3.3008': attribute type 10 has an invalid length.
[  776.359203][T13116] bond0: (slave team0): Releasing backup interface
[  776.374350][T13116] device team0 left promiscuous mode
[  776.393502][T13116] device team_slave_1 left promiscuous mode
[  776.400332][T13116] device geneve1 left promiscuous mode
[  776.407411][T13116] device virt_wifi0 left promiscuous mode
[  776.414347][T13116] device wlan1 left promiscuous mode
[  776.454586][T13116] team0 (unregistering): Port device team_slave_1 removed
[  776.464320][T13116] team0 (unregistering): Port device geneve1 removed
[  776.483853][T13116] team0 (unregistering): Port device vlan0 removed
[  776.505476][T13116] team0 (unregistering): Port device virt_wifi0 removed
[  776.528416][T13116] team0 (unregistering): Port device wlan1 removed
[  776.556535][T13125] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3012'.
[  779.994285][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3019'.
[  783.861896][    C1] bridge0: port 3(dummy0) entered forwarding state
[  783.871893][    C1] bridge0: topology change detected, propagating
[  784.119843][T12360] tipc: Subscription rejected, illegal request
[  784.618822][T13183] netlink: 'syz.2.3031': attribute type 10 has an invalid length.
[  784.635576][T13183] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3031'.
[  784.690933][T13183] net_ratelimit: 5 callbacks suppressed
[  784.690953][T13183] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  784.730276][T13191] netlink: 'syz.3.3035': attribute type 2 has an invalid length.
[  784.752501][T13191] netlink: 'syz.3.3035': attribute type 8 has an invalid length.
[  784.776393][T13191] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3035'.
[  785.788632][T13230] netlink: 'syz.2.3050': attribute type 10 has an invalid length.
[  785.989432][T13230] device wg1 entered promiscuous mode
[  786.002163][T13230] team0: Device wg1 is of different type
[  787.830104][T13263] : port 1(ip6gretap0) entered blocking state
[  787.857661][T13263] : port 1(ip6gretap0) entered disabled state
[  787.884680][T13263] device ip6gretap0 entered promiscuous mode
[  787.894790][T13260] device ip6gretap0 left promiscuous mode
[  787.904441][T13260] : port 1(ip6gretap0) entered disabled state
[  788.902720][T13277] netlink: 'syz.3.3068': attribute type 21 has an invalid length.
[  789.009806][T13280] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.3067'.
[  789.153235][T13280] netlink: zone id is out of range
[  789.217679][T13280] netlink: zone id is out of range
[  789.340580][T13286] netlink: 'syz.2.3071': attribute type 10 has an invalid length.
[  789.355591][T13280] netlink: zone id is out of range
[  789.441721][T13280] netlink: zone id is out of range
[  789.510213][T13280] netlink: zone id is out of range
[  789.561543][T13280] netlink: get zone limit has 8 unknown bytes
[  789.637578][T13286] device vlan0 entered promiscuous mode
[  789.668047][T13286] team0: Port device vlan0 added
[  789.771045][T13287] device syzkaller0 entered promiscuous mode
[  790.324526][ T4287] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11
[  791.060783][ T4287] Bluetooth: hci4: Malformed LE Event: 0x0d
[  792.336339][ T4287] Bluetooth: hci4: command 0x0419 tx timeout
[  793.457441][    C1] bridge0: port 4(dummy0) entered forwarding state
[  793.464260][    C1] bridge0: topology change detected, propagating
[  794.416411][ T4287] Bluetooth: hci4: command 0x0406 tx timeout
[  794.502891][ T4287] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15
[  799.509831][T13375] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3104'.
[  799.520839][T13375] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  799.534144][T13375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  799.551240][T13378] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3104'.
[  799.561769][T13378] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  799.579300][T13378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  800.535521][T13419] netlink: 'syz.2.3118': attribute type 20 has an invalid length.
[  800.930595][T13421] device syzkaller0 left promiscuous mode
[  801.075247][T13424] netlink: 'syz.2.3121': attribute type 1 has an invalid length.
[  801.114155][T13424] netlink: 'syz.2.3121': attribute type 2 has an invalid length.
[  801.147835][T13424] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3121'.
[  801.475859][T13436] netlink: 'syz.1.3125': attribute type 10 has an invalid length.
[  801.480094][T13434] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3124'.
[  801.514261][T13436] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  801.977989][T13436] batman_adv: batadv0: Removing interface: virt_wifi0
[  802.685887][T13453] netlink: 'syz.0.3129': attribute type 2 has an invalid length.
[  802.746046][T13453] netlink: 'syz.0.3129': attribute type 8 has an invalid length.
[  802.774450][T13453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3129'.
[  806.691154][T13473] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3135'.
[  806.727899][T13473] netlink: zone id is out of range
[  806.756782][T13473] netlink: zone id is out of range
[  806.811091][T13473] netlink: zone id is out of range
[  806.844144][T13473] netlink: zone id is out of range
[  806.866810][T13473] netlink: zone id is out of range
[  806.886598][T13473] netlink: zone id is out of range
[  806.892385][T13473] netlink: zone id is out of range
[  806.918601][T13473] netlink: zone id is out of range
[  806.924410][T13473] netlink: zone id is out of range
[  806.944278][T13473] netlink: zone id is out of range
[  807.127448][T13481] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.3138'.
[  807.328069][T13486] netlink: 'syz.2.3139': attribute type 3 has an invalid length.
[  807.353251][T13486] netlink: 'syz.2.3139': attribute type 1 has an invalid length.
[  807.369461][T13486] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3139'.
[  808.794786][T13530] netlink: 'syz.0.3155': attribute type 21 has an invalid length.
[  808.801891][T13526] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3154'.
[  808.823475][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.830184][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  808.846050][T13530] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3155'.
[  809.639983][T13539] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.3160'.
[  810.808619][T13576] netlink: 'syz.0.3169': attribute type 10 has an invalid length.
[  813.007396][T13576] device team0 left promiscuous mode
[  813.013148][T13576] device team_slave_1 left promiscuous mode
[  813.034889][T13576] device geneve1 left promiscuous mode
[  813.098724][T13576] bridge0: port 4(team0) entered disabled state
[  813.161530][T13576] device team0 entered promiscuous mode
[  813.182841][T13576] device team_slave_1 entered promiscuous mode
[  813.189653][T13576] device geneve1 entered promiscuous mode
[  813.196943][T13576] bond0: (slave team0): Enslaving as an active interface with an up link
[  813.678215][T13587] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3171'.
[  813.700570][T13587] net_ratelimit: 18 callbacks suppressed
[  813.700591][T13587] netlink: zone id is out of range
[  813.719864][T13587] netlink: zone id is out of range
[  813.751576][T13587] netlink: zone id is out of range
[  813.759505][T13587] netlink: zone id is out of range
[  813.765524][T13587] netlink: zone id is out of range
[  813.787208][T13587] netlink: zone id is out of range
[  813.793974][T13587] netlink: zone id is out of range
[  813.804941][T13587] netlink: zone id is out of range
[  813.811925][T13587] netlink: zone id is out of range
[  813.821024][T13587] netlink: zone id is out of range
[  814.443078][T13604] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3191'.
[  814.634672][T13619] device syzkaller0 entered promiscuous mode
[  814.708985][T13618] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.3178'.
[  815.085998][T13631] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3186'.
[  815.153416][T13631] debugfs: Directory '.!
 5��7>7H
�' with parent 'ieee80211' already present!
[  815.448750][T13639] device syzkaller0 entered promiscuous mode
[  815.831866][T13652] device syzkaller0 left promiscuous mode
[  815.854399][T13649] IPv6: Can't replace route, no match found
[  816.079303][T13654] netlink: 'syz.3.3210': attribute type 4 has an invalid length.
[  816.097883][T13654] netlink: 'syz.3.3210': attribute type 1 has an invalid length.
[  816.107197][T13654] netlink: 'syz.3.3210': attribute type 1 has an invalid length.
[  816.115138][T13654] netlink: 'syz.3.3210': attribute type 4 has an invalid length.
[  816.126092][T13654] netlink: 'syz.3.3210': attribute type 26 has an invalid length.
[  816.134760][T13654] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.3210'.
[  816.145563][T13656] netlink: 'syz.2.3194': attribute type 10 has an invalid length.
[  816.518359][T13658] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3200'.
[  816.995429][T13679] device syzkaller0 entered promiscuous mode
[  818.966289][T13709] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3220'.
[  818.989389][T13709] net_ratelimit: 30 callbacks suppressed
[  818.989409][T13709] netlink: zone id is out of range
[  819.012536][T13709] netlink: zone id is out of range
[  819.035705][T13709] netlink: zone id is out of range
[  819.053268][T13709] netlink: zone id is out of range
[  819.079091][T13709] netlink: zone id is out of range
[  819.113219][T13709] netlink: zone id is out of range
[  819.127340][T13709] netlink: zone id is out of range
[  819.160672][T13709] netlink: zone id is out of range
[  819.176675][T13709] netlink: zone id is out of range
[  819.199381][T13709] netlink: zone id is out of range
[  823.662626][T13758] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3236'.
[  824.445944][T13765] netlink: 'syz.4.3239': attribute type 10 has an invalid length.
[  824.469412][T13765] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.506876][T13765] device bridge_slave_1 left promiscuous mode
[  824.556455][T13765] bridge0: port 2(bridge_slave_1) entered disabled state
[  824.621409][T13765] device bridge_slave_1 entered promiscuous mode
[  824.679774][T13765] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  826.281964][T13795] netlink: 'syz.2.3249': attribute type 2 has an invalid length.
[  826.841396][T13799] netlink: 'syz.4.3250': attribute type 3 has an invalid length.
[  826.876873][T13799] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3250'.
[  827.538392][T13810] delete_channel: no stack
[  827.859880][T13815] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3256'.
[  827.907465][T13815] net_ratelimit: 16 callbacks suppressed
[  827.909666][T13815] netlink: zone id is out of range
[  827.997170][T13815] netlink: zone id is out of range
[  828.097870][T13815] netlink: zone id is out of range
[  828.117513][T13815] netlink: zone id is out of range
[  828.133666][T13815] netlink: zone id is out of range
[  828.183190][T13815] netlink: zone id is out of range
[  828.219234][T13815] netlink: zone id is out of range
[  828.290919][T13815] netlink: zone id is out of range
[  828.324109][T13815] netlink: zone id is out of range
[  828.350764][T13815] netlink: zone id is out of range
Stopping sshd: [  828.889434][T13841] netlink: 'syz.0.3272': attribute type 29 has an invalid length.
stopped /usr/sbin/sshd (pid 4026)
OK
[  829.129314][T13841] netlink: 'syz.0.3272': attribute type 29 has an invalid length.
Stopping crond: stopped /usr/sbin/crond (pid 4012)
OK
Stopping dhcpcd...
stopped /sbin/dhcpcd (pid 3933)
[  831.879708][T13889] netlink: 'syz.3.3275': attribute type 2 has an invalid length.
[  831.943823][T13889] device .*! entered promiscuous mode
[  832.285194][T13898] netlink: 'syz.2.3276': attribute type 9 has an invalid length.
[  832.349284][T13898] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3276'.
Stopping network: [  832.904163][T13916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3283'.
[  833.069164][T13914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3285'.
[  836.539942][T13945] netlink: 'syz.4.3290': attribute type 10 has an invalid length.
[  836.595472][T13945] device macvlan0 entered promiscuous mode
[  837.274091][T13945] bond0: (slave macvlan0): Enslaving as an active interface with an up link
OK
Stopping iptables: [  838.290010][ T4287] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
OK
[  838.734367][T13983] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3299'.
Stopping system message bus: [  839.750662][   T11] tipc: Subscription rejected, illegal request
[  839.836648][T14002] netlink: 'syz.4.3313': attribute type 2 has an invalid length.
[  839.865744][T14002] netlink: 'syz.4.3313': attribute type 8 has an invalid length.
[  839.896625][T14002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3313'.
done
Stopping klogd: OK
Stopping acpid: [  842.336353][ T4287] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  842.347302][ T4287] Bluetooth: hci2: Injecting HCI hardware error event
[  842.361208][ T9781] Bluetooth: hci2: hardware error 0x00
OK
Stopping syslogd: stopped /sbin/syslogd (pid 3621)
OK
[  845.095060][T14033] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  845.105010][T14033] #PF: supervisor instruction fetch in kernel mode
[  845.111823][T14033] #PF: error_code(0x0010) - not-present page
[  845.118102][T14033] PGD 1beed067 P4D 1beed067 PUD 0 
[  845.123381][T14033] Oops: 0010 [#1] PREEMPT SMP KASAN
[  845.128965][T14033] CPU: 0 PID: 14033 Comm: syz.0.3305 Not tainted syzkaller #0
[  845.136888][T14033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  845.147078][T14033] RIP: 0010:0x0
[  845.150677][T14033] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  845.158325][T14033] RSP: 0018:ffffc9000c7c7298 EFLAGS: 00010246
[  845.164483][T14033] RAX: 1ffffffff162aefb RBX: 1ffff920018f8e64 RCX: 0000000000000000
[  845.172652][T14033] RDX: ffffc9000c7c7340 RSI: 0000000000000001 RDI: ffff888029734000
[  845.180747][T14033] RBP: ffffc9000c7c73b0 R08: ffff88802973403f R09: 1ffff110052e6807
[  845.188931][T14033] R10: dffffc0000000000 R11: ffffed10052e6808 R12: ffffe8ffffc48188
[  845.197101][T14033] R13: ffffffff8b1577d8 R14: 0000000000000000 R15: ffff888029734000
[  845.205260][T14033] FS:  00007f5dd74586c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  845.214831][T14033] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  845.221821][T14033] CR2: ffffffffffffffd6 CR3: 0000000023010000 CR4: 00000000003506f0
[  845.230818][T14033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  845.239789][T14033] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  845.248592][T14033] Call Trace:
[  845.252095][T14033]  <TASK>
[  845.255074][T14033]  bond_xdp_xmit+0x31e/0x550
[  845.259742][T14033]  ? __lock_acquire+0x7ea0/0x7ea0
[  845.264887][T14033]  ? bond_xdp_xmit+0x94/0x550
[  845.269768][T14033]  ? bond_xdp+0x8c0/0x8c0
[  845.274358][T14033]  bq_xmit_all+0xca9/0x1120
[  845.279119][T14033]  ? __lock_acquire+0x7ea0/0x7ea0
[  845.284365][T14033]  ? trace_call_bpf+0xbf/0x6b0
[  845.289929][T14033]  ? trace_call_bpf+0xbf/0x6b0
[  845.295159][T14033]  ? trace_call_bpf+0x5d6/0x6b0
[  845.300060][T14033]  ? __dev_flush+0x1b0/0x1b0
[  845.304958][T14033]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  845.310915][T14033]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  845.317511][T14033]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  845.324517][T14033]  ? rcu_lockdep_current_cpu_online+0x33/0x120
[  845.331754][T14033]  ? rcu_read_lock_bh_held+0x76/0xf0
[  845.338367][T14033]  ? rcu_read_lock_held+0x40/0x40
[  845.343921][T14033]  bq_enqueue+0x338/0x3d0
[  845.348586][T14033]  dev_map_enqueue_multi+0xf89/0x10f0
[  845.354116][T14033]  ? dev_map_enqueue+0x330/0x330
[  845.359351][T14033]  ? rcu_lockdep_current_cpu_online+0x33/0x120
[  845.365905][T14033]  ? rcu_read_lock_held+0x40/0x40
[  845.371112][T14033]  ? rcu_is_watching+0x11/0xa0
[  845.376352][T14033]  xdp_do_redirect_frame+0x477/0x650
[  845.381962][T14033]  bpf_test_run_xdp_live+0xa8b/0x1a90
[  845.387742][T14033]  ? 0xffffffffa0004440
[  845.392180][T14033]  ? text_poke_copy+0x7b/0x90
[  845.397048][T14033]  ? bpf_test_run_xdp_live+0x515/0x1a90
[  845.402825][T14033]  ? xdp_convert_md_to_buff+0x330/0x330
[  845.408918][T14033]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  845.415283][T14033]  ? xdp_convert_md_to_buff+0x5b/0x330
[  845.421804][T14033]  bpf_prog_test_run_xdp+0x757/0xf80
[  845.427547][T14033]  ? __lock_acquire+0x7ea0/0x7ea0
[  845.432604][T14033]  ? dev_put+0x80/0x80
[  845.436790][T14033]  ? dev_put+0x80/0x80
[  845.440964][T14033]  bpf_prog_test_run+0x31c/0x390
[  845.446514][T14033]  __sys_bpf+0x62b/0x780
[  845.450889][T14033]  ? bpf_link_show_fdinfo+0x380/0x380
[  845.456705][T14033]  ? lock_chain_count+0x20/0x20
[  845.461754][T14033]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  845.468131][T14033]  __x64_sys_bpf+0x78/0x90
[  845.472874][T14033]  do_syscall_64+0x4c/0xa0
[  845.477507][T14033]  ? clear_bhb_loop+0x60/0xb0
[  845.482446][T14033]  ? clear_bhb_loop+0x60/0xb0
[  845.487448][T14033]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  845.493975][T14033] RIP: 0033:0x7f5dd659e159
[  845.498847][T14033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  845.519990][T14033] RSP: 002b:00007f5dd7458028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  845.530423][T14033] RAX: ffffffffffffffda RBX: 00007f5dd6825fa0 RCX: 00007f5dd659e159
[  845.538682][T14033] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  845.547416][T14033] RBP: 00007f5dd663506b R08: 0000000000000000 R09: 0000000000000000
[  845.556680][T14033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  845.565194][T14033] R13: 00007f5dd6826038 R14: 00007f5dd6825fa0 R15: 00007ffd5c7b8f58
[  845.576933][T14033]  </TASK>
[  845.580096][T14033] Modules linked in:
[  845.584011][T14033] CR2: 0000000000000000
[  845.589062][T14033] ---[ end trace 0000000000000000 ]---
[  845.596279][T14033] RIP: 0010:0x0
[  845.599788][T14033] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  845.607344][T14033] RSP: 0018:ffffc9000c7c7298 EFLAGS: 00010246
[  845.613623][T14033] RAX: 1ffffffff162aefb RBX: 1ffff920018f8e64 RCX: 0000000000000000
[  845.621904][T14033] RDX: ffffc9000c7c7340 RSI: 0000000000000001 RDI: ffff888029734000
[  845.630363][T14033] RBP: ffffc9000c7c73b0 R08: ffff88802973403f R09: 1ffff110052e6807
[  845.638986][T14033] R10: dffffc0000000000 R11: ffffed10052e6808 R12: ffffe8ffffc48188
[  845.647688][T14033] R13: ffffffff8b1577d8 R14: 0000000000000000 R15: ffff888029734000
[  845.655858][T14033] FS:  00007f5dd74586c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  845.665063][T14033] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  845.671924][T14033] CR2: ffffffffffffffd6 CR3: 0000000023010000 CR4: 00000000003506f0
[  845.680393][T14033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  845.688606][T14033] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  845.696771][T14033] Kernel panic - not syncing: Fatal exception in interrupt
[  845.704946][T14033] Kernel Offset: disabled
[  845.709655][T14033] Rebooting in 86400 seconds..
serialport: VM disconnected.