last executing test programs:

30.026412253s ago: executing program 1 (id=143):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000005100000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7260000000000000007020400000000000000000008000000b70400000000000085000000c30000009500"/65], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x13, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x5) (async)
r5 = getpid()
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0xd, 0x0, 0x0, 0x6}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r0}, 0x8)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r4, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x7, &(0x7f00000009c0)=@framed={{}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @map_fd={0x18, 0x4, 0x1, 0x0, r1}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@generic={&(0x7f00000008c0)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53090000002688634c6588a8", 0x0, 0xfffffff6, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) (async, rerun: 32)
sendmsg$inet(r8, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x5e}], 0x1}, 0x3e8) (rerun: 32)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r0, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10) (async)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r10, 0x4}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1d, 0x0, 0x0, 0x6, 0x20020, 0xffffffffffffffff, 0xf02, '\x00', r9, r0, 0x0, 0x1, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x6c8f0111}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}]}, &(0x7f00000001c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r0}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8905, &(0x7f0000000080)) (async)
write$cgroup_type(r0, &(0x7f00000000c0), 0x9)

29.675484502s ago: executing program 1 (id=145):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a489, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x2, 0x2, 0x73)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000000000006111b8000000000085000000d100000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="02"], 0x10)
socket$kcm(0x2, 0x2, 0x73)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x18)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x802, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0))
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000203600cfab94dcf5c0461c1d67f6f94007134cf6ee08017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000000000000800800d809d5e1cace81ed0bffec03b52a9ecbee5de6ccd40dd68adbef3d93452a00000000000000000000000d11e172844014263d95395ae0d63c0a6a2e6baa014e2012ee44", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2000a890)
r7 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x7, 0x0, 0x6, 0x3, 0x1, 0x1, 0x8}, @generic={0x9, 0x2, 0xb, 0x7, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x1, 0xea, &(0x7f0000000840)=""/234, 0x41100, 0x11, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000980)={0x1, 0x9, 0x3, 0x1}, 0x10, 0x168d, r1, 0x3, &(0x7f00000009c0)=[r10, r10, r10, r10, r10], &(0x7f0000000a00)=[{0x4, 0x4, 0x8, 0xe}, {0x1, 0x4, 0x3, 0x7}, {0x0, 0x3, 0xe, 0x1}]}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r6], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94)
setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000000)=r10, 0x8)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0x1}], 0x1}, 0xc54)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000000071107c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

29.214142548s ago: executing program 1 (id=154):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x5ed7}, 0x16105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001000)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x38)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6})
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r2, r1})

28.917731633s ago: executing program 1 (id=157):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="054181ab84ea55d37df098f8681c4a2ef4b3682851d604b27eaea4ce916bd1f36147e414dcad5e607c0f6af6d3a440d8f667c9b27f37c7", &(0x7f0000000400)=""/179}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r2 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x10, 0x5, 0xfc, 0x0, 0x5, 0x1c8, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1, 0x4800000000000, 0x9, 0x6, 0xfffffffffffffffa, 0x9, 0x3, 0x0, 0x321f, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcd, 0x4, 0x4, 0x2, 0x0, 0xa6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x12400, 0x2, 0x0, 0x7, 0xc, 0x5, 0x843}, 0x0, 0x7, r2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0}}, 0x10)

17.234358562s ago: executing program 1 (id=157):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="054181ab84ea55d37df098f8681c4a2ef4b3682851d604b27eaea4ce916bd1f36147e414dcad5e607c0f6af6d3a440d8f667c9b27f37c7", &(0x7f0000000400)=""/179}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r2 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x10, 0x5, 0xfc, 0x0, 0x5, 0x1c8, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1, 0x4800000000000, 0x9, 0x6, 0xfffffffffffffffa, 0x9, 0x3, 0x0, 0x321f, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcd, 0x4, 0x4, 0x2, 0x0, 0xa6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x12400, 0x2, 0x0, 0x7, 0xc, 0x5, 0x843}, 0x0, 0x7, r2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0}}, 0x10)

2.997231582s ago: executing program 2 (id=343):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
recvmsg$kcm(r0, &(0x7f0000004780)={0x0, 0x0, 0x0}, 0x140)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000200000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0x40086602, 0x110e22fff2)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r7}, 0x3d)
recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002)

2.385056676s ago: executing program 4 (id=350):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000009905"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38)

2.223586381s ago: executing program 3 (id=351):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x23}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r0}, 0x18)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000500)=r2, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000017c0)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000001740), &(0x7f0000001780)='%-010d \x00'}, 0x20)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0xffffff92, 0x0, 0x1, 0xcf, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), 0x0}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001900)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000001880), &(0x7f00000018c0)='%-010d \x00'}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001940)=@bloom_filter={0x1e, 0x5b, 0x8, 0x5, 0x20000, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xa}, 0x50)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000019c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x17, &(0x7f0000000200)=@raw=[@map_fd={0x18, 0x6, 0x1, 0x0, r1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x82}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x4e}], &(0x7f0000000400)='GPL\x00', 0xa, 0x1000, &(0x7f00000006c0)=""/4096, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001700)={0x2, 0x10, 0x9, 0xf4b4ad6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001a40)=[r4, r5, r6, r7, r8, r9], 0x0, 0x10, 0x5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.179420022s ago: executing program 1 (id=157):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="054181ab84ea55d37df098f8681c4a2ef4b3682851d604b27eaea4ce916bd1f36147e414dcad5e607c0f6af6d3a440d8f667c9b27f37c7", &(0x7f0000000400)=""/179}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
r2 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x10, 0x5, 0xfc, 0x0, 0x5, 0x1c8, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x1, 0x4800000000000, 0x9, 0x6, 0xfffffffffffffffa, 0x9, 0x3, 0x0, 0x321f, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcd, 0x4, 0x4, 0x2, 0x0, 0xa6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x12400, 0x2, 0x0, 0x7, 0xc, 0x5, 0x843}, 0x0, 0x7, r2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0}}, 0x10)

1.825186325s ago: executing program 0 (id=353):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)
sendmsg$inet(r0, 0x0, 0x0)

1.824776467s ago: executing program 2 (id=354):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)

1.824358103s ago: executing program 3 (id=355):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x2110, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f2, &(0x7f0000000080))
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)

1.823998503s ago: executing program 4 (id=356):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (fail_nth: 2)
sendmsg$inet(r0, 0x0, 0x0)

1.722145628s ago: executing program 4 (id=357):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = getpid()
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r3)
ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000020000000000000000001801000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095d07917dd471cacae48a60baa34c4b6ed52dd2ce238918ac3eb0cdab59259f8fe10f632627a8a888b68a73866618583976c42", @ANYRES8], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7d9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace80ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0)

1.720869269s ago: executing program 0 (id=358):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x400000002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000100000028000000", @ANYRES32, @ANYBLOB="0000000000000000000000006d2ab384802ff741", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000005c0)={<r4=>r2})
sendmsg(r4, &(0x7f0000000740)={&(0x7f00000007c0)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth0_vlan\x00'}}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000840)="2432cba6485e84a1eda0e2373bf19914cebdb01142037863c6a45fe76b810d895d4cfbb5bd1fb2ba8e2d93a0830e6fdbf6801e1016e2a5c06404831638c16a7011901ad87facda5db7c09f31f4082d5c33b53d1a36fc41659a", 0x59}], 0x1, &(0x7f00000008c0)=[{0x40, 0x0, 0x5, "c341207cd5a94268cc4733416e5d58c0784ca4680585e8ffeea24a5a61dc6cc966e7cab61d45434547394fd20fce"}, {0x18, 0x0, 0x4, "440f90"}, {0xa8, 0x108, 0x5, "6db502b92958f6f98dc807ad9fc825cc7acc52468c02846bbbef0337f3db20da99d56c698f5da12f01645b6fc979fe9c67851610b0ee4264d09b5a76a6a10784bf005dae47552b72afb0d255c9373ffd73d89e20b9b8005947e055300b8deb878608709f9fa2a8f379ff632275e4beee2077a42be458ce13ed9570d312df084481556dd221bef7122103339fc936235cd1"}, {0x28, 0x0, 0x560, "ebc52a57e8eb29dc38c2184949a0634c53cb5b90e2"}, {0x10, 0x11, 0x401}, {0xc8, 0xff, 0x5, "febf409a9ad12107252bd3524426ff6d8d935adb45941562b1bcc775e226f852d10a492ca04bfb084004a2153f0b83b09df9b01e6486a5168fa9dad151436cae79337de9ca3a690857f30d2bbc552cbfb7ab9dcb888883493e806ddc6b574068bad9b14c7bf5f654156d1b4bccbc1fc938999dcf088618288a78bfc54917c36d2feb6fe3259681f0d13eaa188ca98b732721d67c9be400fc9da1c73de532762a87902898070bd96a2a26e9eae17d592860f4cf43"}, {0x50, 0xff, 0xfffffff7, "7472339a7ccb19154544df162d4f961b35fc5cb5142abc4dc1ca32733f949eabbf291e2d4b2d77ccf36d7541105ca8df0a76cdeb8d032f8b074c"}], 0x250}, 0x9040)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5, r3}, 0xfffffffffffffee3)
sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068", 0x5}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbff", 0x14}], 0x2}, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0)
ioctl$TUNSETDEBUG(r6, 0x400454c9, &(0x7f0000000440)=0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x22, &(0x7f0000000000)=r10, 0x10)
r11 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$sock(r11, &(0x7f0000000680)={&(0x7f0000000180)=@hci={0x1f, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000340)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x18}, 0x1)
r12 = socket$kcm(0x10, 0x2, 0x4)
close(r12)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17b9310400876c1d0000007ea60864160af36514001ac00400020004200400eab556a705251e61aae5f66f8294ff0051f60a84c9f4d4938037e786a6d0001004000e4509c57f74ff24185499020000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24008880)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x0, @perf_config_ext={0x2, 0xf}, 0x1e005, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2b, 0x4, 0x2, 0x3, 0x404, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r13=>0xffffffffffffffff})
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="12000000610000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r14}, &(0x7f0000001d80), &(0x7f0000001d40)=r13}, 0x20)

1.635761423s ago: executing program 2 (id=359):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb140500", 0x12}], 0x1}, 0x4000)

1.514286966s ago: executing program 2 (id=360):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x5, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1, 0x0, 0x0, 0x803e0000}, 0x20000040)
sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffc4e, 0x0}, 0x40084)
close(r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r3 = socket$kcm(0x10, 0x2, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, <r4=>0x0})
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a908137", 0x0, 0x3, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r5})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)
sendmsg$inet(r0, 0x0, 0x0)

1.49195759s ago: executing program 0 (id=361):
perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x482, 0x81, 0x7ff, 0x0, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000030f0ffffffffffffff950000080000000026131796249734e809e549bb7e888b53e7e8181c71c68ed738dbf690ecf5150fde0c9965d8eb349fad6694f63e17edf71a6935e261933783188358bdaaa8f54eb2a9c715b10b7a34913a3df983c91addd1b8505da1ebf27f1aa4551a3eae506b294ccfa2a4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x0, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$kcm(0xa, 0x2, 0x11)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x18)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="f3f02d63707561020000002b706572665f6576656e3fef4786"], 0x15)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)

1.395676311s ago: executing program 3 (id=362):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={<r0=>0xffffffffffffffff}) (async)
r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4e, 0x8, 0x4, 0xa, 0x0, 0x10000, 0x4400, 0x6, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f00000002c0), 0x1}, 0x10, 0x0, 0x6, 0x1, 0x6, 0x7f7, 0x0, 0x0, 0x13400000}, 0x0, 0x2, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x8000000}, 0x0, 0x9, r1, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0x4, 0x8, 0xb}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r2, @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000004c0)='percpu_alloc_percpu\x00', r4}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='btrfs_writepage_end_io_hook\x00', r4, 0x0, 0x10}, 0x18) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x16809, 0x32, 0xfffffbff, 0x3, 0x10000002, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000003000)={r0}) (async)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000400)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000005"], 0x50) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x73)

1.290990202s ago: executing program 4 (id=363):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd00, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000)

1.263412515s ago: executing program 3 (id=364):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb1405000000", 0x14}], 0x1}, 0x4000) (fail_nth: 9)

1.019668957s ago: executing program 0 (id=365):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000008}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000ee0000000000000000000073012e000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)

601.001662ms ago: executing program 3 (id=366):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0x0, 0x20000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

548.717959ms ago: executing program 2 (id=367):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000040000009905"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r0, 0x0, 0x1ba8847c99}, 0x38)

451.59415ms ago: executing program 4 (id=368):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) (fail_nth: 3)
sendmsg$inet(r0, 0x0, 0x0)

420.122609ms ago: executing program 0 (id=369):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8008a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, 0x0, 0xfdef)

1.443529ms ago: executing program 0 (id=370):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb140500", 0x12}], 0x1}, 0x4000)

1.047133ms ago: executing program 2 (id=371):
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x10, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x408000, 0xaea}, 0x16125, 0x2e, 0x3, 0x5, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x106)
setsockopt$sock_attach_bpf(r1, 0x29, 0x4e, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
getpid()
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002340)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000600142603600e12080005007f370401a8001600200004000400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000900)=""/242, 0x10b, 0xf2, 0x1, 0x3, 0x10000, @value=r0}, 0x28)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x1, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
r3 = socket$kcm(0x2a, 0x2, 0x0)
recvmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x142) (async)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) (async)
socketpair(0x1, 0x2, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8904dd4a60cd00000000090000020000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async)
socket$kcm(0x2a, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./cgroup/../file0\x00', 0xa) (async)
r5 = socket$kcm(0xa, 0x0, 0x106)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000e27f00000100000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000a5000000000000000000000047cd322965ee2006dd2100a1e294a4a22740bd887e992e"], 0x50)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1414}, 0x48) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d5c000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080)

600.757µs ago: executing program 3 (id=372):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)
sendmsg$inet(r0, 0x0, 0x0)

0s ago: executing program 4 (id=373):
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161)
close(r0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000000000400"/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000001000000002"], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2f}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1ffffffffffffc36, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0], 0x0, 0x8, &(0x7f0000000200), 0x44, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
r3 = socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x5, <r4=>0x0}, 0x8)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r4, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000ff010000000800000600000000400400", @ANYRES32, @ANYBLOB="0f000003000000000000000000c62f6777000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0300000001000000030000000f00"/28], 0x50)
ioctl$SIOCSIFHWADDR(r3, 0x8918, &(0x7f0000000000)={'tunl0\x00', @random="0200ff7fffff"})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200))
r7 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x81, 0xfc, 0x3, 0x1, 0x0, 0x88a4, 0x40000, 0xb, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000000080), 0x3}, 0x11320, 0x0, 0x4, 0x9, 0x3ff, 0x8000, 0x1, 0x0, 0xe, 0x0, 0xffffffffffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x1)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe}, 0x0, 0x0, r7, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x40000000, 0x61, 0x11, 0x98}, [@initr0]}, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c0002", 0x1b}], 0x1}, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000800)={r6, &(0x7f0000000740)="3f3b529a75ef081377b1559acfb8d113c149b28d2bf4eafd7645609b799be272b298ea2c570017ed2979fbed43376d2121cfb33eb98a74373a674979113c07f9550f0f43878c005e3c8f8e536b9a2a3371b6100216906628529fb7904133c9a4c381644264f407ec876464ce1f60a5", &(0x7f00000007c0)=""/25, 0x4}, 0x20)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x17, 0x4, 0x1}, 0x50)
mkdir(&(0x7f00000006c0)='./file0\x00', 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20)
sendmsg$kcm(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)="52c1079a4da0b30144ff9bea365ffee9366a8fec8eaa60e559c6c1c29822c4252cb89dc1060ac4b80daec8eab9a8af690c7ad9", 0x33}, {&(0x7f0000000380)="17a1c3934b167d1a0e611e3dc682428ef41dfc8ed8f924ccfd6b474526fe527eff98b9102ae5c1d6d7a8b903ae564098769f6cc5efcaf78ac6f55e23715296db349ef43315df986e07c6c16c45bcf46685bfa5fe26c863b59cc7351869ec0d607c88c28e28cb64c4f8d67d60997bb9ddb9da2137c5a9528b76ebbfee9cdf21c71a9e9bda9cd0f75815d6c691cc405ec841ecd604f77199ffae1e730e34dff7e16828d380f70fe3671e8a4d23590bbd48d47d03a9e1c94ddac0f2c355d764ae70a1e24b2e9d86e2baf2247e", 0xcb}, {&(0x7f0000000480)="26ef73a622f19a277ce4468147ad3652a031a278660a1b3cc9719e97946dc9864ed1e9917d6bc08d8cdf1c159ba96bda41d0cdc6e07dc0e175d3dae46a85ebbd0453d0008eae6ac82b12705279b99b3590b90507fe1ab1f5671765ffaa9bf6bfedf137a365527e532643c15a3de7b8edd1db70aec361b9ebf2972d8e4d6852cd80b0051d", 0x84}], 0x3, &(0x7f0000000580)=[{0xf0, 0x29, 0x320, "1fec636d61e0cd6f164c945d064cbfe86bbd40e9cb287bf756aebd985ae81618e97a8d9bab74630a64dafc2126d04b083dbadd81004cb64510ddda514b531c4a8bc5c73f4d36402df7ae6b3a66e9ef0ac160f33c1f16ab1962728a59b4470098ee9466fffd4c7b78ad99ef74ec5bba3473739034ea8875fec2120dd1e8479bb119907d91b80ade9182b04951617bf0006d33818ce8613a410ac36118d0a20f6fccbb6b4e15b055ca33d7e429a4a2816cb6135425722dfb08df48e16f031c86306708d1801a0f46c3138054e9d543bb49069904e85565019b6a3a87"}, {0x10, 0x119, 0x1000}], 0x100}, 0x40004)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r11, &(0x7f00000002c0), 0x0}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.2' (ED25519) to the list of known hosts.
[   65.773851][ T5822] cgroup: Unknown subsys name 'net'
[   65.886723][ T5822] cgroup: Unknown subsys name 'cpuset'
[   65.896097][ T5822] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.254915][ T5822] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.657283][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.677311][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.685786][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.694009][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   69.702673][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.711947][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.719984][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   69.728168][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.735603][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.742963][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.751577][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.753191][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.765858][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.783534][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.783546][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.789632][ T5849] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   69.803753][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.805765][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.825985][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   69.833455][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.839989][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.848383][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   69.856806][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   69.857485][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.874510][ T5849] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.476862][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   70.581910][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   70.634085][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   70.701508][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   70.780914][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   70.812566][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.820260][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.829451][ T5846] bridge_slave_0: entered allmulticast mode
[   70.836954][ T5846] bridge_slave_0: entered promiscuous mode
[   70.892671][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.900225][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.907541][ T5843] bridge_slave_0: entered allmulticast mode
[   70.915213][ T5843] bridge_slave_0: entered promiscuous mode
[   70.922916][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.930659][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.938251][ T5846] bridge_slave_1: entered allmulticast mode
[   70.946281][ T5846] bridge_slave_1: entered promiscuous mode
[   70.976048][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.983525][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.990688][ T5843] bridge_slave_1: entered allmulticast mode
[   70.998586][ T5843] bridge_slave_1: entered promiscuous mode
[   71.089770][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.131024][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.139347][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.146571][ T5836] bridge_slave_0: entered allmulticast mode
[   71.153838][ T5836] bridge_slave_0: entered promiscuous mode
[   71.164087][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.176965][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.187721][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.203177][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.210764][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.218193][ T5837] bridge_slave_0: entered allmulticast mode
[   71.226096][ T5837] bridge_slave_0: entered promiscuous mode
[   71.234393][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.241567][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.249912][ T5836] bridge_slave_1: entered allmulticast mode
[   71.257076][ T5836] bridge_slave_1: entered promiscuous mode
[   71.318122][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[   71.324685][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[   71.345485][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.352575][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.359866][ T5837] bridge_slave_1: entered allmulticast mode
[   71.367581][ T5837] bridge_slave_1: entered promiscuous mode
[   71.402017][ T5843] team0: Port device team_slave_0 added
[   71.411470][ T5843] team0: Port device team_slave_1 added
[   71.429909][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.437297][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.445363][ T5832] bridge_slave_0: entered allmulticast mode
[   71.452340][ T5832] bridge_slave_0: entered promiscuous mode
[   71.478276][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.502787][ T5846] team0: Port device team_slave_0 added
[   71.509421][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.516971][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.524692][ T5832] bridge_slave_1: entered allmulticast mode
[   71.531637][ T5832] bridge_slave_1: entered promiscuous mode
[   71.552563][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.564465][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.602936][ T5846] team0: Port device team_slave_1 added
[   71.623948][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.647884][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.655450][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.681597][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.706294][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.744175][ T5836] team0: Port device team_slave_0 added
[   71.750686][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.757840][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.784012][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.809364][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.820847][ T5837] team0: Port device team_slave_0 added
[   71.828838][ T5836] team0: Port device team_slave_1 added
[   71.870542][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.878286][ T5851] Bluetooth: hci2: command tx timeout
[   71.878491][ T5851] Bluetooth: hci1: command tx timeout
[   71.887298][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.915408][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.940496][ T5837] team0: Port device team_slave_1 added
[   71.953395][ T5851] Bluetooth: hci4: command tx timeout
[   71.953653][ T5845] Bluetooth: hci3: command tx timeout
[   71.959081][ T5851] Bluetooth: hci0: command tx timeout
[   71.995073][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.002035][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.028630][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.040991][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.048516][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.075138][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.106173][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.113154][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.139423][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.151043][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.158403][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.185150][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.220522][ T5832] team0: Port device team_slave_0 added
[   72.240510][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.248484][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.274742][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.322048][ T5832] team0: Port device team_slave_1 added
[   72.360485][ T5843] hsr_slave_0: entered promiscuous mode
[   72.367300][ T5843] hsr_slave_1: entered promiscuous mode
[   72.402521][ T5846] hsr_slave_0: entered promiscuous mode
[   72.408870][ T5846] hsr_slave_1: entered promiscuous mode
[   72.415601][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.423459][ T5846] Cannot create hsr debugfs directory
[   72.442832][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.449876][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.476026][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.502953][ T5836] hsr_slave_0: entered promiscuous mode
[   72.509452][ T5836] hsr_slave_1: entered promiscuous mode
[   72.515672][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.523472][ T5836] Cannot create hsr debugfs directory
[   72.531235][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.538320][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.564926][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.580948][ T5837] hsr_slave_0: entered promiscuous mode
[   72.587338][ T5837] hsr_slave_1: entered promiscuous mode
[   72.593814][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.601371][ T5837] Cannot create hsr debugfs directory
[   72.806280][ T5832] hsr_slave_0: entered promiscuous mode
[   72.812493][ T5832] hsr_slave_1: entered promiscuous mode
[   72.819055][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.826692][ T5832] Cannot create hsr debugfs directory
[   73.240567][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.254021][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.280501][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.291500][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.346302][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.369580][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.379709][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.391359][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.465587][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.476506][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.499214][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.530556][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.611678][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.621584][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.657599][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.684402][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.707093][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.769926][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.779838][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.792786][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.809717][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.852029][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   73.877217][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.901284][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.908580][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.919863][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.926996][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.953651][ T5851] Bluetooth: hci1: command tx timeout
[   73.953813][ T5845] Bluetooth: hci2: command tx timeout
[   73.991027][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.002932][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   74.033944][ T5845] Bluetooth: hci0: command tx timeout
[   74.033963][ T5851] Bluetooth: hci3: command tx timeout
[   74.033993][ T5851] Bluetooth: hci4: command tx timeout
[   74.086625][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.093797][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.122688][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   74.141945][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.149120][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.175406][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.182541][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.205643][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.220300][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.227474][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.257080][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.311738][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   74.371054][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   74.399009][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.406232][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.442932][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.461241][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   74.481863][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.489099][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.499686][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.506882][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.556487][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.563703][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.750232][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.879496][ T5843] veth0_vlan: entered promiscuous mode
[   74.929994][ T5843] veth1_vlan: entered promiscuous mode
[   75.077259][ T5843] veth0_macvtap: entered promiscuous mode
[   75.099993][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.116410][ T5843] veth1_macvtap: entered promiscuous mode
[   75.148383][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.220285][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.256183][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.277345][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.289113][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.299872][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.309060][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.331133][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.349796][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.426602][ T5836] veth0_vlan: entered promiscuous mode
[   75.446729][ T5846] veth0_vlan: entered promiscuous mode
[   75.497513][ T5836] veth1_vlan: entered promiscuous mode
[   75.545120][ T5846] veth1_vlan: entered promiscuous mode
[   75.601947][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.615360][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.671305][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.679039][ T5836] veth0_macvtap: entered promiscuous mode
[   75.685915][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.713116][ T5837] veth0_vlan: entered promiscuous mode
[   75.754683][ T5846] veth0_macvtap: entered promiscuous mode
[   75.761917][ T5836] veth1_macvtap: entered promiscuous mode
[   75.781295][ T5837] veth1_vlan: entered promiscuous mode
[   75.793075][ T5846] veth1_macvtap: entered promiscuous mode
[   75.844259][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   75.850177][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.889299][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.902594][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.975030][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.984492][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.993713][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.002429][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.017303][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.029946][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.034111][ T5851] Bluetooth: hci1: command tx timeout
[   76.042327][ T5845] Bluetooth: hci2: command tx timeout
[   76.051023][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.060026][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.068982][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.090074][ T5832] veth0_vlan: entered promiscuous mode
[   76.114777][ T5845] Bluetooth: hci4: command tx timeout
[   76.114833][ T5851] Bluetooth: hci0: command tx timeout
[   76.120196][ T5845] Bluetooth: hci3: command tx timeout
[   76.169182][ T5837] veth0_macvtap: entered promiscuous mode
[   76.212453][ T5837] veth1_macvtap: entered promiscuous mode
[   76.246708][ T5832] veth1_vlan: entered promiscuous mode
[   76.268132][    C1] hrtimer: interrupt took 35878 ns
[   76.339508][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.359907][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.428500][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.442604][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.452286][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.465369][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.494053][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.532526][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.700633][ T5832] veth0_macvtap: entered promiscuous mode
[   76.715013][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.728210][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.737071][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.746323][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.748282][ T5832] veth1_macvtap: entered promiscuous mode
[   76.845977][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.899970][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.910945][  T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.936107][  T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.959900][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.987199][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.998916][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.008370][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.041293][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.068180][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.090572][ T5932] warning: `syz.0.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   77.116086][ T5932] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   77.382639][ T5936] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2'.
[   77.410618][ T5936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'.
[   77.419732][  T778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.441316][  T778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.522855][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.655751][ T5936] bridge_slave_0 (unregistering): left allmulticast mode
[   77.662845][ T5936] bridge_slave_0 (unregistering): left promiscuous mode
[   77.692096][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.754899][ T5943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   77.913666][ T5943] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.9'.
[   77.967002][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.998847][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.113517][ T5845] Bluetooth: hci2: command tx timeout
[   78.114198][ T5849] Bluetooth: hci1: command tx timeout
[   78.204905][ T5849] Bluetooth: hci0: command tx timeout
[   78.204954][ T5845] Bluetooth: hci4: command tx timeout
[   78.210325][ T5849] Bluetooth: hci3: command tx timeout
[   78.260417][ T5954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'.
[   78.270434][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.282017][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.290422][ T5953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11'.
[   79.274771][ T5967] netlink: 'syz.1.14': attribute type 29 has an invalid length.
[   79.285638][ T5967] netlink: 152064 bytes leftover after parsing attributes in process `syz.1.14'.
[   79.301834][ T5967] netlink: zone id is out of range
[   79.323932][ T5967] netlink: zone id is out of range
[   79.337461][ T5967] netlink: zone id is out of range
[   79.352840][ T5967] netlink: zone id is out of range
[   79.376247][ T5967] netlink: zone id is out of range
[   79.411532][ T5967] netlink: zone id is out of range
[   79.430719][ T5967] netlink: zone id is out of range
[   79.446393][ T5967] netlink: zone id is out of range
[   79.488290][ T5967] netlink: zone id is out of range
[   79.508258][ T5967] netlink: zone id is out of range
[   79.615889][ T5974] IPv6: NLM_F_REPLACE set, but no existing node found!
[   79.812330][ T3024] wlan1: Trigger new scan to find an IBSS to join
[   79.981940][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18'.
[   80.061636][ T5977] netlink: 'syz.4.17': attribute type 10 has an invalid length.
[   80.216207][ T5977] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[   80.289700][ T5977] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[   80.314077][ T5977] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[   80.612289][ T5991] netlink: 'syz.4.22': attribute type 1 has an invalid length.
[   80.626533][ T5991] netlink: 'syz.4.22': attribute type 3 has an invalid length.
[   80.661585][ T5991] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22'.
[   82.016698][ T6017] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'.
[   82.317760][ T6026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.29'.
[   82.759932][  T778] wlan1: Trigger new scan to find an IBSS to join
[   85.070172][ T6047] netlink: 180 bytes leftover after parsing attributes in process `syz.0.36'.
[   85.334845][ T6054] netlink: 'syz.4.38': attribute type 10 has an invalid length.
[   85.446580][ T6054] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   85.804850][   T36] wlan1: Trigger new scan to find an IBSS to join
[   85.888946][ T6085] net_ratelimit: 215 callbacks suppressed
[   85.888959][ T6085] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   85.910782][   T12] wlan1: Creating new IBSS network, BSSID 3a:61:01:85:1d:f3
[   86.202418][ T6054] syz.4.38 (6054) used greatest stack depth: 20032 bytes left
[   86.225167][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.47'.
[   86.246843][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.288484][ T6096] bridge_slave_0 (unregistering): left allmulticast mode
[   86.297318][ T6096] bridge_slave_0 (unregistering): left promiscuous mode
[   86.306671][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.350825][ T6104] netlink: 'syz.2.51': attribute type 10 has an invalid length.
[   86.358588][ T6104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'.
[   86.540546][ T6104] batadv0: entered promiscuous mode
[   86.556927][ T6104] bridge0: port 3(batadv0) entered blocking state
[   86.570461][ T6104] bridge0: port 3(batadv0) entered disabled state
[   86.578175][ T6104] batadv0: entered allmulticast mode
[   86.621205][ T6104] bridge0: port 3(batadv0) entered blocking state
[   86.627842][ T6104] bridge0: port 3(batadv0) entered forwarding state
[   86.688164][   T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   86.697657][   T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   86.709134][ T2157] cfg80211: failed to load regulatory.db
[   87.868557][ T6144] netlink: 'syz.0.64': attribute type 10 has an invalid length.
[   88.469430][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.66'.
[   88.531372][ T6144] macvlan0: entered promiscuous mode
[   88.550774][ T6144] macvlan0: entered allmulticast mode
[   88.566302][ T6144] veth1_vlan: entered allmulticast mode
[   88.578504][ T6144] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[   88.773119][ T6156] Zero length message leads to an empty skb
[   88.841061][ T6160] netlink: 'syz.1.72': attribute type 2 has an invalid length.
[   88.861668][ T6160] netlink: 51 bytes leftover after parsing attributes in process `syz.1.72'.
[   89.030428][ T6167] : renamed from bond0 (while UP)
[   89.034539][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.044933][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.054260][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.063451][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.072561][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.081788][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.090978][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.100252][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   89.109466][ T6164] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[   90.332293][ T6189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.81'.
[   91.450942][ T6227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.95'.
[   91.495160][ T6223] netlink: 'syz.1.93': attribute type 29 has an invalid length.
[   91.521423][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.025982][ T6227] bridge_slave_0 (unregistering): left allmulticast mode
[   92.074179][ T6227] bridge_slave_0 (unregistering): left promiscuous mode
[   92.087874][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.728112][ T6269] netlink: 'syz.4.106': attribute type 10 has an invalid length.
[   92.844972][ T6269] bond0: (slave wlan1): Releasing backup interface
[   92.905137][ T6269] team0: Port device wlan1 added
[   93.085902][ T6280] tap0: tun_chr_ioctl cmd 35108
[   93.113472][ T6281] tap0: tun_chr_ioctl cmd 1074025681
[   93.345390][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.114'.
[   93.412863][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.464454][ T6288] bridge_slave_0 (unregistering): left allmulticast mode
[   93.481573][ T6288] bridge_slave_0 (unregistering): left promiscuous mode
[   93.489763][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.741052][ T6297] syzkaller0: tun_chr_ioctl cmd 1074025676
[   93.750815][ T6297] syzkaller0: owner set to 1
[   94.312892][   T36] wlan1: Selected IBSS BSSID 3a:61:01:85:1d:f3 based on configured SSID
[   94.465338][ T6344] netlink: 10 bytes leftover after parsing attributes in process `syz.2.131'.
[   94.465338][ T6345] netlink: 10 bytes leftover after parsing attributes in process `syz.2.131'.
[   94.499638][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.0.132'.
[   94.597974][ T6350] netlink: 144 bytes leftover after parsing attributes in process `syz.1.133'.
[   94.666273][ T6356] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.134'.
[   94.714913][    C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   94.935784][ T6359] netlink: 'syz.1.136': attribute type 3 has an invalid length.
[   94.985284][ T6359] netlink: 'syz.1.136': attribute type 1 has an invalid length.
[   95.013602][ T6359] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.136'.
[   95.423067][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.144'.
[   95.515465][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.626969][ T6377] bridge_slave_0 (unregistering): left allmulticast mode
[   95.642148][ T6377] bridge_slave_0 (unregistering): left promiscuous mode
[   95.651939][ T6377] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.687801][ T6386] netlink: 'syz.0.146': attribute type 28 has an invalid length.
[   95.701494][ T6386] netlink: 'syz.0.146': attribute type 4 has an invalid length.
[   95.709345][ T6386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.146'.
[   95.848647][ T6383] netlink: 'syz.1.145': attribute type 12 has an invalid length.
[   95.856610][ T6383] netlink: 120 bytes leftover after parsing attributes in process `syz.1.145'.
[   95.879572][ T6390] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.148'.
[   95.955195][ T6398] delete_channel: no stack
[   95.960005][ T6398] delete_channel: no stack
[   96.220743][ T6409] netlink: 'syz.0.155': attribute type 11 has an invalid length.
[   96.271472][ T6408] netlink: 60 bytes leftover after parsing attributes in process `syz.3.153'.
[   96.293827][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.3.153'.
[   96.330207][ T6412] netlink: 60 bytes leftover after parsing attributes in process `syz.3.153'.
[   96.578397][ T6417] netlink: 'syz.3.159': attribute type 10 has an invalid length.
[   96.601924][ T6417] netlink: 55 bytes leftover after parsing attributes in process `syz.3.159'.
[   96.907428][ T6424] netlink: 40 bytes leftover after parsing attributes in process `syz.3.161'.
[   97.975648][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   97.984640][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   97.993411][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   98.002030][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   98.009937][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   98.208461][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.173'.
[   98.316375][ T6457] syz.3.172 (6457) used obsolete PPPIOCDETACH ioctl
[   98.717257][ T6443] chnl_net:caif_netlink_parms(): no params data found
[   99.061383][ T6443] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.095895][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.116067][ T6443] bridge_slave_0: entered allmulticast mode
[   99.141788][ T6443] bridge_slave_0: entered promiscuous mode
[   99.173009][ T6443] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.200877][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.221533][ T6443] bridge_slave_1: entered allmulticast mode
[   99.248938][ T6443] bridge_slave_1: entered promiscuous mode
[   99.358573][ T6443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.390932][ T6443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.447267][ T6515] netlink: 'syz.2.189': attribute type 10 has an invalid length.
[   99.497039][ T6515] veth1_macvtap: left promiscuous mode
[   99.700100][ T6443] team0: Port device team_slave_0 added
[   99.873080][ T6443] team0: Port device team_slave_1 added
[  100.035830][ T5851] Bluetooth: hci1: command tx timeout
[  100.438973][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.463741][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.509178][ T6537] IPv6: Can't replace route, no match found
[  100.533642][ T6443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.546793][ T6443] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.563300][ T6443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.644755][ T6443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.779238][ T6543] netlink: 'syz.2.197': attribute type 17 has an invalid length.
[  100.788528][ T6543] netlink: 'syz.2.197': attribute type 16 has an invalid length.
[  100.800206][ T6545] __nla_validate_parse: 1 callbacks suppressed
[  100.800222][ T6545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.199'.
[  100.802262][ T6543] netlink: 152 bytes leftover after parsing attributes in process `syz.2.197'.
[  100.863038][ T6443] hsr_slave_0: entered promiscuous mode
[  100.876580][ T6443] hsr_slave_1: entered promiscuous mode
[  100.883150][ T6443] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.892980][ T6443] Cannot create hsr debugfs directory
[  101.882660][ T6560] netlink: 'syz.3.205': attribute type 11 has an invalid length.
[  101.899506][ T6443] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.900998][ T6560] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.205'.
[  101.936752][ T6559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  102.019081][ T6443] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.121830][ T5851] Bluetooth: hci1: command tx timeout
[  102.176759][ T6443] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.288892][ T6443] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.526816][ T6573] syz.3.209 uses obsolete (PF_INET,SOCK_PACKET)
[  102.607660][ T6575] netlink: 40 bytes leftover after parsing attributes in process `syz.2.210'.
[  102.663952][ T6443] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.696465][ T6443] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.774693][ T6443] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.798464][ T6443] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  104.194216][ T5851] Bluetooth: hci1: command tx timeout
[  104.228250][ T6443] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.253967][ T6443] 8021q: adding VLAN 0 to HW filter on device team0
[  104.311459][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.318690][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.416925][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.424507][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.614791][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'.
[  104.977975][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz.3.222'.
[  105.079532][ T6443] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.537260][ T6443] veth0_vlan: entered promiscuous mode
[  106.203661][ T6443] veth1_vlan: entered promiscuous mode
[  106.273673][ T5851] Bluetooth: hci1: command tx timeout
[  106.523822][ T6443] veth0_macvtap: entered promiscuous mode
[  106.546100][ T6443] veth1_macvtap: entered promiscuous mode
[  106.601460][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.649717][ T6443] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.676245][ T6443] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.711357][ T6443] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.744623][ T6443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.758321][ T6443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.974150][ T6662] netlink: 'syz.3.232': attribute type 16 has an invalid length.
[  107.000269][ T6661] Illegal XDP return value 3887859467 on prog  (id 154) dev N/A, expect packet loss!
[  107.093517][ T6662] netlink: 168 bytes leftover after parsing attributes in process `syz.3.232'.
[  107.113923][ T6594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.121804][ T6594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.446605][ T6589] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.475573][ T6589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.583557][ T6669] netlink: 40 bytes leftover after parsing attributes in process `syz.3.235'.
[  107.819058][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.2.237'.
[  108.316309][ T6683] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.240'.
[  108.339494][ T6594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.373307][ T6683] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.240'.
[  108.409464][ T6683] netlink: 24032 bytes leftover after parsing attributes in process `syz.2.240'.
[  108.856904][ T6594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.994199][ T6594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.315942][ T6594] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.409593][ T6693] team0: Port device team_slave_0 removed
[  109.436613][ T6693] net_ratelimit: 3320 callbacks suppressed
[  109.436631][ T6693] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  109.764145][ T6703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'.
[  109.783708][ T6594] bridge_slave_1: left allmulticast mode
[  109.789602][ T6594] bridge_slave_1: left promiscuous mode
[  109.837950][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.881015][ T6594] bridge_slave_0: left allmulticast mode
[  109.905017][ T6594] bridge_slave_0: left promiscuous mode
[  109.918062][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.944658][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  109.953825][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  109.961904][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  109.975451][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  109.986632][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  110.227162][ T6716] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.250'.
[  110.548414][ T6594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.561351][ T6594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  110.572663][ T6594] bond0 (unregistering): Released all slaves
[  110.862707][ T6720] C: renamed from team_slave_0
[  110.880241][ T6720] netlink: 'syz.3.251': attribute type 1 has an invalid length.
[  110.898882][ T6719] netlink: 'syz.4.252': attribute type 2 has an invalid length.
[  110.901694][ T6720] netlink: 152 bytes leftover after parsing attributes in process `syz.3.251'.
[  110.920022][ T6719] netlink: 'syz.4.252': attribute type 8 has an invalid length.
[  110.921869][ T6720] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  110.948216][ T6719] netlink: 132 bytes leftover after parsing attributes in process `syz.4.252'.
[  111.257162][ T6735] FAULT_INJECTION: forcing a failure.
[  111.257162][ T6735] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  111.336873][ T6735] CPU: 1 UID: 0 PID: 6735 Comm: syz.4.255 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  111.336897][ T6735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  111.336922][ T6735] Call Trace:
[  111.336929][ T6735]  <TASK>
[  111.336936][ T6735]  dump_stack_lvl+0x189/0x250
[  111.336971][ T6735]  ? irqentry_exit+0x74/0x90
[  111.336993][ T6735]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.337035][ T6735]  should_fail_ex+0x414/0x560
[  111.337061][ T6735]  _copy_from_user+0x2d/0xb0
[  111.337079][ T6735]  ___sys_sendmsg+0x158/0x2a0
[  111.337101][ T6735]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.337155][ T6735]  ? __fget_files+0x2a/0x420
[  111.337174][ T6735]  ? __fget_files+0x3a0/0x420
[  111.337203][ T6735]  __x64_sys_sendmsg+0x19b/0x260
[  111.337224][ T6735]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  111.337254][ T6735]  ? irqentry_exit_to_user_mode+0xd1/0x120
[  111.337286][ T6735]  ? do_syscall_64+0xbe/0x3b0
[  111.337311][ T6735]  do_syscall_64+0xfa/0x3b0
[  111.337332][ T6735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.337348][ T6735]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  111.337364][ T6735]  ? clear_bhb_loop+0x60/0xb0
[  111.337384][ T6735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.337400][ T6735] RIP: 0033:0x7fc17678e929
[  111.337419][ T6735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.337432][ T6735] RSP: 002b:00007fc1745f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.337450][ T6735] RAX: ffffffffffffffda RBX: 00007fc1769b5fa0 RCX: 00007fc17678e929
[  111.337462][ T6735] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  111.337473][ T6735] RBP: 00007fc1745f6090 R08: 0000000000000000 R09: 0000000000000000
[  111.337483][ T6735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  111.337492][ T6735] R13: 0000000000000000 R14: 00007fc1769b5fa0 R15: 00007fff3a7a06d8
[  111.337520][ T6735]  </TASK>
[  111.809253][ T6594] hsr_slave_0: left promiscuous mode
[  112.039389][ T5845] Bluetooth: hci1: command tx timeout
[  112.617348][ T6594] hsr_slave_1: left promiscuous mode
[  112.701840][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.712257][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.777025][ T6594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.804331][ T6594] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.901668][ T6594] veth1_macvtap: left promiscuous mode
[  112.917986][ T6594] veth0_macvtap: left promiscuous mode
[  112.928189][ T6594] veth1_vlan: left promiscuous mode
[  112.939913][ T6594] veth0_vlan: left promiscuous mode
[  112.948309][ T6556] syz.0.202 (6556) used greatest stack depth: 19536 bytes left
[  113.058454][ T6762] netlink: 40 bytes leftover after parsing attributes in process `syz.0.263'.
[  113.390125][ T6766] netlink: 'syz.4.265': attribute type 12 has an invalid length.
[  113.398309][ T6766] netlink: 14585 bytes leftover after parsing attributes in process `syz.4.265'.
[  113.661908][ T6594] team0 (unregistering): Port device team_slave_1 removed
[  113.738338][ T6594] team0 (unregistering): Port device team_slave_0 removed
[  114.124728][ T5845] Bluetooth: hci1: command tx timeout
[  114.645926][ T6777] FAULT_INJECTION: forcing a failure.
[  114.645926][ T6777] name failslab, interval 1, probability 0, space 0, times 1
[  114.659474][ T6777] CPU: 0 UID: 0 PID: 6777 Comm: syz.3.269 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  114.659496][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  114.659506][ T6777] Call Trace:
[  114.659513][ T6777]  <TASK>
[  114.659520][ T6777]  dump_stack_lvl+0x189/0x250
[  114.659549][ T6777]  ? __pfx____ratelimit+0x10/0x10
[  114.659569][ T6777]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.659591][ T6777]  ? __pfx__printk+0x10/0x10
[  114.659623][ T6777]  ? __pfx___might_resched+0x10/0x10
[  114.659645][ T6777]  should_fail_ex+0x414/0x560
[  114.659673][ T6777]  should_failslab+0xa8/0x100
[  114.659696][ T6777]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  114.659714][ T6777]  ? __alloc_skb+0x112/0x2d0
[  114.659736][ T6777]  __alloc_skb+0x112/0x2d0
[  114.659757][ T6777]  netlink_sendmsg+0x5c6/0xb30
[  114.659787][ T6777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.659807][ T6777]  ? aa_sock_msg_perm+0x94/0x160
[  114.659831][ T6777]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  114.659851][ T6777]  ? __pfx_netlink_sendmsg+0x10/0x10
[  114.659870][ T6777]  __sock_sendmsg+0x21c/0x270
[  114.659896][ T6777]  ____sys_sendmsg+0x505/0x830
[  114.659921][ T6777]  ? __pfx_____sys_sendmsg+0x10/0x10
[  114.659951][ T6777]  ? import_iovec+0x74/0xa0
[  114.659974][ T6777]  ___sys_sendmsg+0x21f/0x2a0
[  114.659996][ T6777]  ? __pfx____sys_sendmsg+0x10/0x10
[  114.660040][ T6777]  ? __fget_files+0x2a/0x420
[  114.660075][ T6777]  ? __fget_files+0x2a/0x420
[  114.660093][ T6777]  ? __fget_files+0x3a0/0x420
[  114.660125][ T6777]  __x64_sys_sendmsg+0x19b/0x260
[  114.660148][ T6777]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  114.660196][ T6777]  do_syscall_64+0xfa/0x3b0
[  114.660219][ T6777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.660234][ T6777]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  114.660250][ T6777]  ? clear_bhb_loop+0x60/0xb0
[  114.660271][ T6777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.660287][ T6777] RIP: 0033:0x7f6d1998e929
[  114.660302][ T6777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.660315][ T6777] RSP: 002b:00007f6d1a828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  114.660332][ T6777] RAX: ffffffffffffffda RBX: 00007f6d19bb5fa0 RCX: 00007f6d1998e929
[  114.660344][ T6777] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  114.660355][ T6777] RBP: 00007f6d1a828090 R08: 0000000000000000 R09: 0000000000000000
[  114.660363][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  114.660372][ T6777] R13: 0000000000000000 R14: 00007f6d19bb5fa0 R15: 00007ffdbc589808
[  114.660402][ T6777]  </TASK>
[  114.667149][ T6707] chnl_net:caif_netlink_parms(): no params data found
[  114.945246][ T6781] netlink: 60 bytes leftover after parsing attributes in process `syz.0.270'.
[  115.317712][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.329389][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.340930][ T6707] bridge_slave_0: entered allmulticast mode
[  115.351971][ T6707] bridge_slave_0: entered promiscuous mode
[  115.385861][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.411756][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.443546][ T6707] bridge_slave_1: entered allmulticast mode
[  115.491788][ T6802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.277'.
[  115.517116][ T6707] bridge_slave_1: entered promiscuous mode
[  115.690254][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.731139][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.968143][ T6707] team0: Port device team_slave_0 added
[  116.045917][ T6707] team0: Port device team_slave_1 added
[  116.215153][ T5845] Bluetooth: hci1: command tx timeout
[  116.287168][ T6821] netlink: 'syz.4.282': attribute type 19 has an invalid length.
[  116.409239][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.428279][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.563511][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.649094][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.663636][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.720976][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.889067][ T6840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.289'.
[  116.942731][ T6707] hsr_slave_0: entered promiscuous mode
[  116.959640][ T6707] hsr_slave_1: entered promiscuous mode
[  116.975687][ T6844] netlink: 'syz.0.291': attribute type 27 has an invalid length.
[  116.981094][ T6707] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  116.992168][ T6844] netlink: 'syz.0.291': attribute type 3 has an invalid length.
[  117.000810][ T6844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.291'.
[  117.010324][ T6707] Cannot create hsr debugfs directory
[  117.246452][ T6855] FAULT_INJECTION: forcing a failure.
[  117.246452][ T6855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  117.267606][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.0.295 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  117.267631][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  117.267642][ T6855] Call Trace:
[  117.267649][ T6855]  <TASK>
[  117.267657][ T6855]  dump_stack_lvl+0x189/0x250
[  117.267685][ T6855]  ? __pfx____ratelimit+0x10/0x10
[  117.267706][ T6855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  117.267727][ T6855]  ? __pfx__printk+0x10/0x10
[  117.267742][ T6855]  ? __might_fault+0xb0/0x130
[  117.267769][ T6855]  should_fail_ex+0x414/0x560
[  117.267796][ T6855]  _copy_from_iter+0x1db/0x16f0
[  117.267830][ T6855]  ? __pfx__copy_from_iter+0x10/0x10
[  117.267854][ T6855]  ? __build_skb_around+0x257/0x3e0
[  117.267874][ T6855]  ? netlink_sendmsg+0x642/0xb30
[  117.267889][ T6855]  ? skb_put+0x11b/0x210
[  117.267908][ T6855]  netlink_sendmsg+0x6b2/0xb30
[  117.267932][ T6855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.267951][ T6855]  ? aa_sock_msg_perm+0x94/0x160
[  117.267974][ T6855]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  117.267995][ T6855]  ? __pfx_netlink_sendmsg+0x10/0x10
[  117.268012][ T6855]  __sock_sendmsg+0x21c/0x270
[  117.268037][ T6855]  ____sys_sendmsg+0x505/0x830
[  117.268061][ T6855]  ? __pfx_____sys_sendmsg+0x10/0x10
[  117.268089][ T6855]  ? import_iovec+0x74/0xa0
[  117.268110][ T6855]  ___sys_sendmsg+0x21f/0x2a0
[  117.268131][ T6855]  ? __pfx____sys_sendmsg+0x10/0x10
[  117.268154][ T6855]  ? perf_trace_preemptirq_template+0x280/0x340
[  117.268220][ T6855]  __x64_sys_sendmsg+0x19b/0x260
[  117.268242][ T6855]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  117.268269][ T6855]  ? __pfx_ksys_write+0x10/0x10
[  117.268292][ T6855]  ? do_syscall_64+0xbe/0x3b0
[  117.268323][ T6855]  do_syscall_64+0xfa/0x3b0
[  117.268345][ T6855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.268361][ T6855]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  117.268377][ T6855]  ? clear_bhb_loop+0x60/0xb0
[  117.268398][ T6855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  117.268413][ T6855] RIP: 0033:0x7f088178e929
[  117.268428][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  117.268441][ T6855] RSP: 002b:00007f087f5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  117.268458][ T6855] RAX: ffffffffffffffda RBX: 00007f08819b5fa0 RCX: 00007f088178e929
[  117.268471][ T6855] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  117.268481][ T6855] RBP: 00007f087f5f6090 R08: 0000000000000000 R09: 0000000000000000
[  117.268491][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  117.268501][ T6855] R13: 0000000000000000 R14: 00007f08819b5fa0 R15: 00007ffcb3fed708
[  117.268528][ T6855]  </TASK>
[  117.501676][ T6863] netlink: 'syz.4.299': attribute type 2 has an invalid length.
[  117.812707][ T6876] netlink: 40 bytes leftover after parsing attributes in process `syz.4.303'.
[  118.273307][ T5845] Bluetooth: hci1: command tx timeout
[  118.296901][ T6892] FAULT_INJECTION: forcing a failure.
[  118.296901][ T6892] name failslab, interval 1, probability 0, space 0, times 0
[  118.329006][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.2.311 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  118.329031][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  118.329041][ T6892] Call Trace:
[  118.329048][ T6892]  <TASK>
[  118.329056][ T6892]  dump_stack_lvl+0x189/0x250
[  118.329085][ T6892]  ? __pfx____ratelimit+0x10/0x10
[  118.329107][ T6892]  ? __pfx_dump_stack_lvl+0x10/0x10
[  118.329131][ T6892]  ? __pfx__printk+0x10/0x10
[  118.329158][ T6892]  ? ref_tracker_alloc+0x318/0x460
[  118.329184][ T6892]  should_fail_ex+0x414/0x560
[  118.329212][ T6892]  should_failslab+0xa8/0x100
[  118.329235][ T6892]  kmem_cache_alloc_noprof+0x73/0x3c0
[  118.329250][ T6892]  ? skb_clone+0x212/0x3a0
[  118.329274][ T6892]  skb_clone+0x212/0x3a0
[  118.329317][ T6892]  __netlink_deliver_tap+0x404/0x850
[  118.329351][ T6892]  ? netlink_deliver_tap+0x2e/0x1b0
[  118.329370][ T6892]  netlink_deliver_tap+0x19c/0x1b0
[  118.329389][ T6892]  netlink_unicast+0x72f/0x8d0
[  118.329437][ T6892]  netlink_sendmsg+0x805/0xb30
[  118.329527][ T6892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.329568][ T6892]  ? aa_sock_msg_perm+0x94/0x160
[  118.329593][ T6892]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  118.329623][ T6892]  ? __pfx_netlink_sendmsg+0x10/0x10
[  118.329640][ T6892]  __sock_sendmsg+0x21c/0x270
[  118.329668][ T6892]  ____sys_sendmsg+0x505/0x830
[  118.329694][ T6892]  ? __pfx_____sys_sendmsg+0x10/0x10
[  118.329725][ T6892]  ? import_iovec+0x74/0xa0
[  118.329748][ T6892]  ___sys_sendmsg+0x21f/0x2a0
[  118.329770][ T6892]  ? __pfx____sys_sendmsg+0x10/0x10
[  118.329832][ T6892]  ? __fget_files+0x2a/0x420
[  118.329850][ T6892]  ? __fget_files+0x3a0/0x420
[  118.329883][ T6892]  __x64_sys_sendmsg+0x19b/0x260
[  118.329905][ T6892]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  118.329956][ T6892]  do_syscall_64+0xfa/0x3b0
[  118.329979][ T6892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.329995][ T6892]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  118.330012][ T6892]  ? clear_bhb_loop+0x60/0xb0
[  118.330034][ T6892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  118.330050][ T6892] RIP: 0033:0x7f414e38e929
[  118.330073][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  118.330089][ T6892] RSP: 002b:00007f414f17c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  118.330107][ T6892] RAX: ffffffffffffffda RBX: 00007f414e5b5fa0 RCX: 00007f414e38e929
[  118.330119][ T6892] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  118.330130][ T6892] RBP: 00007f414f17c090 R08: 0000000000000000 R09: 0000000000000000
[  118.330140][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  118.330149][ T6892] R13: 0000000000000000 R14: 00007f414e5b5fa0 R15: 00007ffcfcca5e88
[  118.330182][ T6892]  </TASK>
[  118.673083][ T6707] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  118.708573][ T6707] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  118.740318][ T6707] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  118.750044][ T6900] netlink: 'syz.0.313': attribute type 40 has an invalid length.
[  118.764017][ T6902] netlink: 'syz.2.315': attribute type 8 has an invalid length.
[  118.772081][ T6902] netlink: 156 bytes leftover after parsing attributes in process `syz.2.315'.
[  118.785939][ T6707] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  118.879707][ T6899] ªªªªªª: renamed from vlan0 (while UP)
[  118.912376][ T6906] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.316'.
[  119.008807][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.057521][ T6707] 8021q: adding VLAN 0 to HW filter on device team0
[  119.109774][ T6589] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.117183][ T6589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.160188][ T6589] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.167435][ T6589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.501224][ T6931] FAULT_INJECTION: forcing a failure.
[  119.501224][ T6931] name failslab, interval 1, probability 0, space 0, times 0
[  119.516437][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.0.325 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  119.516461][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.516471][ T6931] Call Trace:
[  119.516478][ T6931]  <TASK>
[  119.516485][ T6931]  dump_stack_lvl+0x189/0x250
[  119.516513][ T6931]  ? __pfx____ratelimit+0x10/0x10
[  119.516535][ T6931]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.516558][ T6931]  ? __pfx__printk+0x10/0x10
[  119.516583][ T6931]  ? __pfx___might_resched+0x10/0x10
[  119.516598][ T6931]  ? fs_reclaim_acquire+0x7d/0x100
[  119.516624][ T6931]  should_fail_ex+0x414/0x560
[  119.516650][ T6931]  should_failslab+0xa8/0x100
[  119.516670][ T6931]  __kmalloc_cache_noprof+0x70/0x3d0
[  119.516685][ T6931]  ? genl_start+0x1c9/0x6c0
[  119.516710][ T6931]  genl_start+0x1c9/0x6c0
[  119.516729][ T6931]  ? netlink_lookup+0x30/0x200
[  119.516753][ T6931]  __netlink_dump_start+0x469/0x7e0
[  119.516786][ T6931]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  119.516811][ T6931]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  119.516831][ T6931]  ? genl_get_cmd+0x7d9/0x910
[  119.516856][ T6931]  ? __pfx_genl_start+0x10/0x10
[  119.516873][ T6931]  ? __pfx_genl_dumpit+0x10/0x10
[  119.516886][ T6931]  ? __pfx_genl_done+0x10/0x10
[  119.516906][ T6931]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.516936][ T6931]  genl_rcv_msg+0x5da/0x790
[  119.516964][ T6931]  ? __pfx_genl_rcv_msg+0x10/0x10
[  119.516981][ T6931]  ? ref_tracker_free+0x63a/0x7d0
[  119.517003][ T6931]  ? __pfx_nl80211_dump_interface+0x10/0x10
[  119.517026][ T6931]  ? __pfx_ref_tracker_free+0x10/0x10
[  119.517060][ T6931]  netlink_rcv_skb+0x208/0x470
[  119.517078][ T6931]  ? __pfx_genl_rcv_msg+0x10/0x10
[  119.517100][ T6931]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  119.517135][ T6931]  ? down_read+0x1ad/0x2e0
[  119.517160][ T6931]  genl_rcv+0x28/0x40
[  119.517179][ T6931]  netlink_unicast+0x75b/0x8d0
[  119.517214][ T6931]  netlink_sendmsg+0x805/0xb30
[  119.517242][ T6931]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.517270][ T6931]  ? __pfx_netlink_sendmsg+0x10/0x10
[  119.517288][ T6931]  __sock_sendmsg+0x21c/0x270
[  119.517314][ T6931]  ____sys_sendmsg+0x505/0x830
[  119.517338][ T6931]  ? __pfx_____sys_sendmsg+0x10/0x10
[  119.517368][ T6931]  ? import_iovec+0x74/0xa0
[  119.517396][ T6931]  ___sys_sendmsg+0x21f/0x2a0
[  119.517417][ T6931]  ? __pfx____sys_sendmsg+0x10/0x10
[  119.517441][ T6931]  ? perf_trace_preemptirq_template+0x280/0x340
[  119.517499][ T6931]  ? __x64_sys_sendmsg+0x180/0x260
[  119.517525][ T6931]  __x64_sys_sendmsg+0x19b/0x260
[  119.517546][ T6931]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  119.517575][ T6931]  ? __pfx_ksys_write+0x10/0x10
[  119.517599][ T6931]  ? do_syscall_64+0xbe/0x3b0
[  119.517624][ T6931]  do_syscall_64+0xfa/0x3b0
[  119.517645][ T6931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.517661][ T6931]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  119.517677][ T6931]  ? clear_bhb_loop+0x60/0xb0
[  119.517698][ T6931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.517714][ T6931] RIP: 0033:0x7f088178e929
[  119.517729][ T6931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.517742][ T6931] RSP: 002b:00007f087f5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.517761][ T6931] RAX: ffffffffffffffda RBX: 00007f08819b5fa0 RCX: 00007f088178e929
[  119.517772][ T6931] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  119.517783][ T6931] RBP: 00007f087f5f6090 R08: 0000000000000000 R09: 0000000000000000
[  119.517793][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.517803][ T6931] R13: 0000000000000000 R14: 00007f08819b5fa0 R15: 00007ffcb3fed708
[  119.517833][ T6931]  </TASK>
[  119.885842][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.110897][ T6939] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.327'.
[  120.178206][ T6707] veth0_vlan: entered promiscuous mode
[  120.259682][ T6707] veth1_vlan: entered promiscuous mode
[  120.591256][ T6707] veth0_macvtap: entered promiscuous mode
[  120.897344][ T6707] veth1_macvtap: entered promiscuous mode
[  121.032492][ T6949] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.328'.
[  121.087832][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.149522][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.171590][ T6707] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.183113][ T6707] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.195501][ T6707] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.206526][ T6707] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.388845][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.421036][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.545263][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.553123][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.671347][ T6966] FAULT_INJECTION: forcing a failure.
[  121.671347][ T6966] name failslab, interval 1, probability 0, space 0, times 0
[  121.723438][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.4.338 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  121.723463][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  121.723473][ T6966] Call Trace:
[  121.723480][ T6966]  <TASK>
[  121.723488][ T6966]  dump_stack_lvl+0x189/0x250
[  121.723516][ T6966]  ? __pfx____ratelimit+0x10/0x10
[  121.723536][ T6966]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.723559][ T6966]  ? __pfx__printk+0x10/0x10
[  121.723583][ T6966]  ? __pfx___might_resched+0x10/0x10
[  121.723604][ T6966]  should_fail_ex+0x414/0x560
[  121.723632][ T6966]  should_failslab+0xa8/0x100
[  121.723654][ T6966]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  121.723674][ T6966]  ? __alloc_skb+0x112/0x2d0
[  121.723695][ T6966]  __alloc_skb+0x112/0x2d0
[  121.723716][ T6966]  netlink_dump+0x22b/0xe20
[  121.723746][ T6966]  ? __pfx_netlink_dump+0x10/0x10
[  121.723777][ T6966]  ? genl_start+0x499/0x6c0
[  121.723806][ T6966]  __netlink_dump_start+0x5cb/0x7e0
[  121.723840][ T6966]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  121.723865][ T6966]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  121.723884][ T6966]  ? genl_get_cmd+0x7d9/0x910
[  121.723910][ T6966]  ? __pfx_genl_start+0x10/0x10
[  121.723927][ T6966]  ? __pfx_genl_dumpit+0x10/0x10
[  121.723944][ T6966]  ? __pfx_genl_done+0x10/0x10
[  121.723980][ T6966]  genl_rcv_msg+0x5da/0x790
[  121.724007][ T6966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  121.724026][ T6966]  ? __pfx_nl80211_dump_interface+0x10/0x10
[  121.724052][ T6966]  ? perf_trace_preemptirq_template+0x280/0x340
[  121.724083][ T6966]  netlink_rcv_skb+0x208/0x470
[  121.724101][ T6966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  121.724121][ T6966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  121.724133][ T6966]  ? irqentry_exit+0x74/0x90
[  121.724169][ T6966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  121.724199][ T6966]  genl_rcv+0x28/0x40
[  121.724217][ T6966]  netlink_unicast+0x75b/0x8d0
[  121.724252][ T6966]  netlink_sendmsg+0x805/0xb30
[  121.724279][ T6966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.724298][ T6966]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.724317][ T6966]  ? aa_sock_msg_perm+0x94/0x160
[  121.724341][ T6966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  121.724363][ T6966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.724381][ T6966]  __sock_sendmsg+0x21c/0x270
[  121.724407][ T6966]  ____sys_sendmsg+0x505/0x830
[  121.724431][ T6966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  121.724460][ T6966]  ? import_iovec+0x74/0xa0
[  121.724482][ T6966]  ___sys_sendmsg+0x21f/0x2a0
[  121.724503][ T6966]  ? __pfx____sys_sendmsg+0x10/0x10
[  121.724562][ T6966]  ? __fget_files+0x2a/0x420
[  121.724580][ T6966]  ? __fget_files+0x3a0/0x420
[  121.724611][ T6966]  __x64_sys_sendmsg+0x19b/0x260
[  121.724632][ T6966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  121.724678][ T6966]  do_syscall_64+0xfa/0x3b0
[  121.724701][ T6966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.724717][ T6966]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  121.724734][ T6966]  ? clear_bhb_loop+0x60/0xb0
[  121.724755][ T6966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.724771][ T6966] RIP: 0033:0x7fc17678e929
[  121.724786][ T6966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.724799][ T6966] RSP: 002b:00007fc1745f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.724817][ T6966] RAX: ffffffffffffffda RBX: 00007fc1769b5fa0 RCX: 00007fc17678e929
[  121.724830][ T6966] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  121.724841][ T6966] RBP: 00007fc1745f6090 R08: 0000000000000000 R09: 0000000000000000
[  121.724851][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.724861][ T6966] R13: 0000000000000000 R14: 00007fc1769b5fa0 R15: 00007fff3a7a06d8
[  121.724890][ T6966]  </TASK>
[  122.176287][ T6971] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.340'.
[  122.292832][ T6977] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.342'.
[  122.591637][ T6984] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.344'.
[  123.185076][ T2978] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.502202][ T7010] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.353'.
[  123.677674][ T2978] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.700098][ T7015] netlink: 40 bytes leftover after parsing attributes in process `syz.0.358'.
[  123.722273][ T7016] netlink: 'syz.4.357': attribute type 10 has an invalid length.
[  123.774134][ T7016] batman_adv: batadv0: Adding interface: netdevsim0
[  123.787007][ T7016] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  123.896345][ T7016] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  123.997053][ T2978] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.126569][ T7021] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.360'.
[  124.155423][ T7028] FAULT_INJECTION: forcing a failure.
[  124.155423][ T7028] name failslab, interval 1, probability 0, space 0, times 0
[  124.208022][ T7028] CPU: 0 UID: 0 PID: 7028 Comm: syz.3.364 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  124.208047][ T7028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  124.208057][ T7028] Call Trace:
[  124.208065][ T7028]  <TASK>
[  124.208073][ T7028]  dump_stack_lvl+0x189/0x250
[  124.208100][ T7028]  ? __pfx____ratelimit+0x10/0x10
[  124.208122][ T7028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.208146][ T7028]  ? __pfx__printk+0x10/0x10
[  124.208170][ T7028]  ? __pfx___might_resched+0x10/0x10
[  124.208185][ T7028]  ? fs_reclaim_acquire+0x7d/0x100
[  124.208210][ T7028]  should_fail_ex+0x414/0x560
[  124.208238][ T7028]  should_failslab+0xa8/0x100
[  124.208259][ T7028]  __kmalloc_cache_noprof+0x70/0x3d0
[  124.208277][ T7028]  ? nl80211_dump_wiphy_parse+0xa7/0x550
[  124.208304][ T7028]  nl80211_dump_wiphy_parse+0xa7/0x550
[  124.208329][ T7028]  ? __pfx_nl80211_dump_wiphy_parse+0x10/0x10
[  124.208363][ T7028]  nl80211_dump_interface+0x110/0x6a0
[  124.208389][ T7028]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  124.208414][ T7028]  ? __build_skb_around+0x257/0x3e0
[  124.208435][ T7028]  genl_dumpit+0x10b/0x1b0
[  124.208459][ T7028]  netlink_dump+0x62d/0xe20
[  124.208487][ T7028]  ? __pfx_netlink_dump+0x10/0x10
[  124.208516][ T7028]  ? genl_start+0x499/0x6c0
[  124.208544][ T7028]  __netlink_dump_start+0x5cb/0x7e0
[  124.208578][ T7028]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  124.208603][ T7028]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  124.208622][ T7028]  ? genl_get_cmd+0x7d9/0x910
[  124.208653][ T7028]  ? __pfx_genl_start+0x10/0x10
[  124.208669][ T7028]  ? __pfx_genl_dumpit+0x10/0x10
[  124.208684][ T7028]  ? __pfx_genl_done+0x10/0x10
[  124.208719][ T7028]  genl_rcv_msg+0x5da/0x790
[  124.208747][ T7028]  ? __pfx_genl_rcv_msg+0x10/0x10
[  124.208764][ T7028]  ? ref_tracker_free+0x63a/0x7d0
[  124.208785][ T7028]  ? __pfx_nl80211_dump_interface+0x10/0x10
[  124.208808][ T7028]  ? perf_trace_lock_acquire+0xf5/0x410
[  124.208835][ T7028]  netlink_rcv_skb+0x208/0x470
[  124.208852][ T7028]  ? __pfx_genl_rcv_msg+0x10/0x10
[  124.208874][ T7028]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  124.208909][ T7028]  ? down_read+0x1ad/0x2e0
[  124.208935][ T7028]  genl_rcv+0x28/0x40
[  124.208954][ T7028]  netlink_unicast+0x75b/0x8d0
[  124.208990][ T7028]  netlink_sendmsg+0x805/0xb30
[  124.209018][ T7028]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.209039][ T7028]  ? aa_sock_msg_perm+0x94/0x160
[  124.209062][ T7028]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.209083][ T7028]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.209101][ T7028]  __sock_sendmsg+0x21c/0x270
[  124.209128][ T7028]  ____sys_sendmsg+0x505/0x830
[  124.209152][ T7028]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.209181][ T7028]  ? import_iovec+0x74/0xa0
[  124.209202][ T7028]  ___sys_sendmsg+0x21f/0x2a0
[  124.209223][ T7028]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.209245][ T7028]  ? irqentry_exit+0x74/0x90
[  124.209282][ T7028]  ? __fget_files+0x2a/0x420
[  124.209314][ T7028]  ? __fget_files+0x2a/0x420
[  124.209331][ T7028]  ? __fget_files+0x3a0/0x420
[  124.209362][ T7028]  __x64_sys_sendmsg+0x19b/0x260
[  124.209383][ T7028]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.209411][ T7028]  ? irqentry_exit_to_user_mode+0xd1/0x120
[  124.209439][ T7028]  ? do_syscall_64+0xbe/0x3b0
[  124.209464][ T7028]  do_syscall_64+0xfa/0x3b0
[  124.209486][ T7028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.209501][ T7028]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  124.209517][ T7028]  ? clear_bhb_loop+0x60/0xb0
[  124.209536][ T7028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.209551][ T7028] RIP: 0033:0x7f6d1998e929
[  124.209567][ T7028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.209579][ T7028] RSP: 002b:00007f6d1a828038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.209598][ T7028] RAX: ffffffffffffffda RBX: 00007f6d19bb5fa0 RCX: 00007f6d1998e929
[  124.209610][ T7028] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005
[  124.209620][ T7028] RBP: 00007f6d1a828090 R08: 0000000000000000 R09: 0000000000000000
[  124.209631][ T7028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.209646][ T7028] R13: 0000000000000000 R14: 00007f6d19bb5fa0 R15: 00007ffdbc589808
[  124.209674][ T7028]  </TASK>
[  124.677496][ T2978] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.699671][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  124.719743][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  124.738678][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  124.754725][ T7033] netlink: 'syz.0.365': attribute type 13 has an invalid length.
[  124.767691][ T7033] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.365'.
[  124.780227][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  124.789340][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  124.875384][ T7041] FAULT_INJECTION: forcing a failure.
[  124.875384][ T7041] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.917850][ T7041] CPU: 0 UID: 0 PID: 7041 Comm: syz.4.368 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  124.917875][ T7041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  124.917884][ T7041] Call Trace:
[  124.917891][ T7041]  <TASK>
[  124.917898][ T7041]  dump_stack_lvl+0x189/0x250
[  124.917926][ T7041]  ? __pfx____ratelimit+0x10/0x10
[  124.917948][ T7041]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.917971][ T7041]  ? __pfx__printk+0x10/0x10
[  124.917989][ T7041]  ? __might_fault+0xb0/0x130
[  124.918017][ T7041]  should_fail_ex+0x414/0x560
[  124.918043][ T7041]  _copy_from_iter+0x1db/0x16f0
[  124.918078][ T7041]  ? __pfx__copy_from_iter+0x10/0x10
[  124.918104][ T7041]  ? __build_skb_around+0x257/0x3e0
[  124.918123][ T7041]  ? netlink_sendmsg+0x642/0xb30
[  124.918138][ T7041]  ? skb_put+0x11b/0x210
[  124.918158][ T7041]  netlink_sendmsg+0x6b2/0xb30
[  124.918183][ T7041]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.918203][ T7041]  ? aa_sock_msg_perm+0x94/0x160
[  124.918226][ T7041]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  124.918248][ T7041]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.918266][ T7041]  __sock_sendmsg+0x21c/0x270
[  124.918290][ T7041]  sock_write_iter+0x258/0x330
[  124.918313][ T7041]  ? __pfx_sock_write_iter+0x10/0x10
[  124.918343][ T7041]  ? bpf_lsm_file_permission+0x9/0x20
[  124.918364][ T7041]  ? security_file_permission+0x75/0x290
[  124.918391][ T7041]  vfs_write+0x548/0xa90
[  124.918412][ T7041]  ? __pfx_sock_write_iter+0x10/0x10
[  124.918433][ T7041]  ? __pfx_vfs_write+0x10/0x10
[  124.918459][ T7041]  ? __fget_files+0x2a/0x420
[  124.918487][ T7041]  ksys_write+0x145/0x250
[  124.918507][ T7041]  ? __pfx_ksys_write+0x10/0x10
[  124.918520][ T7041]  ? rcu_is_watching+0x15/0xb0
[  124.918541][ T7041]  ? do_syscall_64+0xbe/0x3b0
[  124.918608][ T7041]  do_syscall_64+0xfa/0x3b0
[  124.918627][ T7041]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.918646][ T7041]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.918663][ T7041]  ? clear_bhb_loop+0x60/0xb0
[  124.918683][ T7041]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.918699][ T7041] RIP: 0033:0x7fc17678e929
[  124.918713][ T7041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.918726][ T7041] RSP: 002b:00007fc1745f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  124.918744][ T7041] RAX: ffffffffffffffda RBX: 00007fc1769b5fa0 RCX: 00007fc17678e929
[  124.918756][ T7041] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004
[  124.918766][ T7041] RBP: 00007fc1745f6090 R08: 0000000000000000 R09: 0000000000000000
[  124.918776][ T7041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.918786][ T7041] R13: 0000000000000000 R14: 00007fc1769b5fa0 R15: 00007fff3a7a06d8
[  124.918813][ T7041]  </TASK>
[  125.252526][ T6589] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  125.312753][ T7046] netlink: 'syz.4.373': attribute type 10 has an invalid length.
[  125.328559][ T7046] team0: Device ipvlan1 failed to register rx_handler
[  125.354225][ T6589] ------------[ cut here ]------------
[  125.361181][ T6589] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1224:5
[  125.383899][ T6589] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  125.397974][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: kworker/u8:12 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  125.397998][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.398009][ T6589] Workqueue: events_unbound cfg80211_wiphy_work
[  125.398039][ T6589] Call Trace:
[  125.398045][ T6589]  <TASK>
[  125.398053][ T6589]  dump_stack_lvl+0x189/0x250
[  125.398083][ T6589]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.398106][ T6589]  ? __pfx__printk+0x10/0x10
[  125.398139][ T6589]  ubsan_epilogue+0xa/0x40
[  125.398156][ T6589]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  125.398189][ T6589]  ieee80211_request_ibss_scan+0x600/0x8b0
[  125.398226][ T6589]  ieee80211_ibss_work+0xd85/0x1060
[  125.398247][ T6589]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.398269][ T6589]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.398288][ T6589]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.398309][ T6589]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  125.398335][ T6589]  ? skb_dequeue+0x10e/0x150
[  125.398355][ T6589]  ? ieee80211_iface_work+0xcdb/0xfe0
[  125.398379][ T6589]  ? ieee80211_iface_work+0xf39/0xfe0
[  125.398402][ T6589]  ? rcu_is_watching+0x15/0xb0
[  125.398424][ T6589]  cfg80211_wiphy_work+0x2dc/0x460
[  125.398448][ T6589]  ? process_scheduled_works+0x9ef/0x17b0
[  125.398474][ T6589]  process_scheduled_works+0xae1/0x17b0
[  125.398530][ T6589]  ? __pfx_process_scheduled_works+0x10/0x10
[  125.398571][ T6589]  worker_thread+0x8a0/0xda0
[  125.398616][ T6589]  kthread+0x70e/0x8a0
[  125.398639][ T6589]  ? __pfx_worker_thread+0x10/0x10
[  125.398654][ T6589]  ? __pfx_kthread+0x10/0x10
[  125.398675][ T6589]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.398693][ T6589]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.398711][ T6589]  ? __pfx_kthread+0x10/0x10
[  125.398731][ T6589]  ret_from_fork+0x3f9/0x770
[  125.398756][ T6589]  ? __pfx_ret_from_fork+0x10/0x10
[  125.398784][ T6589]  ? __switch_to_asm+0x39/0x70
[  125.398805][ T6589]  ? __switch_to_asm+0x33/0x70
[  125.398819][ T6589]  ? __pfx_kthread+0x10/0x10
[  125.398839][ T6589]  ret_from_fork_asm+0x1a/0x30
[  125.398874][ T6589]  </TASK>
[  125.398880][ T6589] ---[ end trace ]---
[  125.449249][ T7052] netlink: 'syz.2.371': attribute type 21 has an invalid length.
[  125.451559][ T6589] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  125.451576][ T6589] CPU: 0 UID: 0 PID: 6589 Comm: kworker/u8:12 Not tainted 6.15.0-syzkaller-g3713b584dabb #0 PREEMPT(full) 
[  125.451597][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.451609][ T6589] Workqueue: events_unbound cfg80211_wiphy_work
[  125.451640][ T6589] Call Trace:
[  125.451648][ T6589]  <TASK>
[  125.451655][ T6589]  dump_stack_lvl+0x99/0x250
[  125.451682][ T6589]  ? __asan_memcpy+0x40/0x70
[  125.451706][ T6589]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.451730][ T6589]  ? __pfx__printk+0x10/0x10
[  125.451762][ T6589]  panic+0x2db/0x790
[  125.451799][ T6589]  ? __pfx_panic+0x10/0x10
[  125.451820][ T6589]  ? _printk+0xcf/0x120
[  125.451844][ T6589]  ? __pfx__printk+0x10/0x10
[  125.451872][ T6589]  check_panic_on_warn+0x89/0xb0
[  125.451897][ T6589]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  125.451930][ T6589]  ieee80211_request_ibss_scan+0x600/0x8b0
[  125.451968][ T6589]  ieee80211_ibss_work+0xd85/0x1060
[  125.451988][ T6589]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.452011][ T6589]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.452032][ T6589]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.452054][ T6589]  ? __pfx_ieee80211_ibss_work+0x10/0x10
[  125.452080][ T6589]  ? skb_dequeue+0x10e/0x150
[  125.452102][ T6589]  ? ieee80211_iface_work+0xcdb/0xfe0
[  125.452127][ T6589]  ? ieee80211_iface_work+0xf39/0xfe0
[  125.452151][ T6589]  ? rcu_is_watching+0x15/0xb0
[  125.452173][ T6589]  cfg80211_wiphy_work+0x2dc/0x460
[  125.452199][ T6589]  ? process_scheduled_works+0x9ef/0x17b0
[  125.452226][ T6589]  process_scheduled_works+0xae1/0x17b0
[  125.452279][ T6589]  ? __pfx_process_scheduled_works+0x10/0x10
[  125.452321][ T6589]  worker_thread+0x8a0/0xda0
[  125.452365][ T6589]  kthread+0x70e/0x8a0
[  125.452388][ T6589]  ? __pfx_worker_thread+0x10/0x10
[  125.452405][ T6589]  ? __pfx_kthread+0x10/0x10
[  125.452426][ T6589]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.452446][ T6589]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.452465][ T6589]  ? __pfx_kthread+0x10/0x10
[  125.452486][ T6589]  ret_from_fork+0x3f9/0x770
[  125.452512][ T6589]  ? __pfx_ret_from_fork+0x10/0x10
[  125.452541][ T6589]  ? __switch_to_asm+0x39/0x70
[  125.452556][ T6589]  ? __switch_to_asm+0x33/0x70
[  125.452572][ T6589]  ? __pfx_kthread+0x10/0x10
[  125.452593][ T6589]  ret_from_fork_asm+0x1a/0x30
[  125.452627][ T6589]  </TASK>
[  125.454903][ T6589] Kernel Offset: disabled