last executing test programs:

41.651980958s ago: executing program 0 (id=2972):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
perf_event_open$cgroup(&(0x7f00000002c0)={0x3, 0x80, 0x4, 0x6, 0x4, 0x7, 0x0, 0x100000, 0x10, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x200, 0x0, @perf_config_ext={0x5993, 0x8}, 0x80, 0x7, 0x7, 0x9, 0x3, 0xffffffff, 0x8000, 0x0, 0x5, 0x0, 0x9}, r1, 0xc, r1, 0x0)
close(r1)
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x5, 0x9fd, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r2}, 0x38)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402200d00098000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0)
openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)

40.594090299s ago: executing program 0 (id=2973):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000002a648d44cc6ea83b2fad67e6631b03d67a47127a6d2cdc03316fbb5c7434ef154df88794319884d2387fe1285e218f0b77395599097e4b8130daedefd8ee64f0a989bf758eba2a3da0da0ef7e3d5501d9a85e0a8b3f2753a555c431fd1f82487cfda86b1dbf3ab2630dbabc4b0b0cbfdd09c6300e497"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x8000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"})

40.060901931s ago: executing program 0 (id=2977):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000050000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

39.666959958s ago: executing program 0 (id=2980):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1e, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}], 0x58}, 0x0)

39.554789276s ago: executing program 0 (id=2982):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d80000001800810804000000db44", 0xe}], 0x1, 0x0, 0x0, 0x6000}, 0x6000800)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0900000018000000080000000200000046000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000868bf6fe23f55e803e7201997d310e9d4b3e2dd3cf1ad147832d2f6d7829c45de45f89cc068dea045f022c8e6bc0148790957fe937c6bfae08f8accc06e34072cd329620216714fd398e4e1993b68a3ec484e5f7625950943b314a55eed5bfd613b326bdc2a8f089800851f89d8f01a0a7f08afc9bd3609531bda400c9468bc4773fae55f2a0c7775fcdb7808f4aee2fcf936301e530a734132918698fce0260e53e76ead01d2e1d22342ef4758ef5d4bd7b22"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
socketpair(0x2b, 0x20000000000001, 0x0, &(0x7f0000000100))
socket$kcm(0x10, 0x2, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa0002, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x36, 0x6, 0xffeff038}, {0x6, 0x0, 0x0, 0xfffffffc}]})
ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000180))
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0)
sendmsg$inet(r0, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x32, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x1, 0x41, 0x0, 0x0)
sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x5, 0x8000}, 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000f5492712ec6c8900f97da8585dd52e50211762000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_clone(0x6384280, &(0x7f0000000240)="863d0167833615e9a3de8870d5e5c8eaa2950ccab510", 0x16, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="f9efcd34fb5c1a554aa911e301c929ef961b8d0d40a528da03bb2529058e553b92c2f0dfdfadd1")
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0)

14.907709384s ago: executing program 4 (id=3073):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1e, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x50}, 0x0)

14.747461593s ago: executing program 4 (id=3074):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0xe54, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000500"/28], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r4}, 0xc)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18)
r7 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r7, 0x6, 0x1b, &(0x7f0000000100), 0x4)
r8 = getpid()
r9 = perf_event_open$cgroup(&(0x7f0000000580)={0x3, 0x80, 0x81, 0x0, 0x6, 0x8, 0x0, 0x7, 0x6f6e715e40c551ef, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xe, 0x1}, 0x11098, 0x9, 0x3, 0x5, 0x4, 0xd, 0xa3d6, 0x0, 0x6, 0x0, 0x582}, 0xffffffffffffffff, 0x0, r5, 0x1)
perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xf, 0x6, 0x3, 0x8, 0x0, 0xfffffffffffff800, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffff1, 0x2, @perf_config_ext={0x8, 0x4}, 0x80, 0x7, 0xfffffffa, 0x3, 0x4, 0x1, 0x9, 0x0, 0x1, 0x0, 0x8}, r8, 0x9, r9, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000e6, &(0x7f0000000940), ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xee, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb01001800000000000000f1000000f1000000050000000000000000000009000000000100000002000013020000001000000002000000580000000d000000800000008100000000000000000000030000000002000000040000000200000000000000000000030000000005000000030000005bf40000000000000300000d000000000500000005000000060000000100000001000000020000000c0000000700000f01000000050000000100000001000000020000000c000000f8ffffff01000000800000000400000002000000010000007e9d000004000000018000000200000002000000bf05000003ff0f0000faffffff5e0f0000000000000800000000000000003000610000000000000000"], &(0x7f0000000dc0)=""/232, 0x111, 0xe8, 0x1, 0xa5d6, 0x10000, @value=r0}, 0x28)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0xa, 0x10, &(0x7f0000000f40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd942}, [@snprintf]}, &(0x7f0000000fc0)='syzkaller\x00', 0x2, 0xb4, &(0x7f0000001000)=""/180, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000010c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0x9, 0x19d, 0x7000}, 0x10, 0xffffffffffffffff, r1, 0x4, 0x0, &(0x7f0000001140)=[{0x2, 0x5, 0xc, 0x3}, {0x0, 0x4, 0x7, 0x8}, {0x3, 0x2, 0x2, 0x8}, {0x4, 0x1, 0x2, 0x4}], 0x10, 0x10001}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)}], 0x1}, 0x4084)
r13 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r13, 0x29, 0x14, &(0x7f0000000100), 0x120)
setsockopt$sock_attach_bpf(r13, 0x29, 0x15, &(0x7f00000000c0), 0xb9)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50)
r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000012c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xad3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_tracing={0x1a, 0x31, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x2, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', r10, 0x1a, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f00)={0x3, 0x3, 0x4, 0x28000}, 0x10, 0x1c992, r12, 0x1, &(0x7f0000001340)=[r0, r14, r15], &(0x7f0000001380)=[{0x1, 0x3, 0xf, 0x5}], 0x10, 0x3}, 0x94)

13.985748331s ago: executing program 4 (id=3077):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x80, 0x0, 0x0, 0x80c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x2e}], 0x1}, 0x10000)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x6, 0x8, 0x0, 0x0, 0x0, 0x800001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1101, 0x7f, 0x0, 0x9, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x2c, 0x1, 0x0)
perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x4}, 0x0, 0x3, 0x385c, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x673}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r7, 0x4008744b, 0xf0ff1f00000000)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

11.339527223s ago: executing program 4 (id=3086):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe4, 0x1, 0xd, 0xc, 0x0, 0xfffffffffffffffe, 0xc4000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x1, 0x3, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xa, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080))
sendmsg$kcm(r3, &(0x7f0000000880)={&(0x7f0000000240)=@sco, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="afc142383039c87d3c28c19f53c3da7eae617d0f9a2d65bfec414eb1e37ad1b7e1bc3f751174cd4d19d407fd2af31a40721a1d9113ea8ab4d949dfb85bc10a88c0f5fa44a1a77d74f3685271", 0x4c}, {&(0x7f0000000340)="29c914f424a71e20aedc7d963127e36f323cd740e5bf1dbf6001bd7d3a2a61eeea4e594d2cb8a00ab904c8adc57c0d031bf405dc3d0e1c385b2ede75bc3def532f72ebff0fd2be5f997e969f84c6ba24bbd413e986ae08f24a6aa0b6346c870d7c5710b031a7ddd9267dec02590fa3d1a15ecc1638bb2b4530f23bdb0284c504840d3158da82a5fa14206281ae06122307941e428650e6393ddde0ecbfb53f0a6f614acbd0376c1e6070fc0a986e911d7e04018443e53d5aa49fbc709c4efaf8a0cc8c182d6e45d1e2aafc7cf71faf200a", 0xd1}, {&(0x7f0000000440)="bbb9e2cc90523ffe9a41b641934468e9b16742233e2713b0ff7146f22ea72f96b965cb44bb544ddb89467888d482267123f9895230bb95044a9b2a24f52b46fe653509a2c958bd8c68799489c538111b76d5df61da223dd4b8e29051fdddee0134cbcdc647be4efddab3d692d429bbfebf01969c935fec15d97c368624fdb477c366b5d3726f02811f486c6a21aad68e726e35f12c6bcabdfbb280d5b877446e32a6c55d58730670c539cc1ffa85c1e047d54f295b2f7eb5e225c28748b1aecedc345fc60253ddb64079abc11c4205426440d539fa38d45775dc4ef8d4e2622d4ade83b8a2242a570b08a2de", 0xec}], 0x3, &(0x7f0000000580)=[{0x38, 0x10a, 0x4, "078bb9379484dbbe2cc87f4685524698c3ae5ae99edf6eeacb44580bad79404331a31df6d2"}, {0x40, 0x113, 0x1000, "6fa95fc94cad3802e06718094e82a65f4cc43796c45fa15cc2078e587d34570d76a9d257a95599929bc88f"}, {0x88, 0x10b, 0x9, "862deaa32c7bae2a3bfeabfcd1c418fa80151e55819f919e06589cbe5e53ca23009f667e0b90fcb25ecf014e604f38f1d91fe18663b0f00533a903b79fa6f9eabc4d8f2e96f3eae905e75ca16a2412c47027d3b17e612121cbecd23ce7130061feee630eab573aa53af2d278f2fa34b1bda09a93f84499"}, {0xa0, 0x103, 0x8, "f16c3220a49bef09c3fde9cb50e49393d528b8a9358f278366afda433d380015a7fae88916018b1094ea0b10c769ed5e5d6426dca0a906004caae7b6ef07e065bfd1048135eb9938f5823b127f409d6fbe581693932d6b95bfa149edad604e9093755d8507d479ebd1a157ec90c4aef2cde72ea4b18bd47454062e80178743650f7c5e2b1bce0a40af2624"}, {0x70, 0x104, 0x33, "29ac449e2b78f3aeb3e5e06311d6ed6d274dd02493e1793b47fa29b8aec62600fcf9fa26438c9637570f288450bb6d7d6ead3d8c7dd8b81460912cf009b931bea2e778ae9f471313f93bf499f93daf1ffb7fc2641111cfff20008400a10a44"}, {0xd0, 0x326, 0x1800000, "9dfa275d5f8c6f58eabc43d3a1429453c6399a85111c3bffecbd32cfd4c9fe1847eaf62344b994b66d35577154c27537ca92bc2a29307e5f477af86b03f8f54a44a6940bfeba0a420f14447b0ff5e16ee84e4110b9b8bd85779d6280b5d68a4c1d33ec99223414e49ef25d5a8f81149f6c1e9566752a03d16d380261181ef7f52e3053d46ad9940e4d7252441bb12e58582121923f4350df6f551ceefef4c5a0e6b5c5487b1a2470148799955c29a6d9dda4bd314707445b570a70a3f99a"}], 0x2e0}, 0x4000010)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000500000000000000000000008500000041000000850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000240)="354da925f340a56cd9bd738d6055", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
recvmsg$unix(r6, &(0x7f0000002b80)={0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b02000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

11.005455336s ago: executing program 4 (id=3089):
close(0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x100000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r1 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x7, 0x0, 0x0) (async)
r2 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r2, 0x11, 0x68, &(0x7f0000000100)=r0, 0x4) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x58, &(0x7f0000000340)={0x0, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r6}, 0xc)
close(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x280000, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7cc, 0x6d, &(0x7f0000000240)=""/109, 0x41000, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0xf, 0xbf}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r4, r7], &(0x7f0000000540)=[{0x5, 0x5, 0x1, 0x1}, {0x5, 0x1, 0x2, 0xa}], 0x10, 0x5}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') (async)
r8 = syz_clone(0x40000080, &(0x7f0000000640)="03d677f228dc5e788a92cd995aacdcf455287729fa4a38e8bbf15246f6d6440b458ae4b5221e708a7ad7a459e155aa8b96b417771a961dcaf65319d71d8af3500f2461080326c3e7f7b35d25be474a3ee01e0d1e634c5113f59a25380e2fd1e4149c2692cf774436f8a2b0705e4c", 0x6e, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="0a13717df16cd0ac7edbb5afcbdfed3c27bf81cafb34d2")
syz_open_procfs$namespace(r8, &(0x7f0000000780)='ns/pid\x00') (async)
r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r9, &(0x7f0000000200)={[{0x0, 'net_prio'}]}, 0xa)

8.825342764s ago: executing program 1 (id=3101):
r0 = socket$kcm(0x2b, 0x1, 0x0)
close(r0)
socket$kcm(0xa, 0x2, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) (async)
close(r0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8)
openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) (async)
write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef)
openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
close(0xffffffffffffffff) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
ioctl$SIOCSIFHWADDR(r4, 0x541b, &(0x7f0000000180)={'veth0_virt_wifi\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)

7.656079012s ago: executing program 1 (id=3109):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

7.465856099s ago: executing program 1 (id=3110):
socket$kcm(0x21, 0x2, 0x2) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r1 = socket$kcm(0x10, 0x2, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) (async)
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80194, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x90802, 0xca, 0x5, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0xffffffbe}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYRES8=r3, @ANYBLOB="3e971d"], 0x9a) (async)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x40400c0)
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
setsockopt$sock_attach_bpf(r7, 0x29, 0x22, &(0x7f0000000100)=r8, 0x120) (async)
syz_clone(0x1100, 0x0, 0x0, 0x0, 0x0, 0x0)

6.60800992s ago: executing program 3 (id=3112):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0xe0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

6.460109497s ago: executing program 3 (id=3113):
r0 = socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000bc0))
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r1, &(0x7f0000000400), 0x0}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001700)={&(0x7f0000000000)="dea0920fec8f5ef6a9a58cc0440e18772ce543bb47fae0d07f6cad09b3bbe2a55069f36534b8aa7fa556b8d15202d2cbf69b92634e35fda26df2069eb9be2158a574cda74155636c2f27fb19af4e8321c2a12d3f41859a0f432c073d0a9bc1876bfbbdc0dbee73b1010aad6c3d6bdd4240dcbbfcef0d3f817b9accaabd6100f37e0cc8230c7963b7c5ce75489b8aa5004e31c0958d13aea62d5588e300b2ecd83c00881a3674b653", &(0x7f0000000580)=""/4096, &(0x7f0000001580)="00fa72d4eb29cff38cf720bd2b0fc1e868a20cf321b5a03c7de282064f78ad46ffa90470abd5882c2ff6b64b41c5e5e330693f7b6ffb871f884cb6515cc56fa4cbbe63be398d15c7aa5ace4db49af6194c132a002ed402b60b5354d305fd12512daf40cb0e0ae88e03203ac47c761788622ddc20cb0e040ff5bc8013546dadef338dcce3699bf9013810a2180a609d895dd15561f80a37187735e337602e2a9c1d3f44bd10fc1ca2f2b7630208d4998d74c04061b53ab284701b664391275f848b0a0c9499adeec6d9cf9394", &(0x7f0000001680)="387cf12fe87795969ab70cc9309a09c09538a4d7001d28a5f01c384323308675870d1ca15f5143ad6e623e740d2c60b0655bc14d899ef64f94e210de1fb30fe6225bd2c5e89757cf856f5dfd767364501cf9da59d9a4531ea14d5c070673eb2e9fa0147aa13c114e83dc76077f238a1bab7180d87008a8737fd0", 0x285184b6, r1}, 0x38)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x0)

4.931802354s ago: executing program 1 (id=3115):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x3, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2c, 0x3, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x9}, 0x2202, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x82}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x4)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xc7727, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8, 0x3}, 0x40, 0x0, 0x84, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x3, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8f48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x806, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x6, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00')
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff00000000710e3100000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x890c, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="ffffffffffffffff098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5e", 0x3}], 0x1}, 0x20000001)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)

4.931602294s ago: executing program 3 (id=3116):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000040)=0x1)
ioctl$TUNSETOFFLOAD(r1, 0x40047440, 0x0)

1.875939607s ago: executing program 2 (id=3117):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1e, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x58}, 0x0)

1.799870176s ago: executing program 2 (id=3118):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1e, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}], 0x58}, 0x0) (fail_nth: 1)

1.507957428s ago: executing program 1 (id=3119):
socket$kcm(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x8, 0x7b, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000040000069fae3a96148bfc539500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xc9, &(0x7f00000001c0)=""/201, 0x41000, 0x40, '\x00', r0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x10, 0x0, 0x3}, 0x10, r1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000580)={[{0x2b, 'net'}]}, 0x5) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x5, 0x0) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x6, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x1, 0x420008}]}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pimreg0\x00', 0x2})
ioctl$TUNGETVNETHDRSZ(r4, 0x400454de, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040055000100000005000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}], 0x1}, 0x4000000)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) (async, rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, &(0x7f0000000000)) (async, rerun: 64)
r7 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, 0x0, 0x0) (async, rerun: 64)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1.493856962s ago: executing program 2 (id=3120):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x82210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x5, 0x0, 0xfdffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x8}, {0x20}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0xb, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]})
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x5000, 0x80, 0x0, 0x0, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
close(r2)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu&\t\t')
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd55b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6, <r7=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r7, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x1d, &(0x7f0000000940)=@framed={{0x18, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffff7}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.444344944s ago: executing program 3 (id=3121):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)

1.180139249s ago: executing program 2 (id=3122):
r0 = socket$kcm(0x2, 0x1, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r1, &(0x7f0000000380), 0x0}, 0x20)
sendmsg$inet(r0, &(0x7f0000001e00)={&(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000001d40)=[{0x0}, {&(0x7f0000000cc0)="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", 0xb00}], 0x2}, 0x20000041)

1.128417321s ago: executing program 3 (id=3123):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161)
sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0xf0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0)

1.115363884s ago: executing program 1 (id=3124):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48d00, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB, @ANYBLOB], 0x50)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x49, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r6)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

1.004000372s ago: executing program 4 (id=3125):
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x5}, 0x58c8, 0xc, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xf00, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x80, &(0x7f00000001c0)}, 0x0)
bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0)
socketpair(0x1a, 0x4, 0x0, &(0x7f0000000100))
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001a80)={0x0, 0x0, 0x0, &(0x7f00000019c0), 0x7}, 0x38)
sendmsg$inet(r0, &(0x7f0000002c80)={&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000000540)="35d7dc4256043b92d90a7ce34a8eb21e4c7fc7058b732db4f81e33d7b7cb8b30c12b6c5465d433a243e313aa5ee24f581fadd58542e9fb27884778b1a47d36e6b6bda58e0a4aa07691b700359f1381f609424854b6250fc73927a71ad50f8c0546a8957b4751764f95c91fb05ef900bc295255b69209611b9d0ed189e06b1c32cc6936786494234c7dd7393382bb986a", 0x90}, {0xfffffffffffffffe}, {&(0x7f0000000600)="108907ca", 0x4}, {&(0x7f0000000640)="87e520e8e2d219c80acdc260ad3bf64243d09f70cc3d1c825928a866be9522f11ef721b0ac18335db33bb0db6b11714f2381f6b3721227552604", 0x3a}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="ef1b5309f445f92eadb2cfe0dd6b8df3c27758e3ee867b77aea31c484e7dc2f7d8099ac3e23a471fd8826892c9dba2dc7a721544dd41a1f14cfbe2c41964346de31444be6ae77ef1258cd2adbabc383c85ca838eb6ab78e96aaccf67d3ce7197b05f", 0x62}, {&(0x7f0000002b40)="8d4cd68dc1f3aaaa88eae9a28f6176dfc71190c5a1f48e809d6ade35789a30a3ee4da52cfa5421c070a3ce7789bb90ed638a80c492924a0e252c0fff8f2019b42fa029c21cf293b6c0a676f0d9b82451f00eac51b69351c386605405a84bd3992b1d84277593363dbd4ba2cae2b2138eb93a559109921f471a", 0x79}, {&(0x7f0000002bc0)="6c73c3fd3fb42d4e48822aed07253bdb37293206f1f693800cd01afe26f096a929920ee8a3577c5383b61ed1f60a88b4864cb37ba053211574ca8c27399a6a", 0x3f}], 0x8}, 0x8008854)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(0xffffffffffffffff)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
socket$kcm(0x29, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x4, 0xc, 0x0, 0x1}]})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdbc}, 0x4f)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffde7, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0x1d, 0x0, &(0x7f00000003c0)="df12c9f7b9a60000000042dccb422df7bab630d51f2124b1960000000a", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107447, &(0x7f0000000180))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="5c00000013006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)

1.002953743s ago: executing program 2 (id=3126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRES8], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000f00000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000052"], 0xfe33) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x48) (async)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0xa, 0x2, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x40010080) (async)
write$cgroup_subtree(r5, &(0x7f0000000880)=ANY=[@ANYRESHEX=r4], 0xfe33) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3, <r6=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0xb) (async)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000b00)=r2) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) (async)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000003) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r3, &(0x7f00000004c0)}, 0x20) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0xbc, &(0x7f00000005c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x1d, 0x55, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) (async)
r9 = socket$kcm(0x2, 0x5, 0x84) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff})
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x84, 0x7b, &(0x7f0000000000)=r11, 0x0)

882.274942ms ago: executing program 3 (id=3127):
r0 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg(r0, &(0x7f0000002d40)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x2}, 0x10102)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x800}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1812"], 0x0, 0x3963, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a5bd76, 0xb, 0x5, 0x6, 0x9, 0x0, 0x1, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x8)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfdef)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40000)
close(r2)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)

612.361579ms ago: executing program 0 (id=2988):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x0, 0x0, 0x8, 0xffffffffffffeffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0xf, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1200000007"], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f00000001c0)=""/10, 0x0, 0xa, 0x1, 0xfff}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000003000000000000000000000061100800000000007b0ae0ff002c083447c75584a89576e1"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x8}, 0x90)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'wg1\x00'})
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0), 0x2, 0xffffffffffffffff, 0x4}, 0x38)
sendmsg$kcm(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100))
socket$kcm(0x2, 0x5, 0x84)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x43, &(0x7f0000000100), 0x120)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x0)

0s ago: executing program 2 (id=3128):
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000000)='<', &(0x7f0000000040)=""/74}, 0x20)
perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x2420, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000000000002f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x4000)

kernel console output (not intermixed with test programs):

evice bond0 entered promiscuous mode
[  291.024555][ T8640] device bond_slave_0 entered promiscuous mode
[  291.031423][ T8640] device bond_slave_1 entered promiscuous mode
[  291.103999][ T8640] device dummy0 entered promiscuous mode
[  291.148655][ T8651] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1213'.
[  291.358314][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'.
[  291.377288][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'.
[  291.393357][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'.
[  291.409377][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1219'.
[  291.531063][ T8668] netlink: 'syz.3.1216': attribute type 3 has an invalid length.
[  291.613709][ T8668] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1216'.
[  292.102854][ T8689] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1226'.
[  292.185676][ T8693] �: port 1(bond0) entered blocking state
[  292.202429][ T8693] �: port 1(bond0) entered disabled state
[  292.226244][ T8693] device bond0 entered promiscuous mode
[  292.237924][ T8693] device bond_slave_0 entered promiscuous mode
[  292.259670][ T8693] device bond_slave_1 entered promiscuous mode
[  292.274874][ T8693] device dummy0 entered promiscuous mode
[  294.355992][ T8732] netlink: 'syz.0.1235': attribute type 3 has an invalid length.
[  294.417514][ T8732] __nla_validate_parse: 5 callbacks suppressed
[  294.417531][ T8732] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1235'.
[  294.891104][ T8744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1242'.
[  295.013928][ T8744] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1242'.
[  295.059715][ T8748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1242'.
[  295.107721][ T8759] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1242'.
[  295.520914][ T8774] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1248'.
[  295.611536][ T8774] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1248'.
[  295.649615][ T8777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1248'.
[  296.193173][ T8791] netlink: 'syz.4.1254': attribute type 3 has an invalid length.
[  296.213756][ T8791] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1254'.
[  296.618472][ T8800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1256'.
[  297.443574][ T8810] tc_dump_action: action bad kind
[  297.914655][ T8838] netlink: 'syz.1.1266': attribute type 29 has an invalid length.
[  297.942930][ T8838] netlink: 'syz.1.1266': attribute type 29 has an invalid length.
[  297.979812][ T8841] netlink: 'syz.1.1266': attribute type 29 has an invalid length.
[  298.372741][ T8856] ������: renamed from pim6reg1
[  298.990606][ T8889] netlink: 'syz.1.1282': attribute type 10 has an invalid length.
[  299.062052][ T8889] team0: Device vxcan1 is of different type
[  299.224278][ T8888] netlink: 'syz.0.1281': attribute type 8 has an invalid length.
[  299.449437][ T8906] netlink: 'syz.4.1285': attribute type 3 has an invalid length.
[  299.533835][ T8906] __nla_validate_parse: 14 callbacks suppressed
[  299.533851][ T8906] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1285'.
[  299.935447][ T8924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1294'.
[  299.968714][ T8924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1294'.
[  300.015807][ T8928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1294'.
[  300.048310][ T8924] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1294'.
[  300.382135][ T8932] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1296'.
[  300.416509][ T8945] netlink: 'syz.1.1300': attribute type 16 has an invalid length.
[  300.483823][ T8945] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1300'.
[  300.544191][ T8944] netlink: 'syz.1.1300': attribute type 16 has an invalid length.
[  300.603261][ T8944] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1300'.
[  300.691537][ T8951] netlink: 'syz.2.1302': attribute type 49 has an invalid length.
[  301.764262][ T8972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1309'.
[  301.783769][ T8972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1309'.
[  301.939620][ T8981] validate_nla: 1 callbacks suppressed
[  301.939634][ T8981] netlink: 'syz.3.1308': attribute type 10 has an invalid length.
[  302.213125][ T8981] device ipvlan1 entered promiscuous mode
[  302.285538][ T8981] bridge0: port 4(ipvlan1) entered blocking state
[  302.296697][ T8981] bridge0: port 4(ipvlan1) entered disabled state
[  302.335722][ T8981] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  303.059490][ T9008] netlink: 'syz.0.1320': attribute type 29 has an invalid length.
[  303.122025][ T9008] netlink: 'syz.0.1320': attribute type 29 has an invalid length.
[  303.139158][ T9012] netlink: 'syz.0.1320': attribute type 29 has an invalid length.
[  303.328050][ T9015] netlink: 'syz.3.1322': attribute type 1 has an invalid length.
[  303.784412][ T9023] tap0: tun_chr_ioctl cmd 1074025677
[  303.814483][ T9023] tap0: linktype set to 776
[  305.297138][ T9062] __nla_validate_parse: 7 callbacks suppressed
[  305.297156][ T9062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1336'.
[  305.343668][ T9062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1336'.
[  305.371467][ T9070] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1336'.
[  305.403195][ T9062] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1336'.
[  308.372234][ T9071] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  308.491730][ T9071] device syzkaller0 entered promiscuous mode
[  308.508610][ T9075] netlink: 'syz.2.1338': attribute type 10 has an invalid length.
[  308.543132][ T9075] 8021q: adding VLAN 0 to HW filter on device team0
[  308.581607][ T9075] bond0: (slave team0): Enslaving as an active interface with an up link
[  310.636696][ T9118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1351'.
[  310.666609][ T9118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1351'.
[  310.723948][ T9118] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1351'.
[  310.892298][ T9125] netlink: 'syz.1.1350': attribute type 10 has an invalid length.
[  310.996748][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1350'.
[  311.044045][ T9125] device ipvlan1 entered promiscuous mode
[  311.140731][ T9125] bridge0: port 3(ipvlan1) entered blocking state
[  311.188930][ T9125] bridge0: port 3(ipvlan1) entered disabled state
[  311.212388][ T9125] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  311.341472][ T9139] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  311.429466][ T9128] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1354'.
[  311.549347][ T9144] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1358'.
[  311.687703][ T9147] netlink: 'syz.2.1360': attribute type 10 has an invalid length.
[  311.705974][ T9151] netlink: 'syz.0.1359': attribute type 1 has an invalid length.
[  311.714565][ T9147] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1360'.
[  311.746834][ T9151] netlink: 'syz.0.1359': attribute type 1 has an invalid length.
[  311.762560][ T9151] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1359'.
[  311.905913][ T9152] netlink: 'syz.2.1360': attribute type 10 has an invalid length.
[  311.952556][ T9152] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1360'.
[  312.149785][ T9167] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1365'.
[  312.458014][ T9185] netlink: 'syz.0.1368': attribute type 10 has an invalid length.
[  312.526296][ T9185] device ipvlan1 entered promiscuous mode
[  312.555360][ T9185] bridge0: port 3(ipvlan1) entered blocking state
[  312.562488][ T9185] bridge0: port 3(ipvlan1) entered disabled state
[  312.580330][ T9185] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  312.912652][ T9194] netlink: 'syz.1.1373': attribute type 10 has an invalid length.
[  313.011231][ T9194] team0: Port device geneve1 added
[  313.142070][ T9202] netlink: 'syz.0.1377': attribute type 10 has an invalid length.
[  313.167158][ T9210] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0)
[  313.191919][ T9210] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1)
[  313.224148][ T9201] netlink: 'syz.0.1377': attribute type 10 has an invalid length.
[  313.696884][ T9243] FAULT_INJECTION: forcing a failure.
[  313.696884][ T9243] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  313.733103][ T9243] CPU: 0 PID: 9243 Comm: syz.0.1397 Not tainted syzkaller #0
[  313.740542][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  313.750642][ T9243] Call Trace:
[  313.753950][ T9243]  <TASK>
[  313.757076][ T9243]  dump_stack_lvl+0x188/0x24e
[  313.761784][ T9243]  ? show_regs_print_info+0x12/0x12
[  313.767008][ T9243]  ? load_image+0x410/0x410
[  313.771535][ T9243]  ? __lock_acquire+0x7c40/0x7c40
[  313.776581][ T9243]  should_fail_ex+0x390/0x4c0
[  313.781289][ T9243]  _copy_from_user+0x2c/0x170
[  313.785984][ T9243]  ___sys_recvmsg+0x170/0x590
[  313.790679][ T9243]  ? __sys_recvmsg+0x2a0/0x2a0
[  313.795455][ T9243]  ? common_file_perm+0x171/0x1c0
[  313.800508][ T9243]  ? __fget_files+0x3fc/0x460
[  313.805216][ T9243]  __x64_sys_recvmsg+0x20d/0x2e0
[  313.810164][ T9243]  ? ___sys_recvmsg+0x590/0x590
[  313.815032][ T9243]  ? lockdep_hardirqs_on+0x94/0x140
[  313.820239][ T9243]  do_syscall_64+0x4c/0xa0
[  313.824657][ T9243]  ? clear_bhb_loop+0x60/0xb0
[  313.829351][ T9243]  ? clear_bhb_loop+0x60/0xb0
[  313.834065][ T9243]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  313.839987][ T9243] RIP: 0033:0x7f301119e159
[  313.844409][ T9243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  313.864064][ T9243] RSP: 002b:00007f30120a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  313.872491][ T9243] RAX: ffffffffffffffda RBX: 00007f3011425fa0 RCX: 00007f301119e159
[  313.880469][ T9243] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003
[  313.888454][ T9243] RBP: 00007f30120a8090 R08: 0000000000000000 R09: 0000000000000000
[  313.896439][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  313.904419][ T9243] R13: 00007f3011426038 R14: 00007f3011425fa0 R15: 00007ffd81120ed8
[  313.912423][ T9243]  </TASK>
[  314.197944][ T9246] netlink: 'syz.4.1387': attribute type 10 has an invalid length.
[  314.282152][ T9246] device ipvlan1 entered promiscuous mode
[  314.340641][ T9246] bridge0: port 3(ipvlan1) entered blocking state
[  314.363758][ T9246] bridge0: port 3(ipvlan1) entered disabled state
[  314.382283][ T9246] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  314.627182][ T9264] device veth0_vlan left promiscuous mode
[  314.651307][ T9264] device veth0_vlan entered promiscuous mode
[  314.675932][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  314.700382][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  314.747035][ T5107] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  314.778198][ T9267] netlink: 'syz.2.1393': attribute type 10 has an invalid length.
[  314.957871][ T9277] FAULT_INJECTION: forcing a failure.
[  314.957871][ T9277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  315.007451][ T9275] netlink: zone id is out of range
[  315.012797][ T9275] netlink: zone id is out of range
[  315.034778][ T9277] CPU: 0 PID: 9277 Comm: syz.4.1399 Not tainted syzkaller #0
[  315.042204][ T9277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  315.052272][ T9277] Call Trace:
[  315.055562][ T9277]  <TASK>
[  315.058502][ T9277]  dump_stack_lvl+0x188/0x24e
[  315.063194][ T9277]  ? show_regs_print_info+0x12/0x12
[  315.068402][ T9277]  ? load_image+0x410/0x410
[  315.072924][ T9277]  ? __lock_acquire+0x7c40/0x7c40
[  315.077969][ T9277]  should_fail_ex+0x390/0x4c0
[  315.082677][ T9277]  _copy_from_user+0x2c/0x170
[  315.087373][ T9277]  do_ipv6_setsockopt+0x312/0x3c30
[  315.092524][ T9277]  ? sk_dst_reset+0xa0/0xa0
[  315.097064][ T9277]  ? verify_lock_unused+0x140/0x140
[  315.102287][ T9277]  ? mark_lock+0x94/0x320
[  315.106645][ T9277]  ? __lock_acquire+0x138a/0x7c40
[  315.112055][ T9277]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  315.117895][ T9277]  ? aa_label_sk_perm+0x501/0x6b0
[  315.122941][ T9277]  ? verify_lock_unused+0x140/0x140
[  315.128176][ T9277]  ? aa_sk_perm+0x950/0x950
[  315.132710][ T9277]  ? __might_sleep+0xd0/0xd0
[  315.137328][ T9277]  ? __fget_files+0x28/0x460
[  315.141945][ T9277]  ? aa_sk_perm+0x81f/0x950
[  315.146473][ T9277]  ? aa_af_perm+0x340/0x340
[  315.150976][ T9277]  ? __fget_files+0x3fc/0x460
[  315.155657][ T9277]  ? aa_sock_opt_perm+0x74/0x100
[  315.160593][ T9277]  ipv6_setsockopt+0x55/0x190
[  315.165270][ T9277]  ? sock_common_recvmsg+0x190/0x190
[  315.170563][ T9277]  __sys_setsockopt+0x2bf/0x3d0
[  315.175408][ T9277]  __x64_sys_setsockopt+0xb1/0xc0
[  315.180429][ T9277]  do_syscall_64+0x4c/0xa0
[  315.184840][ T9277]  ? clear_bhb_loop+0x60/0xb0
[  315.189511][ T9277]  ? clear_bhb_loop+0x60/0xb0
[  315.194185][ T9277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  315.200075][ T9277] RIP: 0033:0x7f42f819e159
[  315.204486][ T9277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  315.224170][ T9277] RSP: 002b:00007f42f8f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  315.232599][ T9277] RAX: ffffffffffffffda RBX: 00007f42f8425fa0 RCX: 00007f42f819e159
[  315.240565][ T9277] RDX: 000000000000003b RSI: 0000000000000029 RDI: 000000000000000d
[  315.249009][ T9277] RBP: 00007f42f8f97090 R08: 0000000000000120 R09: 0000000000000000
[  315.256983][ T9277] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  315.264948][ T9277] R13: 00007f42f8426038 R14: 00007f42f8425fa0 R15: 00007fff7a7b8e08
[  315.272936][ T9277]  </TASK>
[  315.288455][ T9275] netlink: zone id is out of range
[  315.348860][ T9275] netlink: zone id is out of range
[  316.170605][ T9291] netlink: 'syz.2.1401': attribute type 10 has an invalid length.
[  316.210758][ T9275] netlink: 'syz.3.1398': attribute type 2 has an invalid length.
[  316.243153][ T9275] netlink: 'syz.3.1398': attribute type 1 has an invalid length.
[  316.253689][ T9297] netlink: 'syz.0.1402': attribute type 10 has an invalid length.
[  316.263856][ T9275] __nla_validate_parse: 23 callbacks suppressed
[  316.263895][ T9275] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1398'.
[  316.762338][ T9318] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1411'.
[  316.849052][ T9314] device syzkaller0 entered promiscuous mode
[  316.877536][ T9318] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1411'.
[  316.893947][ T9322] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1411'.
[  316.918713][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  316.927488][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  316.992444][ T9325] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1411'.
[  317.325285][ T9339] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1416'.
[  319.364531][ T9370] FAULT_INJECTION: forcing a failure.
[  319.364531][ T9370] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.414503][ T9370] CPU: 0 PID: 9370 Comm: syz.3.1426 Not tainted syzkaller #0
[  319.421931][ T9370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  319.432018][ T9370] Call Trace:
[  319.435313][ T9370]  <TASK>
[  319.438255][ T9370]  dump_stack_lvl+0x188/0x24e
[  319.442955][ T9370]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  319.449139][ T9370]  ? show_regs_print_info+0x12/0x12
[  319.454362][ T9370]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  319.460547][ T9370]  ? dump_stack+0x5/0x12
[  319.464820][ T9370]  should_fail_ex+0x390/0x4c0
[  319.469503][ T9370]  _copy_from_user+0x2c/0x170
[  319.474183][ T9370]  do_ipv6_setsockopt+0x23c4/0x3c30
[  319.479405][ T9370]  ? tracing_gen_ctx_irq_test+0x60/0x150
[  319.485066][ T9370]  ? sk_dst_reset+0xa0/0xa0
[  319.489600][ T9370]  ? perf_tp_event+0xa8e/0xc10
[  319.494405][ T9370]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  319.500242][ T9370]  ? mark_lock+0x94/0x320
[  319.504618][ T9370]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  319.510442][ T9370]  ? aa_label_sk_perm+0x501/0x6b0
[  319.515483][ T9370]  ? lock_chain_count+0x20/0x20
[  319.520362][ T9370]  ? aa_sk_perm+0x950/0x950
[  319.524903][ T9370]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  319.530663][ T9370]  ? perf_trace_preemptirq_template+0x268/0x320
[  319.536934][ T9370]  ? irqentry_enter+0x33/0x50
[  319.541643][ T9370]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  319.547646][ T9370]  ? lock_chain_count+0x20/0x20
[  319.552520][ T9370]  ? rcu_is_watching+0x11/0xa0
[  319.557313][ T9370]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  319.558673][ T9376] netlink: 'syz.3.1426': attribute type 10 has an invalid length.
[  319.563474][ T9370]  ? lockdep_hardirqs_on+0x94/0x140
[  319.574939][ T9375] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1428'.
[  319.576499][ T9370]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  319.576531][ T9370]  ? sock_common_recvmsg+0x190/0x190
[  319.576562][ T9370]  ipv6_setsockopt+0x55/0x190
[  319.601848][ T9370]  ? sock_common_recvmsg+0x190/0x190
[  319.607176][ T9370]  __sys_setsockopt+0x2bf/0x3d0
[  319.612063][ T9370]  __x64_sys_setsockopt+0xb1/0xc0
[  319.617116][ T9370]  do_syscall_64+0x4c/0xa0
[  319.621560][ T9370]  ? clear_bhb_loop+0x60/0xb0
[  319.626258][ T9370]  ? clear_bhb_loop+0x60/0xb0
[  319.631057][ T9370]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.636980][ T9370] RIP: 0033:0x7fdf3719e159
[  319.641405][ T9370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  319.661209][ T9370] RSP: 002b:00007fdf3808a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  319.669656][ T9370] RAX: ffffffffffffffda RBX: 00007fdf37425fa0 RCX: 00007fdf3719e159
[  319.677661][ T9370] RDX: 000000000000003b RSI: 0000000000000029 RDI: 000000000000000d
[  319.685655][ T9370] RBP: 00007fdf3808a090 R08: 0000000000000120 R09: 0000000000000000
[  319.693652][ T9370] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  319.701645][ T9370] R13: 00007fdf37426038 R14: 00007fdf37425fa0 R15: 00007ffd88b42bb8
[  319.709665][ T9370]  </TASK>
[  320.134235][ T9396] device sit0 entered promiscuous mode
[  320.572357][ T9373] delete_channel: no stack
[  320.995577][ T9425] FAULT_INJECTION: forcing a failure.
[  320.995577][ T9425] name failslab, interval 1, probability 0, space 0, times 0
[  321.004471][ T9424] bond0: (slave dummy0): Error: Slave device does not support XDP
[  321.037792][ T9425] CPU: 0 PID: 9425 Comm: syz.2.1440 Not tainted syzkaller #0
[  321.045230][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  321.055311][ T9425] Call Trace:
[  321.058613][ T9425]  <TASK>
[  321.061565][ T9425]  dump_stack_lvl+0x188/0x24e
[  321.066289][ T9425]  ? show_regs_print_info+0x12/0x12
[  321.071493][ T9425]  ? load_image+0x410/0x410
[  321.076004][ T9425]  ? mark_lock+0x94/0x320
[  321.080339][ T9425]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  321.086331][ T9425]  should_fail_ex+0x390/0x4c0
[  321.091012][ T9425]  should_failslab+0x5/0x20
[  321.095505][ T9425]  slab_pre_alloc_hook+0x59/0x300
[  321.100523][ T9425]  ? lockdep_hardirqs_on+0x94/0x140
[  321.105730][ T9425]  ? sock_kmalloc+0x92/0xf0
[  321.110232][ T9425]  __kmem_cache_alloc_node+0x4f/0x270
[  321.115604][ T9425]  ? sock_kmalloc+0x92/0xf0
[  321.120105][ T9425]  __kmalloc+0xa3/0x240
[  321.124263][ T9425]  sock_kmalloc+0x92/0xf0
[  321.128592][ T9425]  ipv6_renew_options+0x2c0/0xac0
[  321.133624][ T9425]  do_ipv6_setsockopt+0x1d9e/0x3c30
[  321.138832][ T9425]  ? tracing_gen_ctx_irq_test+0x60/0x150
[  321.144471][ T9425]  ? sk_dst_reset+0xa0/0xa0
[  321.148984][ T9425]  ? perf_swevent_event+0x1c6/0x570
[  321.154184][ T9425]  ? perf_tp_event+0xa8e/0xc10
[  321.158948][ T9425]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  321.164774][ T9425]  ? mark_lock+0x94/0x320
[  321.169125][ T9425]  ? aa_label_sk_perm+0x501/0x6b0
[  321.174143][ T9425]  ? verify_lock_unused+0x140/0x140
[  321.179347][ T9425]  ? aa_sk_perm+0x950/0x950
[  321.183853][ T9425]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  321.189576][ T9425]  ? perf_trace_preemptirq_template+0x268/0x320
[  321.195817][ T9425]  ? irqentry_enter+0x33/0x50
[  321.200498][ T9425]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  321.206478][ T9425]  ? perf_trace_preemptirq_template+0x268/0x320
[  321.212715][ T9425]  ? lock_chain_count+0x20/0x20
[  321.217654][ T9425]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  321.223806][ T9425]  ? lockdep_hardirqs_on+0x94/0x140
[  321.229004][ T9425]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  321.235180][ T9425]  ? __sys_setsockopt+0x2a8/0x3d0
[  321.240202][ T9425]  ipv6_setsockopt+0x55/0x190
[  321.244877][ T9425]  ? sock_common_recvmsg+0x190/0x190
[  321.250173][ T9425]  __sys_setsockopt+0x2bf/0x3d0
[  321.255028][ T9425]  __x64_sys_setsockopt+0xb1/0xc0
[  321.260047][ T9425]  do_syscall_64+0x4c/0xa0
[  321.264461][ T9425]  ? clear_bhb_loop+0x60/0xb0
[  321.269134][ T9425]  ? clear_bhb_loop+0x60/0xb0
[  321.273806][ T9425]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  321.279705][ T9425] RIP: 0033:0x7f59e879e159
[  321.284123][ T9425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.303916][ T9425] RSP: 002b:00007f59e95c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  321.312329][ T9425] RAX: ffffffffffffffda RBX: 00007f59e8a25fa0 RCX: 00007f59e879e159
[  321.320298][ T9425] RDX: 000000000000003b RSI: 0000000000000029 RDI: 000000000000000d
[  321.328276][ T9425] RBP: 00007f59e95c0090 R08: 0000000000000120 R09: 0000000000000000
[  321.336249][ T9425] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[  321.344222][ T9425] R13: 00007f59e8a26038 R14: 00007f59e8a25fa0 R15: 00007fffbe8617b8
[  321.352199][ T9425]  </TASK>
[  321.878690][ T9441] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1444'.
[  322.032491][ T9453] netlink: 'syz.2.1449': attribute type 39 has an invalid length.
[  322.646164][ T9469] netlink: 'syz.4.1452': attribute type 10 has an invalid length.
[  324.226330][ T9521] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1468'.
[  324.887033][ T9531] netlink: 'syz.2.1472': attribute type 10 has an invalid length.
[  327.078841][ T9565] netlink: 'syz.1.1483': attribute type 3 has an invalid length.
[  327.107276][ T9565] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1483'.
[  327.174098][ T9568] netlink: 'syz.4.1484': attribute type 3 has an invalid length.
[  327.182670][ T9568] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1484'.
[  327.265755][ T9573] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1486'.
[  327.562044][ T9586] netlink: 'syz.2.1487': attribute type 10 has an invalid length.
[  328.150577][ T9613] netlink: 'syz.3.1500': attribute type 2 has an invalid length.
[  328.159951][ T9613] netlink: 'syz.3.1500': attribute type 8 has an invalid length.
[  328.168284][ T9613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1500'.
[  328.632653][ T9625] netlink: 'syz.3.1503': attribute type 3 has an invalid length.
[  328.640851][ T9625] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1503'.
[  329.168927][ T9644] netlink: 'syz.2.1509': attribute type 10 has an invalid length.
[  329.286856][ T9653] netlink: 'syz.3.1513': attribute type 2 has an invalid length.
[  329.302162][ T9653] netlink: 'syz.3.1513': attribute type 8 has an invalid length.
[  329.311132][ T9653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1513'.
[  329.736243][ T9682] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1518'.
[  330.544171][ T9734] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1524'.
[  330.774858][ T9740] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1526'.
[  330.882424][ T9747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1529'.
[  330.926673][ T9747] validate_nla: 1 callbacks suppressed
[  330.926692][ T9747] netlink: 'syz.3.1529': attribute type 10 has an invalid length.
[  330.986892][ T9747] bridge0: port 3(hsr0) entered disabled state
[  330.993247][ T9747] bridge0: port 2(bridge_slave_1) entered disabled state
[  331.002056][ T9747] bridge0: port 1(bridge_slave_0) entered disabled state
[  331.103045][ T9747] bridge0: port 3(hsr0) entered blocking state
[  331.109622][ T9747] bridge0: port 3(hsr0) entered forwarding state
[  331.117983][ T9747] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.125320][ T9747] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.133666][ T9747] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.140822][ T9747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.292293][ T9747] team0: Port device bridge0 added
[  331.946608][ T9784] device hsr_slave_0 left promiscuous mode
[  331.996154][ T9784] device hsr_slave_1 left promiscuous mode
[  332.609131][ T9810] __nla_validate_parse: 5 callbacks suppressed
[  332.609147][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1550'.
[  332.646776][ T9810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1550'.
[  332.666510][ T9814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1550'.
[  333.431449][ T9852] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1564'.
[  333.481451][ T9851] netlink: 'syz.2.1561': attribute type 39 has an invalid length.
[  333.696956][ T9866] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1566'.
[  334.030102][ T9890] netlink: 'syz.0.1574': attribute type 11 has an invalid length.
[  334.116891][ T9889] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1574'.
[  334.140081][ T9890] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1574'.
[  334.203236][ T9896] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  334.221786][ T9901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'.
[  334.262823][ T9901] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'.
[  334.278234][ T9904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1576'.
[  336.360775][ T9953] device syzkaller0 entered promiscuous mode
[  336.594356][ T5121] wlan1: Trigger new scan to find an IBSS to join
[  336.723370][ T4289] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5
[  337.360839][T10005] netlink: 'syz.2.1606': attribute type 2 has an invalid length.
[  337.361681][T10006] netlink: 'syz.2.1606': attribute type 2 has an invalid length.
[  338.810262][T10032] __nla_validate_parse: 5 callbacks suppressed
[  338.810300][T10032] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1615'.
[  340.020612][T10005] device 0 entered promiscuous mode
[  340.038590][T10032] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  340.053985][T10006] device 1 entered promiscuous mode
[  340.060776][T10032] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  340.117381][T10032] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  340.490053][T10043] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1617'.
[  340.537711][T10045] netlink: 'syz.3.1619': attribute type 10 has an invalid length.
[  340.683902][ T5125] wlan1: Trigger new scan to find an IBSS to join
[  340.734458][T10051] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1621'.
[  341.707107][T10078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1631'.
[  342.076514][ T5124] wlan1: Creating new IBSS network, BSSID 8a:a7:0b:23:f5:fc
[  342.085326][T10078] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1631'.
[  342.114178][T10079] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1631'.
[  342.150800][T10086] netlink: 'syz.3.1634': attribute type 10 has an invalid length.
[  342.421178][T10086] team0: Cannot enslave team device to itself
[  342.457164][T10082] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1631'.
[  342.491867][T10090] netlink: 'syz.2.1635': attribute type 10 has an invalid length.
[  342.637425][T10101] netlink: 50295 bytes leftover after parsing attributes in process `syz.0.1638'.
[  342.711888][T10094] netlink: 'syz.1.1637': attribute type 16 has an invalid length.
[  342.736439][T10094] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1637'.
[  343.461175][T10110] netlink: 'syz.4.1640': attribute type 10 has an invalid length.
[  343.889405][T10126] netlink: 'syz.4.1646': attribute type 3 has an invalid length.
[  343.981649][T10132] netlink: 'syz.0.1650': attribute type 10 has an invalid length.
[  343.991628][T10133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1648'.
[  344.033648][T10133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1648'.
[  344.193825][T10137] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1648'.
[  344.249320][T10142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1648'.
[  344.612071][T10150] netlink: 'syz.2.1654': attribute type 10 has an invalid length.
[  345.270786][T10179] device netdevsim0 entered promiscuous mode
[  345.300376][T10186] netlink: 'syz.4.1664': attribute type 28 has an invalid length.
[  345.344367][T10186] netlink: 'syz.4.1664': attribute type 29 has an invalid length.
[  345.373691][T10186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1664'.
[  345.575918][T10205] netlink: 'syz.4.1667': attribute type 10 has an invalid length.
[  345.869252][T10219] netlink: 'syz.3.1670': attribute type 29 has an invalid length.
[  346.648531][T10205] team0: Cannot enslave team device to itself
[  348.303428][T10238] validate_nla: 5 callbacks suppressed
[  348.303439][T10238] netlink: 'syz.0.1672': attribute type 10 has an invalid length.
[  348.619909][T10275] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1681'.
[  348.739638][T10271] netlink: 'syz.1.1684': attribute type 39 has an invalid length.
[  349.024008][T10284] device syzkaller0 entered promiscuous mode
[  350.081536][T10315] cgroup: fork rejected by pids controller in /syz2
[  352.077104][T10411] netlink: 'syz.1.1711': attribute type 10 has an invalid length.
[  352.093787][T10431] netlink: 50295 bytes leftover after parsing attributes in process `syz.4.1702'.
[  352.742655][ T5121] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.954790][ T5121] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.130156][T10462] device syzkaller0 entered promiscuous mode
[  353.212571][ T5121] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.745810][ T5121] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.784494][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  353.795389][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  353.806925][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  353.816964][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  353.825341][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  353.832807][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  355.873759][ T4288] Bluetooth: hci2: command 0x0409 tx timeout
[  357.853192][T10510] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1727'.
[  357.953716][ T4288] Bluetooth: hci2: command 0x041b tx timeout
[  358.264324][ T5121] device 0 left promiscuous mode
[  358.348748][ T5121] device 1 left promiscuous mode
[  358.433938][ T5121] tipc: Left network mode
[  358.660307][T10479] chnl_net:caif_netlink_parms(): no params data found
[  358.760950][T10541] netlink: 'syz.1.1735': attribute type 10 has an invalid length.
[  358.787905][T10541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1735'.
[  358.826836][T10541] bridge0: port 3(veth0_vlan) entered blocking state
[  358.846611][T10541] bridge0: port 3(veth0_vlan) entered disabled state
[  358.868124][T10541] net_ratelimit: 1 callbacks suppressed
[  358.868139][T10541] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  360.034438][ T4288] Bluetooth: hci2: command 0x040f tx timeout
[  360.700535][T10479] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.753335][T10479] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.772378][T10479] device bridge_slave_0 entered promiscuous mode
[  360.795808][T10594] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1747'.
[  360.877097][T10479] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.903838][T10479] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.912009][T10479] device bridge_slave_1 entered promiscuous mode
[  361.085875][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1751'.
[  361.112863][T10618] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1751'.
[  361.140695][T10479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  361.397000][T10626] netlink: 'syz.0.1754': attribute type 9 has an invalid length.
[  361.443778][T10626] netlink: 90128 bytes leftover after parsing attributes in process `syz.0.1754'.
[  361.516993][T10479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  361.786475][T10479] team0: Port device team_slave_0 added
[  361.846912][T10479] team0: Port device team_slave_1 added
[  361.926761][T10479] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.937684][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.012678][T10479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.051804][T10479] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.088877][T10479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.114956][ T4288] Bluetooth: hci2: command 0x0419 tx timeout
[  362.127848][T10479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.294981][T10649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1768'.
[  362.349115][T10479] device hsr_slave_0 entered promiscuous mode
[  362.370852][T10479] device hsr_slave_1 entered promiscuous mode
[  362.434660][T10662] netlink: 'syz.1.1761': attribute type 10 has an invalid length.
[  362.667867][T10668] netlink: 'syz.3.1763': attribute type 29 has an invalid length.
[  362.746396][T10668] netlink: 'syz.3.1763': attribute type 29 has an invalid length.
[  362.767123][T10673] netlink: 'syz.4.1762': attribute type 7 has an invalid length.
[  362.788982][T10673] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.1762'.
[  362.806749][T10675] netlink: 'syz.4.1762': attribute type 39 has an invalid length.
[  362.921109][T10677] netlink: 'syz.3.1763': attribute type 29 has an invalid length.
[  362.972623][T10674] netlink: 'syz.3.1763': attribute type 29 has an invalid length.
[  363.789004][T10715] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  363.897401][T10479] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  363.941890][T10479] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  363.959521][T10479] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  364.010216][T10479] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  364.321367][T10479] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.367156][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  364.380197][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  364.450109][T10479] 8021q: adding VLAN 0 to HW filter on device team0
[  364.557680][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  364.609052][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  364.643897][ T5133] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.651049][ T5133] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.679199][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  364.743040][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  364.774785][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  364.794983][ T5133] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.802139][ T5133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.842678][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  364.870881][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  364.890407][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  364.903094][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  364.932823][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  364.983444][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  365.010043][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  365.045252][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  365.060619][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  365.106979][T10479] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.149270][T10479] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  365.164899][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  365.184577][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  365.485011][T10770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1784'.
[  365.652437][T10776] netlink: 'syz.1.1790': attribute type 10 has an invalid length.
[  365.687348][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1790'.
[  365.722789][T10776] device team0 entered promiscuous mode
[  365.746565][T10776] device team_slave_0 entered promiscuous mode
[  365.772529][T10776] device team_slave_1 entered promiscuous mode
[  365.788794][T10776] device geneve1 entered promiscuous mode
[  365.800736][T10776] bridge0: port 3(team0) entered blocking state
[  365.810933][T10776] bridge0: port 3(team0) entered disabled state
[  365.965156][T10787] netlink: 111 bytes leftover after parsing attributes in process `syz.1.1792'.
[  366.397560][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  366.411879][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  366.437823][T10479] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.662863][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  366.687246][   T36] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  366.740635][T10813] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1799'.
[  366.875126][ T5121] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.894227][ T5121] batman_adv: batadv0: Removing interface: batadv_slave_0
[  366.913101][ T5121] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.932149][ T5121] batman_adv: batadv0: Removing interface: batadv_slave_1
[  366.945686][ T5121] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.974228][ T5121] device bridge_slave_0 left promiscuous mode
[  366.990735][ T5121] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.036681][ T5121] device veth1_vlan left promiscuous mode
[  367.054146][ T5121] device veth0_vlan left promiscuous mode
[  367.580313][ T5121] team0 (unregistering): Port device team_slave_1 removed
[  367.621344][ T5121] team0 (unregistering): Port device team_slave_0 removed
[  367.667154][ T5121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  367.710217][ T5121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  367.916321][ T5121] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  367.939630][ T5121] bond0 (unregistering): (slave team0): Releasing backup interface
[  367.972618][ T5121] bond0 (unregistering): Released all slaves
[  368.047709][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  368.056444][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  368.065160][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  368.073012][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  368.083057][T10479] device veth0_vlan entered promiscuous mode
[  368.171146][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  368.232344][T10816] device syzkaller0 entered promiscuous mode
[  368.245355][T10829] netlink: 'syz.4.1802': attribute type 5 has an invalid length.
[  368.257070][T10834] netlink: 'syz.0.1803': attribute type 10 has an invalid length.
[  368.464446][T10853] netlink: 'syz.4.1806': attribute type 3 has an invalid length.
[  368.472462][T10853] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1806'.
[  370.051414][T10814] delete_channel: no stack
[  370.059350][T10479] device veth1_vlan entered promiscuous mode
[  370.185766][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  370.242470][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  370.277977][T10479] device veth0_macvtap entered promiscuous mode
[  370.317912][T10479] device veth1_macvtap entered promiscuous mode
[  370.462747][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.478228][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.488964][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.501380][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.511743][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.531199][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.543190][T10479] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.591382][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  370.620146][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  370.646191][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  370.668982][ T5125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  370.732677][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.763554][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.793590][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.822611][T10885] TCP: TCP_TX_DELAY enabled
[  370.823514][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.858006][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.878893][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.899094][T10479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  370.915912][T10888] netlink: 'syz.0.1814': attribute type 29 has an invalid length.
[  370.929183][T10479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.942494][T10479] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.968120][T10888] netlink: 'syz.0.1814': attribute type 29 has an invalid length.
[  370.988101][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  371.018387][ T5124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  371.047716][T10479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  371.067045][T10479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  371.090270][T10479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  371.103799][T10479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.121406][T10894] netlink: 'syz.0.1814': attribute type 29 has an invalid length.
[  371.143076][T10897] netlink: 'syz.1.1817': attribute type 2 has an invalid length.
[  371.152241][T10885] netlink: 'syz.0.1814': attribute type 29 has an invalid length.
[  371.264315][T10897] netlink: 'syz.1.1817': attribute type 1 has an invalid length.
[  371.272096][T10897] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1817'.
[  371.419048][T10908] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1820'.
[  371.592656][T10918] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.1820'.
[  371.686920][T10904] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  371.720380][T10904] device syzkaller0 entered promiscuous mode
[  371.738130][T10906] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1818'.
[  371.759726][T10908] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1820'.
[  371.948458][ T5935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.000306][ T5935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.009678][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  372.092031][ T5935] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.111676][ T5935] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.138087][ T5133] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  372.693378][T10944] netlink: 'syz.2.1824': attribute type 29 has an invalid length.
[  372.921204][T10948] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1826'.
[  374.263784][T10944] netlink: 'syz.2.1824': attribute type 29 has an invalid length.
[  374.275345][T10953] netlink: 'syz.0.1827': attribute type 9 has an invalid length.
[  374.283115][T10953] netlink: 7679 bytes leftover after parsing attributes in process `syz.0.1827'.
[  374.297815][T10954] netlink: 8063 bytes leftover after parsing attributes in process `syz.0.1827'.
[  374.546705][T10967] netlink: 'syz.3.1831': attribute type 7 has an invalid length.
[  374.573801][T10967] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.1831'.
[  374.604765][T10968] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1832'.
[  375.066413][T10983] Dead loop on virtual device ip6_vti0, fix it urgently!
[  375.694335][ T4289] Bluetooth: hci3: ACL packet for unknown connection handle 0
[  377.213052][T11053] __nla_validate_parse: 1 callbacks suppressed
[  377.213071][T11053] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1847'.
[  378.361700][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  378.368099][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  378.998501][T11116] validate_nla: 3 callbacks suppressed
[  378.998519][T11116] netlink: 'syz.4.1864': attribute type 10 has an invalid length.
[  379.033264][T11116] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1864'.
[  379.059168][T11116] tap0: tun_chr_ioctl cmd 35108
[  379.157108][T11121] netlink: 'syz.1.1866': attribute type 10 has an invalid length.
[  379.169545][T11121] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1866'.
[  379.183012][T11121] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.193258][T11121] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.502431][T11121] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.512096][T11121] bridge0: port 2(bridge_slave_1) entered forwarding state
[  379.525178][T11121] bridge0: port 1(bridge_slave_0) entered blocking state
[  379.536641][T11121] bridge0: port 1(bridge_slave_0) entered forwarding state
[  379.740286][T11121] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  379.852284][T11128] device syzkaller0 entered promiscuous mode
[  379.903396][T11147] netlink: 'syz.3.1872': attribute type 11 has an invalid length.
[  379.912578][T11147] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1872'.
[  382.519603][T11154] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1874'.
[  382.553218][T11174] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1879'.
[  382.600964][T11174] bond0: (slave bond_slave_0): Releasing backup interface
[  382.611803][T11174] device bond_slave_0 left promiscuous mode
[  382.637197][T11174] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  382.973955][T11200] netlink: 'syz.0.1885': attribute type 10 has an invalid length.
[  382.992374][T11200] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1885'.
[  383.042270][T11200] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.052289][T11200] bridge0: port 1(bridge_slave_0) entered disabled state
[  383.140906][T11200] bridge0: port 2(bridge_slave_1) entered blocking state
[  383.148662][T11200] bridge0: port 2(bridge_slave_1) entered forwarding state
[  383.157146][T11200] bridge0: port 1(bridge_slave_0) entered blocking state
[  383.164895][T11200] bridge0: port 1(bridge_slave_0) entered forwarding state
[  383.191590][T11200] device bridge0 entered promiscuous mode
[  383.208386][T11200] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  384.028639][T11225] device syzkaller0 entered promiscuous mode
[  386.924157][T11281] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1908'.
[  388.915683][T11266] mac80211_hwsim hwsim87 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  388.943731][T11270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1904'.
[  388.951396][T11295] FAULT_INJECTION: forcing a failure.
[  388.951396][T11295] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  388.972216][T11295] CPU: 1 PID: 11295 Comm: syz.3.1913 Not tainted syzkaller #0
[  388.979731][T11295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  388.989807][T11295] Call Trace:
[  388.993098][T11295]  <TASK>
[  388.996044][T11295]  dump_stack_lvl+0x188/0x24e
[  389.000746][T11295]  ? show_regs_print_info+0x12/0x12
[  389.005998][T11295]  ? load_image+0x410/0x410
[  389.010525][T11295]  ? __lock_acquire+0x7c40/0x7c40
[  389.015592][T11295]  should_fail_ex+0x390/0x4c0
[  389.020296][T11295]  _copy_from_user+0x2c/0x170
[  389.024995][T11295]  ___sys_sendmsg+0x1c3/0x360
[  389.029695][T11295]  ? __sys_sendmsg+0x2a0/0x2a0
[  389.034499][T11295]  ? __lock_acquire+0x7c40/0x7c40
[  389.039585][T11295]  __se_sys_sendmsg+0x1c3/0x2b0
[  389.044458][T11295]  ? __x64_sys_sendmsg+0x80/0x80
[  389.049420][T11295]  ? lockdep_hardirqs_on+0x94/0x140
[  389.054638][T11295]  do_syscall_64+0x4c/0xa0
[  389.059067][T11295]  ? clear_bhb_loop+0x60/0xb0
[  389.063743][T11295]  ? clear_bhb_loop+0x60/0xb0
[  389.068434][T11295]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  389.068478][T11299] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1915'.
[  389.074327][T11295] RIP: 0033:0x7fdf3719e159
[  389.074349][T11295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  389.074361][T11295] RSP: 002b:00007fdf3808a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  389.074378][T11295] RAX: ffffffffffffffda RBX: 00007fdf37425fa0 RCX: 00007fdf3719e159
[  389.074390][T11295] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000006
[  389.074400][T11295] RBP: 00007fdf3808a090 R08: 0000000000000000 R09: 0000000000000000
[  389.074409][T11295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.074419][T11295] R13: 00007fdf37426038 R14: 00007fdf37425fa0 R15: 00007ffd88b42bb8
[  389.074441][T11295]  </TASK>
[  389.173547][T11292] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1912'.
[  389.195854][T11302] netlink: 'syz.3.1916': attribute type 28 has an invalid length.
[  389.210705][T11302] netlink: 'syz.3.1916': attribute type 3 has an invalid length.
[  389.220153][T11300] netlink: 'syz.0.1915': attribute type 3 has an invalid length.
[  389.228489][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1916'.
[  389.247134][T11299] openvswitch: netlink: Message has 6 unknown bytes.
[  389.272713][T11300] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1915'.
[  389.553709][T11299] netlink: 'syz.0.1915': attribute type 29 has an invalid length.
[  389.571544][T11318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1923'.
[  389.572782][T11299] netlink: 'syz.0.1915': attribute type 29 has an invalid length.
[  389.625070][T11300] netlink: 'syz.0.1915': attribute type 29 has an invalid length.
[  389.815976][T11324] device syzkaller0 entered promiscuous mode
[  390.004831][T11322] device syzkaller0 entered promiscuous mode
[  391.638011][ T5935] wlan1: Trigger new scan to find an IBSS to join
[  393.713064][T11368] netlink: 'syz.4.1936': attribute type 10 has an invalid length.
[  393.729147][T11368] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1936'.
[  393.875307][T11375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1940'.
[  393.887097][T11378] netlink: 'syz.2.1938': attribute type 21 has an invalid length.
[  393.897112][T11378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1938'.
[  394.105830][T11385] Q�6�`Ҙ: renamed from lo
[  394.426638][T11402] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1950'.
[  394.872957][T11415] netlink: 'syz.3.1953': attribute type 21 has an invalid length.
[  394.887896][T11415] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1953'.
[  395.073421][T11424] FAULT_INJECTION: forcing a failure.
[  395.073421][T11424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  395.091908][T11424] CPU: 1 PID: 11424 Comm: syz.3.1956 Not tainted syzkaller #0
[  395.099404][T11424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  395.109487][T11424] Call Trace:
[  395.112793][T11424]  <TASK>
[  395.115735][T11424]  dump_stack_lvl+0x188/0x24e
[  395.120432][T11424]  ? show_regs_print_info+0x12/0x12
[  395.125653][T11424]  ? load_image+0x410/0x410
[  395.130172][T11424]  ? __lock_acquire+0x7c40/0x7c40
[  395.135216][T11424]  ? snprintf+0xe5/0x140
[  395.139476][T11424]  should_fail_ex+0x390/0x4c0
[  395.144183][T11424]  _copy_to_user+0x2c/0x130
[  395.148694][T11424]  simple_read_from_buffer+0xe3/0x150
[  395.154061][T11424]  proc_fail_nth_read+0x1a6/0x220
[  395.159088][T11424]  ? proc_fault_inject_write+0x310/0x310
[  395.164739][T11424]  ? fsnotify_perm+0x248/0x550
[  395.169512][T11424]  ? proc_fault_inject_write+0x310/0x310
[  395.175146][T11424]  vfs_read+0x2db/0x960
[  395.179304][T11424]  ? kernel_read+0x1e0/0x1e0
[  395.183912][T11424]  ? __fget_files+0x28/0x460
[  395.188505][T11424]  ? __fget_files+0x3fc/0x460
[  395.193183][T11424]  ? __fdget_pos+0x2ae/0x360
[  395.197766][T11424]  ? ksys_read+0x70/0x260
[  395.202099][T11424]  ksys_read+0x14d/0x260
[  395.206342][T11424]  ? vfs_write+0x9a0/0x9a0
[  395.210843][T11424]  ? lockdep_hardirqs_on+0x94/0x140
[  395.216037][T11424]  do_syscall_64+0x4c/0xa0
[  395.220447][T11424]  ? clear_bhb_loop+0x60/0xb0
[  395.225115][T11424]  ? clear_bhb_loop+0x60/0xb0
[  395.229792][T11424]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  395.235693][T11424] RIP: 0033:0x7fdf3715e98e
[  395.240108][T11424] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  395.259701][T11424] RSP: 002b:00007fdf38089fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  395.268105][T11424] RAX: ffffffffffffffda RBX: 00007fdf3808a6c0 RCX: 00007fdf3715e98e
[  395.276068][T11424] RDX: 000000000000000f RSI: 00007fdf3808a0a0 RDI: 0000000000000007
[  395.284031][T11424] RBP: 00007fdf3808a090 R08: 0000000000000000 R09: 0000000000000000
[  395.291989][T11424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  395.299949][T11424] R13: 00007fdf37426038 R14: 00007fdf37425fa0 R15: 00007ffd88b42bb8
[  395.307922][T11424]  </TASK>
[  395.488473][T11429] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.1958'.
[  396.673880][ T5935] wlan1: Trigger new scan to find an IBSS to join
[  396.694220][T11444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1964'.
[  397.949198][ T5125] wlan1: Creating new IBSS network, BSSID 2e:af:63:e2:b1:6c
[  398.762864][T11471] device syzkaller0 entered promiscuous mode
[  400.296964][T11507] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  400.863158][T11515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1983'.
[  403.329906][T11521] delete_channel: no stack
[  403.838707][T11522] device syzkaller0 entered promiscuous mode
[  403.848677][T11529] IPv6: pim6reg1: Disabled Multicast RS
[  404.021309][T11537] netlink: 'syz.2.1986': attribute type 1 has an invalid length.
[  404.054080][T11537] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1986'.
[  405.991965][T11553] netlink: 'syz.3.1990': attribute type 1 has an invalid length.
[  406.007901][T11552] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1991'.
[  406.020177][T11552] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1991'.
[  406.036465][T11552] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1991'.
[  406.574404][T11581] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2002'.
[  406.631436][T11581] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2002'.
[  406.673959][T11585] device syzkaller0 entered promiscuous mode
[  409.178869][T11647] netlink: 'syz.0.2015': attribute type 10 has an invalid length.
[  409.193702][T11647] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2015'.
[  409.536460][T11670] device syzkaller0 entered promiscuous mode
[  413.229554][T11675] netlink: 'syz.2.2025': attribute type 10 has an invalid length.
[  413.251147][T11675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2025'.
[  413.260567][T11675] device ipvlan1 entered promiscuous mode
[  413.275594][T11675] bridge0: port 3(ipvlan1) entered blocking state
[  413.282364][T11675] bridge0: port 3(ipvlan1) entered disabled state
[  413.295443][T11675] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  413.326192][T11685] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2028'.
[  413.342969][T11685] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  413.364228][T11685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  413.862994][T11725] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2041'.
[  413.892776][T11723] netlink: 'syz.0.2040': attribute type 29 has an invalid length.
[  413.934585][T11723] netlink: 'syz.0.2040': attribute type 29 has an invalid length.
[  414.100986][T11731] netlink: 'syz.0.2040': attribute type 39 has an invalid length.
[  414.354593][T11734] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2044'.
[  414.374360][T11745] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  414.507604][T11739] device syzkaller0 entered promiscuous mode
[  414.620402][T11751] netlink: 3291 bytes leftover after parsing attributes in process `syz.4.2048'.
[  415.367935][T11768] netlink: 'syz.0.2053': attribute type 10 has an invalid length.
[  415.376098][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2053'.
[  416.633555][T11768] netlink: 'syz.0.2053': attribute type 10 has an invalid length.
[  416.641415][T11768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2053'.
[  416.674470][T11773] netlink: 'syz.1.2055': attribute type 10 has an invalid length.
[  416.699514][T11773] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.724651][T11773] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.746695][T11773] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  416.782587][T11778] netlink: 'syz.4.2056': attribute type 3 has an invalid length.
[  416.801034][T11778] netlink: 'syz.4.2056': attribute type 304 has an invalid length.
[  416.825191][T11778] netlink: 'syz.4.2056': attribute type 4 has an invalid length.
[  416.843201][T11778] netlink: 'syz.4.2056': attribute type 26 has an invalid length.
[  416.877958][T11778] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.2056'.
[  417.530881][T11818] netlink: 'syz.3.2069': attribute type 3 has an invalid length.
[  417.538846][T11818] netlink: 'syz.3.2069': attribute type 16 has an invalid length.
[  417.547572][T11818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2069'.
[  417.705631][T11820] device syzkaller0 entered promiscuous mode
[  418.442973][T11851] netlink: 'syz.2.2076': attribute type 1 has an invalid length.
[  418.517662][T11851] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2076'.
[  420.582006][T11852] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.2075'.
[  420.605240][T11859] validate_nla: 1 callbacks suppressed
[  420.605253][T11859] netlink: 'syz.4.2078': attribute type 25 has an invalid length.
[  420.619616][T11859] netlink: 'syz.4.2078': attribute type 29 has an invalid length.
[  420.880397][T11865] netlink: 'syz.3.2080': attribute type 12 has an invalid length.
[  420.905089][T11865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2080'.
[  421.066812][T11876] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2083'.
[  421.116283][T11882] tun0: tun_chr_ioctl cmd 2148553947
[  421.121703][T11882] tun0: tun_chr_ioctl cmd 2148553947
[  421.218458][T11882] tun0: tun_chr_ioctl cmd 2148553947
[  421.250190][T11882] tun0: tun_chr_ioctl cmd 2148553947
[  421.330086][T11882] tun0: tun_chr_ioctl cmd 2148553947
[  421.361995][T11887] netlink: 'syz.3.2087': attribute type 7 has an invalid length.
[  421.590928][T11906] device syzkaller0 entered promiscuous mode
[  424.048248][T11923] netlink: 'syz.0.2095': attribute type 21 has an invalid length.
[  425.007644][T11966] netlink: 'syz.0.2111': attribute type 12 has an invalid length.
[  425.024038][T11966] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2111'.
[  425.158120][T11970] device syzkaller0 entered promiscuous mode
[  426.286293][T12001] netlink: 15259 bytes leftover after parsing attributes in process `syz.2.2121'.
[  427.282012][T11986] -: renamed from syzkaller0
[  427.303586][T12003] netlink: 'syz.3.2122': attribute type 5 has an invalid length.
[  427.948209][ T5935] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  428.519442][T12049] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  428.621762][T12051] device syzkaller0 entered promiscuous mode
[  429.065526][T12054] netlink: 'syz.4.2135': attribute type 2 has an invalid length.
[  429.080624][T12054] netlink: 193088 bytes leftover after parsing attributes in process `syz.4.2135'.
[  429.210686][T12062] netlink: 'syz.0.2136': attribute type 29 has an invalid length.
[  429.229810][T12062] netlink: 'syz.0.2136': attribute type 3 has an invalid length.
[  429.250009][T12062] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2136'.
[  430.753138][T12060] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2137'.
[  431.227951][T12092] netlink: 'syz.4.2145': attribute type 10 has an invalid length.
[  431.260335][T12095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2146'.
[  431.338136][T12092] device netdevsim0 entered promiscuous mode
[  431.495491][T12092] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  431.553823][T12095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2146'.
[  431.581597][T12097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2146'.
[  432.032845][T12123] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2153'.
[  432.051785][T12121] netlink: 'syz.3.2151': attribute type 10 has an invalid length.
[  432.352124][T12131] device syzkaller0 entered promiscuous mode
[  434.810369][T12181] netlink: 'syz.0.2168': attribute type 2 has an invalid length.
[  434.821250][T12181] netlink: 193088 bytes leftover after parsing attributes in process `syz.0.2168'.
[  435.367014][T12194] netlink: 'syz.1.2172': attribute type 2 has an invalid length.
[  435.397919][T12194] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2172'.
[  436.269579][T12207] device syzkaller0 entered promiscuous mode
[  436.585704][T12223] netlink: 'syz.3.2181': attribute type 2 has an invalid length.
[  436.593881][T12223] netlink: 193088 bytes leftover after parsing attributes in process `syz.3.2181'.
[  439.471275][T12244] netlink: 82472 bytes leftover after parsing attributes in process `syz.4.2186'.
[  439.538393][T12247] netlink: 'syz.2.2188': attribute type 6 has an invalid length.
[  439.806652][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  439.813045][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  440.327142][T12269] device syzkaller0 entered promiscuous mode
[  440.349113][T12272] netlink: 'syz.2.2198': attribute type 10 has an invalid length.
[  441.228789][T12272] netlink: 'syz.2.2198': attribute type 10 has an invalid length.
[  445.935035][T12297] bridge0: port 3(batadv0) entered blocking state
[  445.941539][T12297] bridge0: port 3(batadv0) entered disabled state
[  445.949935][T12297] device batadv0 entered promiscuous mode
[  445.956770][T12297] bridge0: port 3(batadv0) entered blocking state
[  445.963243][T12297] bridge0: port 3(batadv0) entered forwarding state
[  446.121581][ T5133] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  446.131297][ T5133] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  446.856927][T12334] netlink: 'syz.1.2215': attribute type 29 has an invalid length.
[  447.018750][T12334] netlink: 'syz.1.2215': attribute type 29 has an invalid length.
[  447.071161][T12334] netlink: 'syz.1.2215': attribute type 29 has an invalid length.
[  447.508132][T12349] netlink: 'syz.4.2221': attribute type 10 has an invalid length.
[  447.516241][T12349] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2221'.
[  447.540514][T12349] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.547879][T12349] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.592008][T12349] bridge0: port 2(bridge_slave_1) entered blocking state
[  447.599232][T12349] bridge0: port 2(bridge_slave_1) entered forwarding state
[  447.607537][T12349] bridge0: port 1(bridge_slave_0) entered blocking state
[  447.614727][T12349] bridge0: port 1(bridge_slave_0) entered forwarding state
[  447.625018][T12349] device bridge0 entered promiscuous mode
[  447.631373][T12349] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  447.920297][T12355] device syzkaller0 entered promiscuous mode
[  447.935704][T12360] netlink: 'syz.1.2222': attribute type 39 has an invalid length.
[  451.596839][T12398] netlink: 'syz.1.2229': attribute type 7 has an invalid length.
[  453.160040][T12434] bridge0: port 2(batadv0) entered blocking state
[  453.433765][T12434] bridge0: port 2(batadv0) entered disabled state
[  453.579897][T12434] device batadv0 entered promiscuous mode
[  453.589211][T12434] bridge0: port 2(batadv0) entered blocking state
[  453.595934][T12434] bridge0: port 2(batadv0) entered forwarding state
[  453.915407][ T5104] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  453.924876][ T5104] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  454.495433][T12432] device syzkaller0 entered promiscuous mode
[  456.446773][T12482] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2255'.
[  456.463144][T12482] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  457.075519][T12469] netlink: 'syz.2.2251': attribute type 3 has an invalid length.
[  457.083785][T12463] netlink: 'syz.2.2251': attribute type 49 has an invalid length.
[  457.340213][T12492] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2260'.
[  457.428565][T12489] bridge0: port 4(batadv0) entered blocking state
[  457.469878][T12489] bridge0: port 4(batadv0) entered disabled state
[  457.527000][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  457.536407][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  457.604680][T12508] device syzkaller0 entered promiscuous mode
[  457.995469][T12517] device sit0 entered promiscuous mode
[  458.689995][T12525] netlink: 13183 bytes leftover after parsing attributes in process `syz.3.2268'.
[  458.956783][ T5935] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  461.592529][T12562] netlink: 'syz.1.2276': attribute type 10 has an invalid length.
[  461.976217][T12567] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2277'.
[  461.987154][T12567] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  462.021489][T12567] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.078782][T12557] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2277'.
[  462.091401][T12557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  462.108790][T12557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.143541][T12568] netlink: 'syz.1.2276': attribute type 15 has an invalid length.
[  462.151410][T12568] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2276'.
[  462.221974][T12577] netlink: 'syz.4.2282': attribute type 10 has an invalid length.
[  462.274587][T12577] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2282'.
[  462.724460][T12581] netlink: 'syz.4.2282': attribute type 10 has an invalid length.
[  462.816296][T12581] team0: Port device wlan1 added
[  462.824749][T12588] netlink: 13183 bytes leftover after parsing attributes in process `syz.2.2283'.
[  462.946186][T12592] device sit0 entered promiscuous mode
[  463.056308][T12601] netlink: 117 bytes leftover after parsing attributes in process `syz.1.2288'.
[  463.331852][T12606] device syzkaller0 entered promiscuous mode
[  463.354984][T12615] netlink: 'syz.4.2290': attribute type 13 has an invalid length.
[  463.886680][T12629] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  463.896043][T12629] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.2295'.
[  463.911046][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'.
[  463.923255][T12630] netlink: 'syz.2.2295': attribute type 1 has an invalid length.
[  463.932605][T12630] netlink: 126196 bytes leftover after parsing attributes in process `syz.2.2295'.
[  463.945311][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'.
[  466.169150][T12641] 
��0: renamed from pim6reg1
[  467.052820][T12664] device syzkaller0 entered promiscuous mode
[  467.124393][T12657] device sit0 entered promiscuous mode
[  467.658770][T12689] netlink: 'syz.2.2307': attribute type 3 has an invalid length.
[  467.703596][T12689] __nla_validate_parse: 3 callbacks suppressed
[  467.703614][T12689] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2307'.
[  467.849450][T12695] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2307'.
[  467.923665][T12695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  473.111489][T12707] device syzkaller0 entered promiscuous mode
[  473.123687][T12739] netlink: 'syz.4.2318': attribute type 10 has an invalid length.
[  475.687767][T12773] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2325'.
[  475.775712][T12775] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2327'.
[  475.791261][T12775] bond0: (slave bond_slave_0): Releasing backup interface
[  475.830013][T12775] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  475.917952][T12778] netlink: 'syz.4.2326': attribute type 10 has an invalid length.
[  475.987292][T12778] team0: Port device wlan1 removed
[  475.998568][T12778] device wlan1 entered promiscuous mode
[  476.006729][T12778] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  476.021160][T12785] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2327'.
[  476.527826][T12821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2336'.
[  476.556677][T12821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2336'.
[  476.597129][T12823] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2336'.
[  476.627132][T12821] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2336'.
[  476.872122][T12830] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2335'.
[  477.136758][T12834] device syzkaller0 entered promiscuous mode
[  477.297879][T12845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2342'.
[  477.368436][T12845] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2342'.
[  477.489561][T12835] delete_channel: no stack
[  477.714511][ T4289] Bluetooth: hci2: command 0x0406 tx timeout
[  479.261583][T12850] netlink: 'syz.1.2343': attribute type 10 has an invalid length.
[  479.269831][T12850] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port
[  479.281521][T12855] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  479.300111][T12861] netlink: 'syz.2.2344': attribute type 21 has an invalid length.
[  479.315496][T12861] netlink: 'syz.2.2344': attribute type 2 has an invalid length.
[  482.481013][T12894] netlink: 'syz.0.2356': attribute type 11 has an invalid length.
[  482.502081][T12894] __nla_validate_parse: 2 callbacks suppressed
[  482.502095][T12894] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2356'.
[  482.517867][T12898] netlink: 'syz.2.2357': attribute type 16 has an invalid length.
[  482.541031][T12898] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2357'.
[  482.580665][T12898] netlink: 'syz.2.2357': attribute type 10 has an invalid length.
[  482.645969][T12898] team0: Port device macvlan0 added
[  482.668923][T12895] delete_channel: no stack
[  482.864602][T12915] device syzkaller0 entered promiscuous mode
[  482.937368][T12921] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2361'.
[  483.149061][T12921] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.2361'.
[  483.189034][T12933] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2364'.
[  484.227383][T12960] netlink: 'syz.0.2368': attribute type 2 has an invalid length.
[  487.299487][T12960] device .*! entered promiscuous mode
[  487.305957][T12969] netlink: 'syz.4.2370': attribute type 11 has an invalid length.
[  487.317621][T12969] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2370'.
[  487.561995][T12980] netlink: 'syz.1.2372': attribute type 10 has an invalid length.
[  487.662805][T12980] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  487.876079][T13003] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2377'.
[  490.281665][T13025] netlink: 'syz.4.2378': attribute type 16 has an invalid length.
[  490.289957][T13025] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2378'.
[  490.302542][T13027] bridge0: port 2(batadv0) entered disabled state
[  490.401672][T13021] device syzkaller0 entered promiscuous mode
[  491.658196][T13083] netlink: 'syz.3.2391': attribute type 29 has an invalid length.
[  493.989708][T13083] netlink: 'syz.3.2391': attribute type 29 has an invalid length.
[  494.331170][T13104] device syzkaller0 entered promiscuous mode
[  494.452858][T13108] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2398'.
[  494.475857][T13108] bond0: (slave bond_slave_0): Releasing backup interface
[  494.495076][T13108] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  494.702514][T13125] FAULT_INJECTION: forcing a failure.
[  494.702514][T13125] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  494.750024][T13125] CPU: 0 PID: 13125 Comm: syz.3.2401 Not tainted syzkaller #0
[  494.757598][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  494.767677][T13125] Call Trace:
[  494.770951][T13125]  <TASK>
[  494.773884][T13125]  dump_stack_lvl+0x188/0x24e
[  494.778596][T13125]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  494.784782][T13125]  ? show_regs_print_info+0x12/0x12
[  494.790011][T13125]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  494.796198][T13125]  ? dump_stack+0x5/0x12
[  494.800479][T13125]  should_fail_ex+0x390/0x4c0
[  494.805189][T13125]  _copy_from_user+0x2c/0x170
[  494.809897][T13125]  __copy_msghdr+0x384/0x560
[  494.814499][T13125]  ___sys_sendmsg+0x210/0x360
[  494.819187][T13125]  ? __sys_sendmsg+0x2a0/0x2a0
[  494.823967][T13125]  ? rcu_is_watching+0x11/0xa0
[  494.828753][T13125]  __se_sys_sendmsg+0x1c3/0x2b0
[  494.833602][T13125]  ? __x64_sys_sendmsg+0x80/0x80
[  494.838576][T13125]  do_syscall_64+0x4c/0xa0
[  494.842989][T13125]  ? clear_bhb_loop+0x60/0xb0
[  494.847663][T13125]  ? clear_bhb_loop+0x60/0xb0
[  494.852336][T13125]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  494.858228][T13125] RIP: 0033:0x7fdf3719e159
[  494.862633][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  494.882248][T13125] RSP: 002b:00007fdf3808a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  494.890663][T13125] RAX: ffffffffffffffda RBX: 00007fdf37425fa0 RCX: 00007fdf3719e159
[  494.898631][T13125] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000f
[  494.906596][T13125] RBP: 00007fdf3808a090 R08: 0000000000000000 R09: 0000000000000000
[  494.914559][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  494.922524][T13125] R13: 00007fdf37426038 R14: 00007fdf37425fa0 R15: 00007ffd88b42bb8
[  494.930503][T13125]  </TASK>
[  498.717869][T13154] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2408'.
[  499.054548][T13171] netlink: 'syz.4.2413': attribute type 3 has an invalid length.
[  499.062325][T13171] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2413'.
[  499.202402][T13170] netlink: 'syz.3.2412': attribute type 2 has an invalid length.
[  499.443718][T13179] FAULT_INJECTION: forcing a failure.
[  499.443718][T13179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  499.463663][T13179] CPU: 0 PID: 13179 Comm: syz.0.2415 Not tainted syzkaller #0
[  499.471197][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  499.481270][T13179] Call Trace:
[  499.484562][T13179]  <TASK>
[  499.487502][T13179]  dump_stack_lvl+0x188/0x24e
[  499.492199][T13179]  ? show_regs_print_info+0x12/0x12
[  499.497415][T13179]  ? load_image+0x410/0x410
[  499.501937][T13179]  ? __lock_acquire+0x7c40/0x7c40
[  499.506982][T13179]  should_fail_ex+0x390/0x4c0
[  499.511685][T13179]  _copy_from_user+0x2c/0x170
[  499.516383][T13179]  iovec_from_user+0x143/0x360
[  499.521262][T13179]  __import_iovec+0x6c/0x510
[  499.525888][T13179]  import_iovec+0x6f/0xa0
[  499.530250][T13179]  ___sys_sendmsg+0x252/0x360
[  499.534945][T13179]  ? ct_nmi_exit+0x145/0x1c0
[  499.539564][T13179]  ? __sys_sendmsg+0x2a0/0x2a0
[  499.544370][T13179]  __se_sys_sendmsg+0x1c3/0x2b0
[  499.549217][T13179]  ? perf_trace_preemptirq_template+0x268/0x320
[  499.555463][T13179]  ? __x64_sys_sendmsg+0x80/0x80
[  499.560409][T13179]  ? lockdep_hardirqs_on+0x94/0x140
[  499.565610][T13179]  do_syscall_64+0x4c/0xa0
[  499.570024][T13179]  ? clear_bhb_loop+0x60/0xb0
[  499.574705][T13179]  ? clear_bhb_loop+0x60/0xb0
[  499.579372][T13179]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  499.585262][T13179] RIP: 0033:0x7f301119e159
[  499.589673][T13179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  499.609273][T13179] RSP: 002b:00007f30120a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  499.617694][T13179] RAX: ffffffffffffffda RBX: 00007f3011425fa0 RCX: 00007f301119e159
[  499.625658][T13179] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000f
[  499.633620][T13179] RBP: 00007f30120a8090 R08: 0000000000000000 R09: 0000000000000000
[  499.641584][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.649569][T13179] R13: 00007f3011426038 R14: 00007f3011425fa0 R15: 00007ffd81120ed8
[  499.657544][T13179]  </TASK>
[  499.733362][T13183] device syzkaller0 entered promiscuous mode
[  501.237124][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  501.243608][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  503.300481][T13247] netlink: 'syz.4.2429': attribute type 10 has an invalid length.
[  504.460989][T13296] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2445'.
[  504.839889][T13319] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2451'.
[  505.225706][T13312] device syzkaller0 entered promiscuous mode
[  505.580010][T13339] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2455'.
[  505.710103][T13343] netlink: 'syz.3.2457': attribute type 40 has an invalid length.
[  505.757870][T13350] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2458'.
[  505.763130][T13343] netlink: 'syz.3.2457': attribute type 3 has an invalid length.
[  505.781338][T13343] netlink: 'syz.3.2457': attribute type 1 has an invalid length.
[  505.789549][T13343] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.2457'.
[  505.830389][T13349] netlink: 'syz.4.2458': attribute type 29 has an invalid length.
[  505.847395][T13349] netlink: 'syz.4.2458': attribute type 29 has an invalid length.
[  505.871654][T13350] netlink: 'syz.4.2458': attribute type 29 has an invalid length.
[  509.655550][T13401] netlink: 'syz.2.2472': attribute type 17 has an invalid length.
[  509.705742][T13401] netlink: 'syz.2.2472': attribute type 16 has an invalid length.
[  509.763447][T13401] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2472'.
[  509.851748][T13418] netlink: 'syz.1.2474': attribute type 3 has an invalid length.
[  509.893707][T13418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2474'.
[  511.010733][T13443] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2481'.
[  511.365843][T13460] netlink: 'syz.1.2487': attribute type 10 has an invalid length.
[  513.014245][T13465] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2488'.
[  513.241324][T13474] FAULT_INJECTION: forcing a failure.
[  513.241324][T13474] name failslab, interval 1, probability 0, space 0, times 0
[  513.307816][T13474] CPU: 0 PID: 13474 Comm: syz.4.2490 Not tainted syzkaller #0
[  513.315329][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  513.325404][T13474] Call Trace:
[  513.328697][T13474]  <TASK>
[  513.331640][T13474]  dump_stack_lvl+0x188/0x24e
[  513.333552][T13480] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2493'.
[  513.336327][T13474]  ? show_regs_print_info+0x12/0x12
[  513.336355][T13474]  ? load_image+0x410/0x410
[  513.336385][T13474]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  513.336416][T13474]  should_fail_ex+0x390/0x4c0
[  513.365505][T13474]  should_failslab+0x5/0x20
[  513.370025][T13474]  slab_pre_alloc_hook+0x59/0x300
[  513.375072][T13474]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  513.381075][T13474]  ? ref_tracker_alloc+0x14f/0x490
[  513.386210][T13474]  __kmem_cache_alloc_node+0x4f/0x270
[  513.391597][T13474]  ? ref_tracker_alloc+0x14f/0x490
[  513.396723][T13474]  kmalloc_trace+0x26/0xe0
[  513.401155][T13474]  ref_tracker_alloc+0x14f/0x490
[  513.406117][T13474]  ? ref_tracker_dir_print+0x150/0x150
[  513.411605][T13474]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.417785][T13474]  ? slab_post_alloc_hook+0x4f/0x490
[  513.423090][T13474]  ? slab_post_alloc_hook+0x67/0x490
[  513.428395][T13474]  ? slab_pre_alloc_hook+0x59/0x300
[  513.433619][T13474]  ? rcu_is_watching+0x11/0xa0
[  513.438415][T13474]  dst_init+0xb1/0x400
[  513.442500][T13474]  dst_alloc+0x12a/0x160
[  513.446778][T13474]  ip_route_output_key_hash_rcu+0x14e4/0x23f0
[  513.452958][T13474]  ? ip_route_output_key_hash+0x139/0x330
[  513.458703][T13474]  ip_route_output_key_hash+0x1ef/0x330
[  513.464265][T13474]  ? kfree+0x30/0x1a0
[  513.468265][T13474]  ? ip_route_input_rcu+0x30a0/0x30a0
[  513.473658][T13474]  ? ip_cmsg_send+0x9a5/0xa50
[  513.478357][T13474]  ip_route_output_flow+0x26/0x150
[  513.483475][T13474]  ? security_sk_classify_flow+0x77/0x90
[  513.489143][T13474]  udp_sendmsg+0x1637/0x23d0
[  513.493754][T13474]  ? release_sock+0x2b/0x1b0
[  513.498374][T13474]  ? ip_skb_dst_mtu+0x9b0/0x9b0
[  513.503250][T13474]  ? udp_cmsg_send+0x350/0x350
[  513.508039][T13474]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  513.514045][T13474]  ? lock_chain_count+0x20/0x20
[  513.518927][T13474]  ? __local_bh_enable_ip+0x136/0x1c0
[  513.524318][T13474]  ? _local_bh_enable+0xa0/0xa0
[  513.529186][T13474]  ? do_raw_spin_unlock+0x11d/0x230
[  513.534400][T13474]  ? inet_sendmsg+0x109/0x2a0
[  513.539089][T13474]  ? inet_sendmsg+0x109/0x2a0
[  513.543778][T13474]  ? inet_send_prepare+0x250/0x250
[  513.548899][T13474]  ____sys_sendmsg+0x5ed/0x9a0
[  513.553688][T13474]  ? __sys_sendmsg_sock+0x30/0x30
[  513.558731][T13474]  ? __import_iovec+0x306/0x510
[  513.563612][T13474]  ? import_iovec+0x6f/0xa0
[  513.568145][T13474]  ___sys_sendmsg+0x2a2/0x360
[  513.572842][T13474]  ? __sys_sendmsg+0x2a0/0x2a0
[  513.577642][T13474]  ? ktime_get+0x7b/0x270
[  513.582009][T13474]  __se_sys_sendmsg+0x1c3/0x2b0
[  513.586874][T13474]  ? perf_trace_preemptirq_template+0x268/0x320
[  513.593133][T13474]  ? __x64_sys_sendmsg+0x80/0x80
[  513.598102][T13474]  ? lockdep_hardirqs_on+0x94/0x140
[  513.603321][T13474]  do_syscall_64+0x4c/0xa0
[  513.607789][T13474]  ? clear_bhb_loop+0x60/0xb0
[  513.612482][T13474]  ? clear_bhb_loop+0x60/0xb0
[  513.617173][T13474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.623082][T13474] RIP: 0033:0x7f42f819e159
[  513.627512][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  513.647150][T13474] RSP: 002b:00007f42f8f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  513.655620][T13474] RAX: ffffffffffffffda RBX: 00007f42f8425fa0 RCX: 00007f42f819e159
[  513.663611][T13474] RDX: 0000000000000000 RSI: 0000200000007940 RDI: 000000000000000f
[  513.671604][T13474] RBP: 00007f42f8f97090 R08: 0000000000000000 R09: 0000000000000000
[  513.679620][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  513.687618][T13474] R13: 00007f42f8426038 R14: 00007f42f8425fa0 R15: 00007fff7a7b8e08
[  513.695637][T13474]  </TASK>
[  513.911986][T13474] memory allocation failure, unreliable refcount tracker.
[  514.573302][T13519] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2503'.
[  514.688923][T13523] device wlan1 entered promiscuous mode
[  514.807414][T13533] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2507'.
[  515.131839][T13548] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2511'.
[  515.142705][T13549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2511'.
[  515.282284][T13555] netlink: 'syz.0.2512': attribute type 21 has an invalid length.
[  515.308085][ T4288] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  515.316173][ T4288] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  515.318709][T13554] netlink: 36363 bytes leftover after parsing attributes in process `syz.2.2511'.
[  515.382338][T13549] netlink: 36363 bytes leftover after parsing attributes in process `syz.2.2511'.
[  516.131998][T13591] device sit0 left promiscuous mode
[  516.771874][T13590] device sit0 entered promiscuous mode
[  517.046685][T13628] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2522'.
[  517.079402][T13624] netlink: 'syz.4.2521': attribute type 2 has an invalid length.
[  517.093614][T13624] netlink: 'syz.4.2521': attribute type 1 has an invalid length.
[  517.111636][T13624] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2521'.
[  517.193099][T13631] netlink: 'syz.4.2521': attribute type 2 has an invalid length.
[  517.293256][T13631] netlink: 'syz.4.2521': attribute type 1 has an invalid length.
[  517.309960][T13631] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.2521'.
[  517.320204][T13626] netlink: 'syz.1.2522': attribute type 11 has an invalid length.
[  517.346720][T13626] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2522'.
[  517.373666][T13639] netlink: 'syz.0.2523': attribute type 1 has an invalid length.
[  517.398585][T13639] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2523'.
[  517.639181][T13649] netlink: 'syz.4.2528': attribute type 29 has an invalid length.
[  517.685891][T13649] netlink: 'syz.4.2528': attribute type 29 has an invalid length.
[  517.716575][T13649] netlink: 'syz.4.2528': attribute type 29 has an invalid length.
[  518.082822][T13671] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  518.191285][T13672] netlink: 'syz.3.2535': attribute type 2 has an invalid length.
[  520.068139][T13758] netlink: 'syz.1.2552': attribute type 10 has an invalid length.
[  520.130949][T13758] bridge0: port 3(team0) entered disabled state
[  520.194446][T13758] bridge0: port 3(team0) entered disabled state
[  520.217046][T13758] device team_slave_0 left promiscuous mode
[  520.269357][T13758] team0 (unregistering): Port device team_slave_0 removed
[  520.285990][T13758] device team_slave_1 left promiscuous mode
[  520.319336][T13758] team0 (unregistering): Port device team_slave_1 removed
[  520.335039][T13758] device geneve1 left promiscuous mode
[  520.362355][T13758] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.379949][T13758] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.402160][T13758] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.429811][T13758] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  520.473120][T13758] team0 (unregistering): Port device geneve1 removed
[  520.569912][T13753] __nla_validate_parse: 5 callbacks suppressed
[  520.569928][T13753] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2553'.
[  520.929499][T13779] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2557'.
[  520.962645][T13779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2557'.
[  520.988356][T13779] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2557'.
[  521.178419][T13792] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2562'.
[  521.258810][T13787] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2560'.
[  521.603567][T13809] syz.0.2566 (13809) used obsolete PPPIOCDETACH ioctl
[  521.778447][T13803] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2566'.
[  522.092016][T13818] validate_nla: 4 callbacks suppressed
[  522.092035][T13818] netlink: 'syz.4.2571': attribute type 22 has an invalid length.
[  522.143468][T13818] netlink: 14526 bytes leftover after parsing attributes in process `syz.4.2571'.
[  522.178481][T13818] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2571'.
[  522.533447][T13829] netlink: 'syz.3.2575': attribute type 21 has an invalid length.
[  522.555192][T13829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2575'.
[  522.883098][T13848] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  524.587554][T13921] device syzkaller0 entered promiscuous mode
[  527.518588][T13946] netlink: 'syz.2.2594': attribute type 10 has an invalid length.
[  527.526479][T13946] __nla_validate_parse: 4 callbacks suppressed
[  527.526491][T13946] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2594'.
[  527.542067][T13951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2594'.
[  527.551299][T13952] netlink: 'syz.3.2596': attribute type 1 has an invalid length.
[  527.598229][T13965] netlink: 'syz.1.2598': attribute type 41 has an invalid length.
[  527.890848][T13980] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2604'.
[  528.210645][T13986] device syzkaller0 entered promiscuous mode
[  533.256246][T14013] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2611'.
[  533.288918][T14010] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2611'.
[  533.526517][T14029] netlink: 'syz.4.2613': attribute type 41 has an invalid length.
[  533.587723][T14032] netlink: 'syz.2.2615': attribute type 29 has an invalid length.
[  533.624843][T14032] netlink: 'syz.2.2615': attribute type 29 has an invalid length.
[  533.741380][T14032] IPv6: NLM_F_CREATE should be specified when creating new route
[  533.758988][T14032] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2615'.
[  533.865665][T14043] device syzkaller0 entered promiscuous mode
[  533.898973][T14043] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  534.684830][T14067] netlink: 'syz.3.2624': attribute type 10 has an invalid length.
[  534.737509][T14067] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2624'.
[  534.781936][T14069] netlink: 'syz.0.2625': attribute type 41 has an invalid length.
[  534.816714][T14076] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2624'.
[  534.962715][T14075] device syzkaller0 entered promiscuous mode
[  535.275491][T14085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2638'.
[  537.671806][T14087] netlink: 'syz.3.2628': attribute type 41 has an invalid length.
[  538.023137][T14104] device sit0 left promiscuous mode
[  539.764445][T14135] netlink: 'syz.4.2639': attribute type 10 has an invalid length.
[  539.772337][T14135] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2639'.
[  539.823837][T14133] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2639'.
[  540.042331][T14140] device syzkaller0 entered promiscuous mode
[  545.324241][T14189] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2658'.
[  545.333557][T14192] netlink: 'syz.0.2658': attribute type 10 has an invalid length.
[  545.341410][T14192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2658'.
[  545.350636][T14196] netlink: 'syz.0.2658': attribute type 3 has an invalid length.
[  545.359353][T14196] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2658'.
[  545.603604][T14208] netlink: 'syz.2.2662': attribute type 27 has an invalid length.
[  546.985565][T14208] bond0: (slave bond_slave_0): Releasing backup interface
[  547.117841][T14222] netlink: 'syz.4.2665': attribute type 28 has an invalid length.
[  547.152698][T14222] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2665'.
[  547.216240][T14222] netlink: 'syz.4.2665': attribute type 1 has an invalid length.
[  547.241029][T14222] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2665'.
[  548.119550][T14236] device syzkaller0 entered promiscuous mode
[  548.196328][T14244] device sit0 left promiscuous mode
[  548.323535][T14251] netlink: 'syz.2.2672': attribute type 2 has an invalid length.
[  548.342887][T14251] netlink: 'syz.2.2672': attribute type 2 has an invalid length.
[  548.360393][T14251] netlink: 'syz.2.2672': attribute type 2 has an invalid length.
[  548.375444][T14251] netlink: 'syz.2.2672': attribute type 2 has an invalid length.
[  548.385478][T14251] netlink: 'syz.2.2672': attribute type 2 has an invalid length.
[  548.666105][T14252] device sit0 entered promiscuous mode
[  551.281190][T14285] validate_nla: 28 callbacks suppressed
[  551.281206][T14285] netlink: 'syz.3.2679': attribute type 39 has an invalid length.
[  551.345037][T14291] netlink: 'syz.0.2680': attribute type 39 has an invalid length.
[  551.767072][T14309] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2685'.
[  552.624185][T14326] netlink: 'syz.1.2690': attribute type 3 has an invalid length.
[  552.632307][T14326] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2690'.
[  552.768668][T14328] device syzkaller0 entered promiscuous mode
[  552.975792][T14334] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2693'.
[  555.362388][T14346] netlink: 'syz.2.2697': attribute type 28 has an invalid length.
[  555.374243][T14353] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  555.383911][T14353] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  555.397916][T14351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  555.398187][T14353] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  555.413691][T14351] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.452195][T14351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.473593][T14351] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.509173][T14351] bridge0: port 3(batadv0) entered disabled state
[  555.566737][T14351] device batadv0 left promiscuous mode
[  555.572406][T14351] bridge0: port 3(batadv0) entered disabled state
[  556.391243][T14391] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2707'.
[  557.211291][T14408] device syzkaller0 entered promiscuous mode
[  557.681340][T14439] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.2718'.
[  557.726745][T14439] netlink: zone id is out of range
[  557.735476][T14439] netlink: zone id is out of range
[  557.753598][T14439] netlink: zone id is out of range
[  557.773336][T14439] netlink: zone id is out of range
[  557.793449][T14439] netlink: zone id is out of range
[  557.798633][T14439] netlink: zone id is out of range
[  557.823706][T14439] netlink: get zone limit has 8 unknown bytes
[  558.513642][T14448] netlink: 'syz.0.2722': attribute type 3 has an invalid length.
[  558.521705][T14448] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2722'.
[  559.792370][T14454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2724'.
[  559.832429][T14454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2724'.
[  559.877566][T14458] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2724'.
[  559.895643][T14454] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2724'.
[  560.049762][T14464] netlink: 'syz.4.2728': attribute type 10 has an invalid length.
[  560.367221][T14478] syz.3.2733[14478] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  560.367369][T14478] syz.3.2733[14478] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  560.670235][T14464] team0: Device gre0 is of different type
[  561.152602][T14492] device syzkaller0 entered promiscuous mode
[  561.260840][T14501] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2739'.
[  561.461858][T14509] netlink: 'syz.3.2740': attribute type 2 has an invalid length.
[  562.684805][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  562.691254][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  566.010811][T14574] netlink: 'syz.3.2756': attribute type 10 has an invalid length.
[  566.928547][T14600] netlink: 'syz.3.2766': attribute type 29 has an invalid length.
[  566.961054][T14595] device syzkaller0 entered promiscuous mode
[  567.058877][T14598] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2767'.
[  567.072717][T14600] netlink: 'syz.3.2766': attribute type 29 has an invalid length.
[  567.083511][T14601] netlink: 'syz.3.2766': attribute type 29 has an invalid length.
[  567.107396][T14603] netlink: 'syz.3.2766': attribute type 29 has an invalid length.
[  567.273538][T14615] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2769'.
[  567.284052][T14615] openvswitch: netlink: Key type 386 is out of range max 32
[  567.596381][T14629] netlink: 'syz.1.2770': attribute type 3 has an invalid length.
[  567.615608][T14629] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2770'.
[  567.806018][T14636] netlink: 'syz.3.2773': attribute type 2 has an invalid length.
[  567.848043][T14636] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2773'.
[  570.426128][T14631] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2763'.
[  571.187372][T14680] netlink: 'syz.3.2785': attribute type 21 has an invalid length.
[  571.220454][T14680] IPv6: NLM_F_CREATE should be specified when creating new route
[  571.258269][T14680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  571.266078][T14680] IPv6: NLM_F_CREATE should be set when creating new route
[  571.273421][T14680] IPv6: NLM_F_CREATE should be set when creating new route
[  571.326875][T14668] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2785'.
[  571.404300][T14668] team0: Port device team_slave_0 removed
[  571.422783][T14668] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  571.538068][T14686] �: port 1(vlan0) entered blocking state
[  571.555532][T14686] �: port 1(vlan0) entered disabled state
[  571.585877][T14686] device vlan0 entered promiscuous mode
[  571.721248][T14698] tap0: tun_chr_ioctl cmd 35108
[  571.726612][T14699] tap0: tun_chr_ioctl cmd 35108
[  571.889112][T14706] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2793'.
[  571.926349][T14713] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2794'.
[  571.964971][T14721] device wlan1 left promiscuous mode
[  572.069287][T14723] netlink: 'syz.2.2795': attribute type 21 has an invalid length.
[  573.059861][T14751] device syzkaller0 entered promiscuous mode
[  576.959228][T14766] netlink: 'syz.2.2806': attribute type 1 has an invalid length.
[  576.979446][T14802] netlink: 'syz.0.2813': attribute type 1 has an invalid length.
[  577.739954][T14822] netlink: 'syz.1.2820': attribute type 11 has an invalid length.
[  577.780022][T14822] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2820'.
[  578.587219][T14862] device syzkaller0 entered promiscuous mode
[  578.652041][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2827'.
[  578.861020][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2827'.
[  580.940997][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2827'.
[  581.076710][T14905] netlink: 'syz.2.2836': attribute type 39 has an invalid length.
[  581.192528][T14909] netlink: 'syz.3.2837': attribute type 10 has an invalid length.
[  582.173070][T14949] device syzkaller0 entered promiscuous mode
[  584.540576][T14996] netlink: 'syz.1.2862': attribute type 10 has an invalid length.
[  584.571108][T14996] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2862'.
[  584.688226][T15000] netlink: 'syz.1.2862': attribute type 10 has an invalid length.
[  584.717999][T15000] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2862'.
[  584.871656][T15012] netlink: 'syz.2.2868': attribute type 10 has an invalid length.
[  585.096210][T15012] team0: Device wg1 is of different type
[  585.594028][T15024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2870'.
[  585.820817][T15030] device syzkaller0 entered promiscuous mode
[  585.833503][T15036] netlink: 'syz.0.2876': attribute type 3 has an invalid length.
[  585.842588][T15032] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2874'.
[  585.862505][T15036] netlink: 'syz.0.2876': attribute type 1 has an invalid length.
[  585.881472][T15036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2876'.
[  585.893196][T15037] netlink: 'syz.2.2875': attribute type 3 has an invalid length.
[  585.942782][T15037] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2875'.
[  585.966982][T15039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2876'.
[  585.976992][T15042] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2874'.
[  585.987933][T15047] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2876'.
[  586.980108][T15062] netlink: 'syz.0.2882': attribute type 2 has an invalid length.
[  587.004329][T15062] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2882'.
[  587.548210][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  587.579762][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  587.598134][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  587.616977][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  587.648316][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  587.656044][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  588.889606][T15052] netlink: 'syz.4.2878': attribute type 10 has an invalid length.
[  588.902493][T15052] team0: Device vxcan1 is of different type
[  589.214447][T15091] netlink: 'syz.2.2889': attribute type 10 has an invalid length.
[  589.238326][T15091] device syz_tun entered promiscuous mode
[  589.267359][T15091] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  589.322443][ T5114] bond0: (slave netdevsim0): Releasing backup interface
[  589.430788][T15078] chnl_net:caif_netlink_parms(): no params data found
[  589.713627][ T4289] Bluetooth: hci1: command 0x0409 tx timeout
[  589.831538][T15078] bridge0: port 1(bridge_slave_0) entered blocking state
[  589.853134][T15078] bridge0: port 1(bridge_slave_0) entered disabled state
[  589.883596][T15078] device bridge_slave_0 entered promiscuous mode
[  589.919074][T15121] netlink: 'syz.0.2895': attribute type 10 has an invalid length.
[  590.007657][T15078] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.019480][T15078] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.052367][T15078] device bridge_slave_1 entered promiscuous mode
[  590.209868][T15078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  590.242247][T15078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  590.392935][T15149] device syzkaller0 entered promiscuous mode
[  590.457787][T15078] team0: Port device team_slave_0 added
[  590.566676][T15078] team0: Port device team_slave_1 added
[  591.803606][ T4289] Bluetooth: hci1: command 0x041b tx timeout
[  592.628820][T15175] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  592.645182][T15078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.652165][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.683840][T15175] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  592.712975][T15175] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  592.754430][T15078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.798151][T15078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.824429][T15078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.921943][T15078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.947344][T15195] netlink: 'syz.4.2906': attribute type 2 has an invalid length.
[  593.069289][T15202] netlink: 'syz.4.2906': attribute type 10 has an invalid length.
[  593.152743][T15202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2906'.
[  593.873461][ T4289] Bluetooth: hci1: command 0x040f tx timeout
[  593.973513][T15195] device 0 entered promiscuous mode
[  593.983572][T15202] netlink: 'syz.4.2906': attribute type 10 has an invalid length.
[  594.023475][T15202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2906'.
[  594.242208][T15078] device hsr_slave_0 entered promiscuous mode
[  594.278428][T15078] device hsr_slave_1 entered promiscuous mode
[  594.312831][T15078] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  594.333148][T15078] Cannot create hsr debugfs directory
[  594.899394][T15278] netlink: 'syz.0.2917': attribute type 17 has an invalid length.
[  594.922384][T15278] netlink: 'syz.0.2917': attribute type 16 has an invalid length.
[  594.951488][T15278] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2917'.
[  595.131064][T15279] device syzkaller0 entered promiscuous mode
[  595.190135][T15287] netlink: 8964 bytes leftover after parsing attributes in process `syz.3.2919'.
[  595.954258][ T4289] Bluetooth: hci1: command 0x0419 tx timeout
[  597.328079][T15308] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  597.341786][T15308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  597.581228][T15078] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  597.631896][T15324] netlink: 'syz.3.2926': attribute type 29 has an invalid length.
[  597.640320][T15078] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  597.667397][T15078] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  597.688230][T15324] netlink: 'syz.3.2926': attribute type 29 has an invalid length.
[  597.737756][T15078] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  597.761511][T15335] netlink: 'syz.3.2926': attribute type 29 has an invalid length.
[  597.814810][T15331] netlink: 'syz.3.2926': attribute type 29 has an invalid length.
[  597.829599][T15337] netlink: 'syz.3.2926': attribute type 29 has an invalid length.
[  598.321169][ T5114] bond0: (slave wlan1): Releasing backup interface
[  598.475010][T15078] 8021q: adding VLAN 0 to HW filter on device bond0
[  598.732873][T15078] 8021q: adding VLAN 0 to HW filter on device team0
[  598.760560][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  598.778133][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  598.881166][T15371] device syzkaller0 entered promiscuous mode
[  598.956394][ T5114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  598.976442][ T5114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.014544][ T5114] bridge0: port 2(batadv0) entered disabled state
[  599.025806][ T5114] device bridge_slave_0 left promiscuous mode
[  599.036006][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.066165][ T4288] Bluetooth: hci2: ISO packet for unknown connection handle 2366
[  599.086921][ T5114] device veth1_vlan left promiscuous mode
[  599.969902][ T5114] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  600.083261][ T5114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  600.166461][ T5114] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  600.516465][ T5114] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  600.545621][ T5114] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  600.555778][ T5114] bond0 (unregistering): Released all slaves
[  600.690985][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  600.700961][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  600.710201][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state
[  600.717369][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state
[  600.726679][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  600.741110][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  600.753131][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state
[  600.760305][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.340530][T15438] syz.3.2950[15438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  601.340641][T15438] syz.3.2950[15438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  602.348652][T15467] netlink: 126288 bytes leftover after parsing attributes in process `syz.3.2954'.
[  603.341990][T15477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2956'.
[  604.596201][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  604.612893][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  604.621888][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  604.652095][T15477] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2956'.
[  604.695291][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  604.720692][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  604.754054][ T5128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  604.817224][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  604.854761][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  604.893919][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  604.922134][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  604.937607][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  604.946794][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  604.958803][T15078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  604.972682][T15495] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  605.422756][T15511] netlink: 'syz.2.2965': attribute type 21 has an invalid length.
[  605.451189][T15511] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2965'.
[  605.581631][T15516] device syzkaller0 entered promiscuous mode
[  607.431715][T15544] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2972'.
[  607.441431][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  607.459212][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  607.484689][T15078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.508975][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  607.524671][ T5126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  607.593490][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  607.601950][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  607.614274][T15078] device veth0_vlan entered promiscuous mode
[  607.624685][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  607.634737][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  607.984235][T15551] device sit0 left promiscuous mode
[  608.029134][T15561] device sit0 entered promiscuous mode
[  608.157186][T15556] netlink: 'syz.2.2974': attribute type 21 has an invalid length.
[  608.172521][T15078] device veth1_vlan entered promiscuous mode
[  608.199698][T15575] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2978'.
[  608.252190][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  608.270437][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  608.280295][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  608.289365][ T5130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  608.351431][T15078] device veth0_macvtap entered promiscuous mode
[  608.363061][T15078] device veth1_macvtap entered promiscuous mode
[  608.391691][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.407619][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.418422][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.434758][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.460108][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  608.472269][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.485523][T15078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  608.497016][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  608.507693][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.518282][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  608.529685][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.548263][T15078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  608.573524][T15078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  608.594723][T15078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  608.602310][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  608.652604][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  608.665757][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  608.678013][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  608.696166][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  608.705957][ T5930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  608.739336][T15078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  608.759350][T15078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  608.776870][T15078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  608.788040][T15078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  609.098861][ T5130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.121736][ T5130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.163074][ T5114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  609.221522][T15603] device syzkaller0 entered promiscuous mode
[  609.304640][ T5121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.319234][ T5121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  609.420943][ T5121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  609.673664][T15616] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2987'.
[  610.698111][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  610.712236][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  610.737382][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  610.790951][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  610.813847][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  610.821765][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  612.594421][T15639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2994'.
[  612.608596][T15641] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2995'.
[  612.891683][T15660] netlink: 'syz.1.2998': attribute type 16 has an invalid length.
[  612.907678][T15660] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2998'.
[  612.916885][ T4289] Bluetooth: hci5: command 0x0409 tx timeout
[  613.144008][ T5930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.175318][T15636] chnl_net:caif_netlink_parms(): no params data found
[  613.300599][ T5930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.396023][T15636] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.407080][T15636] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.415863][T15636] device bridge_slave_0 entered promiscuous mode
[  613.425635][T15636] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.432861][T15636] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.441873][T15636] device bridge_slave_1 entered promiscuous mode
[  613.491633][ T5930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.605325][T15636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  613.669964][ T5930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  613.690362][T15636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  613.849639][T15689] device syzkaller0 entered promiscuous mode
[  613.908084][T15636] team0: Port device team_slave_0 added
[  613.988287][T15714] device syzkaller0 entered promiscuous mode
[  614.005118][T15636] team0: Port device team_slave_1 added
[  614.011282][T15698] device syzkaller0 entered promiscuous mode
[  614.700219][T15730] netlink: 'syz.2.3015': attribute type 29 has an invalid length.
[  615.003643][ T4288] Bluetooth: hci5: command 0x041b tx timeout
[  617.073935][ T4288] Bluetooth: hci5: command 0x040f tx timeout
[  618.444486][T15730] netlink: 'syz.2.3015': attribute type 29 has an invalid length.
[  618.457077][T15742] IPv6: NLM_F_CREATE should be specified when creating new route
[  618.471304][T15636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  618.485324][T15636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.543432][T15636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  618.585702][T15636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  618.592691][T15636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  618.651973][T15752] netlink: 'syz.4.3021': attribute type 29 has an invalid length.
[  618.684920][T15636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  618.741589][T15749] netlink: 'syz.2.3019': attribute type 2 has an invalid length.
[  618.779824][ T5114] tipc: Subscription rejected, illegal request
[  618.797363][T15749] netlink: 'syz.2.3019': attribute type 8 has an invalid length.
[  618.903079][T15749] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3019'.
[  619.008265][T15752] netlink: 'syz.4.3021': attribute type 29 has an invalid length.
[  619.083429][T15766] netlink: 'syz.1.3020': attribute type 2 has an invalid length.
[  619.132505][T15766] netlink: 'syz.1.3020': attribute type 8 has an invalid length.
[  619.153907][ T4289] Bluetooth: hci5: command 0x0419 tx timeout
[  619.160960][T15766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3020'.
[  619.188700][T15754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3020'.
[  619.264369][T15764] netlink: 'syz.4.3021': attribute type 29 has an invalid length.
[  619.731531][T15636] device hsr_slave_0 entered promiscuous mode
[  619.795344][T15636] device hsr_slave_1 entered promiscuous mode
[  619.822776][T15636] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  619.854384][T15636] Cannot create hsr debugfs directory
[  619.860030][T15768] netlink: 'syz.4.3021': attribute type 29 has an invalid length.
[  619.880429][ T5930] device .*! left promiscuous mode
[  619.953700][T15771] netlink: 'syz.4.3021': attribute type 29 has an invalid length.
[  620.215666][T15793] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3027'.
[  620.403027][T15797] device syzkaller0 entered promiscuous mode
[  620.541743][T15804] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3029'.
[  620.557690][T15790] device syzkaller0 entered promiscuous mode
[  624.136489][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  624.142827][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.