last executing test programs:

23.132399711s ago: executing program 3 (id=3563):
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10049, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x90)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r3 = socket$kcm(0x11, 0x2, 0x0)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8)
close(r4)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000008f00000000000000050000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000001850000009a000000bf0900000000000055090100000700009500000000000000bf91000000000000b6020000010000008500000085000000b7000000"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="bf16000000000000b70700000200f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6879fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025f2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da083e8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb5ff0f000002ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c22e46af480c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f98638009c142751518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c1b9a8a14604fe52837a19dd6952fe2724c0105ab158a54a4a23ff0f4bc43c0e0e426e51258e40bb4b68ff4e3a8fe314a0"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x0, @perf_bp={0x0, 0x5}, 0x104002, 0x6c16, 0x0, 0x0, 0x6f00000000000, 0xffffffff, 0x0, 0x0, 0xffffbffe, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080))
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r6], 0x0}, 0x94)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x1, 0xfffffffffffffe96, 0x0, 0x11, 0x2, 0x0, 0x0, 0x20004, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106a5, 0x8, 0x200, 0xf, 0xfffffffffffffffe, 0x80002, 0x0, 0x0, 0xfffffffe, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8)

22.105443651s ago: executing program 3 (id=3569):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x200000, 0x3fff7ffd}, 0x10122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x6, &(0x7f0000000040)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340))
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x22, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffc3, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x24}, 0x94)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000010000000000000000000000000600000000000000bb5c0000"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps    \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100), 0x8)

21.163555826s ago: executing program 1 (id=3575):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}]}, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x34}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0xfffffffd, 0x3, 0x3, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
r3 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x8074, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r4, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000280)={0x4, 0x80, 0x9d, 0xf6, 0x8, 0x80, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0x7fffffff}, 0x4030, 0x200, 0x0, 0x0, 0x6, 0x5, 0x3ff, 0x0, 0x0, 0x0, 0x10000})
sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040004000000002000000000000000000000300000000030000000200000000000000000000000000000105000000200000000000000000000003000000000228000002000000"], 0x0, 0x5a}, 0x28)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)=0x20)
bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r1}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a7e6dc9ab1e7b00ff000000007110bf00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
recvmsg$unix(r5, 0x0, 0x81)

20.833212629s ago: executing program 0 (id=3578):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

18.952442578s ago: executing program 3 (id=3579):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xe, 0x0, 0x0, 0x0, 0xb073, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x822, 0x0, @perf_config_ext={0x0, 0x6}, 0x100008, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x40, 0x0, 0x0, 0x40000004, 0xa021, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x240, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000002000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000080)="b5fa4fc50811204300ff970386780d376e4e7719", 0x20}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
sendmsg$sock(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840), 0x28}, 0x400c0)
close(r0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0x29, 0x0, 0x5000)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2002)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x500}, 0x57)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.864535614s ago: executing program 0 (id=3581):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/670], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x55) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fc7fffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009c34c9637c2bf0296558b3bbaa976deb35f5"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={r5, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000f40)=[0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x82, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f00000010c0), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0) (async)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_lsm={0x1d, 0x18, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x76, 0xb6, &(0x7f0000000e80)=""/182, 0x41100, 0x72, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000012c0)={0x2, 0xb, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000015c0)=[r8, r4, r4, r9, r4], &(0x7f0000001600)=[{0x4, 0x4, 0xc, 0x4}, {0x1, 0x4, 0x0, 0x1}], 0x10, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001740)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000001780)=[0x0], &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0], <r10=>0x0, 0x40, &(0x7f0000001800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001840), &(0x7f0000001880), 0x8, 0x9f, 0x8, 0x8, &(0x7f00000018c0)}}, 0x10) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="7123069bf516a810795ef87b649c0472f8f6d2148dcf195768fc1bd21634595a15634c6644a2a1b31a93af205a1e4d65b950ad49070000000000000000005f3f6c196be3025c91a9eeafe9854fd2135010a088136dd6cdd83ff246d3", &(0x7f0000000080), 0x101, r11}, 0x38) (async)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@bloom_filter={0x1e, 0x69, 0x8001, 0xd, 0x2001, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x50) (async)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x25, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x50) (async)
r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b40)={0x0, 0x1, 0x8}, 0xc) (async)
r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001bc0)=@o_path={&(0x7f0000001b80)='./file0\x00', 0x0, 0x6000, r0}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x8, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0xf, 0x1, 0xf, 0xffffffffffffffc0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}, @jmp={0x5, 0x0, 0xd, 0x6, 0x7, 0x20, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x9, 0x1000, &(0x7f00000006c0)=""/4096, 0x40f00, 0x17, '\x00', r6, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000016c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000001700)={0x5, 0x10, 0x0, 0x2}, 0x10, r10, 0xffffffffffffffff, 0x2, &(0x7f0000001c00)=[r11, r12, r13, r14, r15], &(0x7f0000001c40)=[{0x5, 0x1, 0xc, 0x6}, {0x0, 0x1, 0xa, 0x2}], 0x10, 0x8}, 0x94)

18.863671824s ago: executing program 1 (id=3583):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@float={0x8, 0x0, 0x0, 0x10, 0xc}, @func={0xb, 0x0, 0x0, 0xc, 0x1}, @restrict={0x3}]}, {0x0, [0x61, 0x30, 0x0, 0x30, 0x30]}}, &(0x7f0000000200)=""/6, 0x43, 0x6, 0x1, 0x9}, 0x28)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0xe0000000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0xffffffffffffffa2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc}, 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r5, 0x6, 0x17, &(0x7f0000000200)=r5, 0x21)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f91124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x100, 0x0, r1, 0x2, '\x00', r2, r4, 0x3, 0x2, 0x4}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

18.796649099s ago: executing program 0 (id=3584):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b000000000000a6020000f8ffffffb716000008900000b703000000000000850000003300000095000000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9}, 0x48)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20)

18.792721309s ago: executing program 2 (id=3585):
r0 = socket$kcm(0xa, 0x6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000)=r1, 0x4)
r2 = getpid()
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4001, 0x400, 0x98, 0x5, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x8}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000100)=0x8000000000000000, 0x12)
ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x0)
r9 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f0000000100)=r9, 0x4)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10)
r11 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89ed, 0x0)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000500)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000580)='GPL\x00', 0x4b77, 0xe3, &(0x7f00000006c0)=""/227, 0x40f00, 0x1, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000007c0)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000800)=[{0x2, 0x3, 0x6, 0x7}, {0x3, 0x4, 0xa, 0x4}], 0x10, 0x5}, 0x94)
r13 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0xfe33)
r14 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x2940, 0x0)
sendmsg$unix(r10, &(0x7f0000000c00)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000280)="b2161ea6c85f2784880b182fc3ca50da6f989fcd7f8e39d8e43d9367c7c819", 0x1f}, {&(0x7f00000002c0)="f7135c22e6bfd8e491875240717dfbadb4e07caa5b72581641343ec35ac95c47536682d6260b94a1c02c14ee05eb5cb6ecdbdadf0acc3942217d767c4f862afc780dc06433e498da6150bc761035db5db27ed5a7e736462a65ca36ee2ece2d5c45bdfa3153d5c1fd2a5dfd8254713bf72d4f1d2caed602b6953b96b59e85b523a57c2da68ea1d9d88daf4bf99a49a40f9e900815d3126504ee7f9b1844027888355e1c111dcb4113ca90844b8a786daba223e67c120cf5284d5bdde910b0afd336a53b11d9df24a4fc9f0c1c5dd80ae36a4a63449297e2bb1590092f0633418dc6a0db712f10fdb58167a6b03d730f5dc25f71a7fc1f", 0xf6}, {&(0x7f00000003c0)="b2dabee5af9a3c49fa746d67dd6a98127873903d3c88b1989aa640c673ba050a9f379682e1e1ec26d48c1740e7a03f21eb6f3756d28ebbc75cf7b3196d93c36bf4655bb610c86827ba597ea6e726466d76b6cd0bddf7c9b4f02cb4c2e773ee17f3c7f41e32f63d47f168fbe9cb32ce5ee49e9a7eee88636b3d10ec14ff24ad8717761f8f9501fc1c5bf06637c5dab8bde219774eb44b9eb1b181ccf1cc4cf03880937c61cfac39a90dee298a1b659741feb182e020e0ce7de68a1ac8bcdf6b3bd0c2b28098f5ec0dbabd56b8122fd2fdea", 0xd1}], 0x3, &(0x7f0000000ac0)=[@rights={{0x30, 0x1, 0x1, [r5, r11, r12, r6, r0, r3, r6, r8]}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r13]}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r5, r14, r8, r5, r3, r0, r5]}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x108, 0x8000}, 0x4010)
r15 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

18.720448024s ago: executing program 1 (id=3586):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, 0x0, 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r1, 0x0}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e64, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200088c0)
close(r4)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r5, 0x0, 0x0}, 0x20)
socket$kcm(0x11, 0x3, 0x300)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000003c0)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)

18.412367875s ago: executing program 0 (id=3587):
r0 = socket$kcm(0xa, 0x2, 0x88)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x11, 0x0, 0x4)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000005c0)={r3, r5})
sendmsg$kcm(r4, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0x11}, 0x80, 0x0}, 0x24000844)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xa, 0x6c9, 0x3, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', r6, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1k\xfc\x9e\x98\xac;#\xdb\x0f!/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7", @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='-@[\x00')
r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}})
setsockopt$sock_attach_bpf(r0, 0x88, 0xa, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x10, @remote, 0x5}, 0x80, 0x0}, 0x40)

18.079992678s ago: executing program 2 (id=3588):
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x40, 0x0, 0x9, 0x0, 0x2, 0x58221, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffdfffa, 0x2, @perf_config_ext={0x4, 0x2}, 0x106a4f, 0x1, 0x6, 0x1, 0x2, 0xffc, 0x4, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
close(0x3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) (async)

18.036048251s ago: executing program 1 (id=3589):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6}, 0x94) (async)
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x73)
setsockopt$sock_attach_bpf(r2, 0x29, 0x1f, 0x0, 0x19) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000a0000001001000001"], 0x18}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000180)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
close(r3) (async)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000100000d0200000000000000000000000000000000000004"], &(0x7f0000000080)=""/230, 0x3a, 0xe6, 0x1}, 0x28) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0)

17.880792081s ago: executing program 3 (id=3590):
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

17.878762892s ago: executing program 2 (id=3591):
r0 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x12, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632c77fbac141416ac14141689029f034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x54, 0x89, &(0x7f0000000140)="8e36f884beaef671671df84cbda0dac2d61fb705fb298f1e791ae4865b7960016f0dcec8fb498a77979b82c4d65622fbbde076ec0c6f93590ce8049d49046e430920655cb2a2825302ae17d1d9a2834a6e635a8d", &(0x7f0000000240)=""/137, 0xfffffff0, 0x0, 0x4c, 0xa4, &(0x7f0000000300)="5744c15388fdf104ef47268be900bbfa3091a443b5d478b11bfc7059e0f9cb8e8f20b7c7037ce2834d5277f944551fc6c29ae58447431e980cefac2285bce506e292d5992cdd873166fc6804", &(0x7f0000000380)="407711cc41087069addfe46bfb5a8e5206b3dff4cb62da7cd3088ed0d6e77dbd430ab503bee58931a86fdd6470c9f875ef884a28d716e0cba3d82c08f79fd0ce7f1e4412097e6d647c3548802261d7466fc1da2c0c612f184a249dda79de382eb9c6ad45450659ca49d955cd471f46643f9c717aab6a828506676fecf700233f2dc1d15574217c776b630cb6987421ab0836fba170136f826cd768d2a0255e319a0dfab2", 0x1, 0x0, 0x7}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

17.848062834s ago: executing program 0 (id=3592):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x4058, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='7\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x779)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @empty}, 0x10, 0x0, 0xffffffffffffff8e}, 0x20044080)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x28}, 0x28)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000eef58033a1434ee812ad0ffdfb2400"/34, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="000000000100"/28], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r5, @ANYBLOB="03000000000000000000f3ffffffffffffffafbf6d7c90c7c11e33cee3b85d194012906212a441d9c04e007c4eb2d90aea7becac3a734a39d6adcfa6330f75cce2ee44d636e1b2a3244d8f1de732282a7e062c", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="030000008000"/28], 0x50)
r7 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef", 0x59}], 0x1}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000020, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xfffffc0000000003, 0xffffffffffffffff, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

17.825400136s ago: executing program 1 (id=3593):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xfffffffd}, 0xffffffffffffff62)
r0 = socket$kcm(0x2, 0x5, 0x84)
close(r0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x4, 0xd, 0x0, 0x1}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae58e99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472ad529cefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc979ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa09acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b183940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)

17.722994583s ago: executing program 2 (id=3594):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0xffffffff}, 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x0, 0x21, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0xf, &(0x7f00000000c0), 0x4)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="180200000000000000000000a8ea0000b7080000000000007b8af8ff00000000b7080000000200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000001700000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x31, &(0x7f0000000640)=r1, 0x4)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
r7 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

17.721104883s ago: executing program 3 (id=3595):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x81}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x89, 0x5, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x4, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)="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"/483, 0x1e3}], 0x1}, 0x24000080)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9)
openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x400000002, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r6, &(0x7f00000000c0), 0x12)

16.970050714s ago: executing program 0 (id=3596):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x25, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28)
r4 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20)
r7 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='\f\x00\x10kqlle\x94\x00')
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

16.756822869s ago: executing program 3 (id=3597):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x20, 0x10001, 0x8, 0x6, 0x400, r2, 0x475b, '\x00', 0x0, r6, 0x2, 0x5, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2b72646d612006637075202b6e6574a21f6cef20b664657669636573200663707573657420"], 0x25)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09000008ea6e1900000000"}]}}}], 0x40}, 0x20002880)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x20, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x6, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

16.620885038s ago: executing program 2 (id=3598):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000600)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000100)=""/183, 0xb7}, {&(0x7f00000001c0)=""/173, 0xad}, {&(0x7f0000000280)=""/235, 0xeb}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f00000003c0)=""/229, 0xe5}], 0x6, &(0x7f0000000540)=[@rights={{0x2c, 0x1, 0x1, [<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {<r7=>0x0}}}, @rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x88}, 0x104)
recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/208, 0xd0}], 0x1, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, <r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [<r17=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [<r18=>0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {<r19=>0x0, 0x0, <r20=>0x0}}}, @cred={{0x1c, 0x1, 0x2, {<r21=>0x0, <r22=>0x0, <r23=>0x0}}}], 0xb8}, 0x40012160)
r24 = getpid()
r25 = perf_event_open$cgroup(&(0x7f0000000e00)={0x5, 0x80, 0xd3, 0x81, 0x2, 0x2, 0x0, 0x3, 0x50820, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x7f800, 0x3ff}, 0x113421, 0xffffffff, 0x9, 0x8, 0x3, 0xbc0, 0xfff, 0x0, 0x905, 0x0, 0x20ba4d75}, r17, 0x9, r13, 0xd)
sendmsg$unix(r1, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000880)="f11f50892977757ce4d76a51141305bbbafe2de5b250b3836200fbaa24b20818258d986c78cbede33dd7a551bb5b6e40ceb04c666bbd2dba724a773230f372e88292503c066bdc071a9a91907d", 0x4d}, {&(0x7f0000000900)="b61979ab92c1a6a8", 0x8}, {&(0x7f0000000940)="53a5", 0x2}, {&(0x7f0000000980)="22c628d6e21b10d8139324797707c9b42d4d04d2899460630f2e9ff38ac3ef882e6d7af119aaa0a7738b9ef2d36361b70c7dcc5a4a9fe5c53b17ffccd29ee8cabb993ae84e2a00a841d06b312931b4d1734f1c8f953ab15b8075e6a338b0b720e805d5fe1e9eeb686789f034d1c1ee1675b9cd27b9fd0ada28", 0x79}, {&(0x7f0000000a00)="293c6c72e3e633ff083c906ae613aaf8b5c8b01de2f2e52c797e5882e1ca84622edb625273fdb4dd5cfe64aaddf04eebb276dcf4440ef67d8df1efb3187cffb03eb3d521c4220b9dd9104887c396c4db6b498b5c54174297b81a9d98a1e6eb2eaf11d19d952a4e223231657c3641a05f42a348f5c390e86a54a5ce763103933dcb9bdc4fafd9d5b898c04812e9d4a5e1ea1350e510769a3e63b46a874c58096c5dc50a5160a224feeea55f0bae48f8eb681e92c36e68c92f8cbe19f8541bcdf0d1b0fedbad063c4118a64a77e805093a295aeebb6987ea31f50b42", 0xdb}, {&(0x7f0000000b00)="748157097931b9faf3b1e8c590e44b2e4686a29b5a55137a13eea26b089286f93ac8d9cd0ddf352025e97a6b9e4e43acd7b68e9c05d148ee48eeb7745d3e5eacff61f4e3c157", 0x46}, {&(0x7f0000000b80)="620e0424e63a17ad3b61004cf9b4081bc6a83bc12a4283db", 0x18}, {&(0x7f0000000bc0)="126d530ede034c3c6f282e1a21424db00bb0f8c9004e64d9a098fb79f246d13e7cf0ae2acf706b8f937da5a2b787136f0115bef6ab9deabe92d4f6675cdba54ef03914131a11e1ca21b24d9c55a851d056974dddbf87084c43ab12e47fca93f22c7673a8e213095098a85ff1", 0x6c}, {&(0x7f0000000c40)="cb06d802ac0890bc1b5fd255257a28dedb071556bfa4cf9a68c63493e5ab4aa631b8b5f527b1cf03be4f355dea59af9b68d41082915dcd4c05e45543b1bfec8821bda77ebdcc7d4548299f12eb21d149912489c38e6b2c9943137c1d24eb0e2b3a85195c027b6f885f30d9654278a9557666c16a82d69618b81d9f0ecade2893a8b435a71f49ad9dc05fa55c21bbe6ec182135ff89063a6493a328b433b8acff2683872620359800561797baa0f54a7fb923ee962bc9098af44386aba572a80e825c5ee3935749ee", 0xc8}], 0x9, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {r19, r22, r23}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r24, r22, r20}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r17]}}, @rights={{0x20, 0x1, 0x1, [r25, r2, r14, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r13, r6, r17, r5, r17, r1, r9, r11]}}, @rights={{0x30, 0x1, 0x1, [r12, r12, r8, r16, r16, r5, r10, r8]}}, @cred={{0x1c, 0x1, 0x2, {r19, r22, r20}}}, @cred={{0x1c, 0x1, 0x2, {r7, r22, r20}}}], 0x140, 0x880}, 0x40000)
sendmsg$unix(r6, &(0x7f0000001600)={&(0x7f0000001000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000001080)="70f077ce065f80fa55ef3842b2e88152536ec7998cf6996f178b9e831f00dc36c197e97b90d1c040aa1ef570bb1a3e70df6ed6391bf994249d1337d07de10558bddcd23167a5b75eb75ef87ac22165cc0cfdfce7b73bbbcd75b6c16d7f64ce4438c0be7f142ac52721812f63cabb50e23246fc00b7d166e64d58791a5f3fef2e1c8e4ba27f", 0x85}, {&(0x7f0000001140)="476dc5b74706a7e8ad341c50921cc2ca598caa15a55e98ed3b9581782b100c3611a61cd93cc68fb7b79462c027c2afd8564e45a4cf8093ded2314c2f2f421b0757f2407b5967fcede406ee8868f4281a88c3611e4713e61901c9f2d6e0fae7810eb75956dcfb869be335d0ff4b4bc5d6ee2699097a649171243b8ed0a05a2222395b6cd96d9e6f8f821b4e9e793020a48932360b757bbf317be51cb652864a8ffd", 0xa1}, {&(0x7f0000001200)="ad2bbd3d1b9e5639875468da6d3eabc4e40356584024bd2820b2cc8c08ba9d0430b3d1681a4b46030b79c0174cd9b70a61abd9d042d64f305f8ebd33767318f522e55bc0ef8a571ad775dcacf56fc5641fb9322fed8b1765480a366f1a519198346a1744e47e346ea3509f3d4ea212", 0x6f}, {&(0x7f0000001280)="f55b40d83034660cb99081ef811e079504671ffeb1c08a17caf67a5fb31a0008c5b61a73b81e5336f628e2f30b8050cacdd9d4c1e4c26168dfa249c303151667a6016e6367971c8ea2e021f50b3d70c51bcb88014b5c76f0e16cafec62a6d98dfa72b299ae8f0e7f47cf8a3c703317cecbe6df3ae952037410e1b7ae4f480580245e82141ef5b3e96d5710421463421f060bf4174ad3405ae90d49d1667c92", 0x9f}, {&(0x7f0000001340)="e60c0dbe8c64973924e61fccee7e3dad2c69e5a5125a1ca7c5c49712e4af38415992194d628b731506851c69f2e2fe2c3e0a6fdc26f8fdd5be15f638f5ff1c1c57d906e7ec97b586cbeadf807f5e29119ec3c5335edd2ed48352210e7a3ac3d420b6af9b135aaf579c461cd455ef6b02583dbfe77022da2e46435c0182d5d93d28de7ec5eb4f3eec77aac37ed550eaf7fd167470efb91d43815c0e6bbf40f9ea671f6464dbee0a260f0e7a4a1bbe5053", 0xb0}, {&(0x7f0000001400)="fab3de59fb6ccb0ab19b08b257610a7a776c8226f212ccc69f6c6845b2071459d552bd589e1dcfe03fb4abad9e172c6a18951e7b68d3f829a8af016d0864709c86eadb04f51b71605b77283908d5e6ee2bcd28dbf8c5a327427819f55ce5b60c590a513a855fbdf09a3080f061e8bb3a85ff357c5503329d04b0533fbb5ca730937d832ffc483c9192e5b21379125bc0c2637187fbeaba84a364b23d38bbae138d3c547222c476afc383d6b76a365bebe6e52b", 0xb3}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="c24ba2de2067baba14d372fb3153517e7f2ec0aed9a86e1e752d5551a15f387fe7de95c9c87ff8553ac7fb345b3c0fe3370880d883157cbd7b2629389513f543d5d784dd689c8e07b47a2c58c9224205ea10", 0x52}], 0x8, 0x0, 0x0, 0x8000}, 0x0)
syz_open_procfs$namespace(r24, &(0x7f0000001640)='ns/cgroup\x00')
ioctl$sock_kcm_SIOCKCMCLONE(r18, 0x89e2, &(0x7f0000001680)={r16})
ioctl$PERF_EVENT_IOC_SET_FILTER(r15, 0x40082406, &(0x7f00000016c0)='!\'-[*(,\x00')
ioctl$TUNGETFILTER(r5, 0x801054db, &(0x7f0000001700)=""/39)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001800)={&(0x7f0000001740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@int={0xc, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x2d, 0x4}, @float={0xd, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f0000001780)=""/68, 0x3a, 0x44, 0x1, 0x4}, 0x28)
r26 = openat$cgroup_freezer_state(r5, &(0x7f0000001840), 0x2, 0x0)
write$cgroup_freezer_state(r26, &(0x7f0000001880)='THAWED\x00', 0x7)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000018c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001900))
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001940)={@fallback=r4, r13, 0x10, 0x2004, r10, @value=r1}, 0x20)
r27 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x995, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a80)={r17, 0x58, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r28=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x1c, 0x3, 0x2, 0xff, 0x20908, r27, 0x5, '\x00', r28, r6, 0x5, 0x1, 0x3}, 0x50)
perf_event_open(&(0x7f0000001b40)={0x1, 0x80, 0x5, 0x3, 0x5, 0x8, 0x0, 0x1, 0x8001, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x4, 0xd982}, 0x2, 0x9, 0x7, 0x3, 0x400, 0x401, 0x80, 0x0, 0xd0, 0x0, 0xd4}, 0xffffffffffffffff, 0x2, r9, 0x1)
ioctl$TUNDETACHFILTER(r10, 0x401054d6, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001bc0))
r29 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001c00)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', r28, r29, 0x5, 0x3}, 0x50)
r30 = syz_clone(0x4000000, &(0x7f0000001d80)="99039739b86d90e715ec93067fea979369c4482bf959f730888873de3871177cdac173c890c6d31c1ad12a81fc9cecf83362a4a435a22435d8eec24267db3c9a47596aec718f185c640f74e49529f8a58b071de3da70b38e9be84f1d96ff0f1f108a421d1d5ad8c20be0b4745c99af68ba5d30de8b7a864782a8e4967b0f991b9b8e6b31d6d45af82e39104797ae1791d8af2914820de7ec61009b64676631d9e1a452ba6ca6a77254970b236e43cdebe410ae7ad77b45cab8dbd8", 0xbb, &(0x7f0000001e40), &(0x7f0000001e80), &(0x7f0000001ec0)="798d5554974415456a733e0b9ada74b053ab2e87a033ee673d8e656a72d174586938bc6b12235b60cacf9754ea0e1dc167af1e25e67b38cac4beb8565f75a6ecec5eea67d47efa4c8610d3a2698fd7772955df5b06299b5bb563d304aa0fccc65ba024881cb35475debd649cb366a849e068d20276670c8986721dc7b017a404497eb9df82c87e7a671583ad1f3e16c1ad9481c6feaaf1aa3f7bcd586f1373a9bd7aa0b4133d3b6cff779532303e8510fcc654ec0efca88062c9ba3f8d281f7cb02053893427150c5d2fb87095339f671b8de0946c43b4484cc9e56a53908cf4a32a")
perf_event_open(&(0x7f0000001d00)={0x4, 0x80, 0xc, 0x0, 0x3, 0x8, 0x0, 0x4, 0x40800, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f0000001cc0), 0x4}, 0x20a0, 0x6, 0x100, 0x1, 0x2, 0x3, 0x7, 0x0, 0x7, 0x0, 0xbfb}, r30, 0x4, 0xffffffffffffffff, 0x3)
r31 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001fc0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, r31, 0x4, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{}, &(0x7f0000002140), &(0x7f0000002180)=r3}, 0x20)

16.619346718s ago: executing program 1 (id=3599):
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280))
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000300000000000000000089dfad2fdb1ec6e30000006470543ea2edcf6066847eecd1763209a0c0f9499b64b2953259bc1eb307ea5c9ede4da7d2ac849ce2560f1d01c0a0214759d41dc9f12bca579917265af7229062c30c38271ae1"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

15.736749759s ago: executing program 2 (id=3600):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20e})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8931, &(0x7f0000000080))
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x8000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

1.45964236s ago: executing program 32 (id=3596):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x21, &(0x7f0000000100), 0x120)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0xd, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x25, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x28)
r4 = socket$kcm(0x29, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20)
r7 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='\f\x00\x10kqlle\x94\x00')
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181004000000004000000000000000e000a000d00000002800200121f", 0x2e}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r4})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0xe, 0x0, &(0x7f0000000000)="9b352e98d1dc0621a18bc4c5a6c1", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.304488271s ago: executing program 33 (id=3599):
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000280))
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000300000000000000000089dfad2fdb1ec6e30000006470543ea2edcf6066847eecd1763209a0c0f9499b64b2953259bc1eb307ea5c9ede4da7d2ac849ce2560f1d01c0a0214759d41dc9f12bca579917265af7229062c30c38271ae1"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

1.17863073s ago: executing program 34 (id=3597):
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x20, 0x10001, 0x8, 0x6, 0x400, r2, 0x475b, '\x00', 0x0, r6, 0x2, 0x5, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="2b72646d612006637075202b6e6574a21f6cef20b664657669636573200663707573657420"], 0x25)
r7 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09000008ea6e1900000000"}]}}}], 0x40}, 0x20002880)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x20, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x6, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)

0s ago: executing program 35 (id=3600):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000200), &(0x7f00000003c0)}, 0x20)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x20e})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8931, &(0x7f0000000080))
r3 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0x8000000}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

kernel console output (not intermixed with test programs):

310/0x310
[  449.499970][T13496]  ? bpf_lsm_capable+0x9/0x10
[  449.504684][T13496]  ? security_capable+0x89/0xb0
[  449.509583][T13496]  genl_rcv_msg+0x619/0x7a0
[  449.514114][T13496]  ? genl_bind+0x360/0x360
[  449.518550][T13496]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  449.524918][T13496]  ? lockdep_hardirqs_on+0x98/0x150
[  449.530179][T13496]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  449.536379][T13496]  netlink_rcv_skb+0x241/0x4d0
[  449.541175][T13496]  ? genl_bind+0x360/0x360
[  449.545611][T13496]  ? netlink_ack+0x1180/0x1180
[  449.550454][T13496]  ? __lock_acquire+0x7d40/0x7d40
[  449.555511][T13496]  ? net_generic+0x1e/0x240
[  449.560130][T13496]  ? down_read+0x1ac/0x2e0
[  449.564606][T13496]  genl_rcv+0x28/0x40
[  449.568615][T13496]  netlink_unicast+0x751/0x8d0
[  449.573439][T13496]  netlink_sendmsg+0x8d0/0xbf0
[  449.578249][T13496]  ? netlink_getsockopt+0x590/0x590
[  449.583485][T13496]  ? apparmor_socket_sendmsg+0x12/0x30
[  449.588976][T13496]  ? aa_sock_msg_perm+0x94/0x150
[  449.593944][T13496]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  449.599361][T13496]  ? security_socket_sendmsg+0x80/0xa0
[  449.604871][T13496]  ? netlink_getsockopt+0x590/0x590
[  449.610115][T13496]  ____sys_sendmsg+0x5ba/0x960
[  449.614917][T13496]  ? __asan_memset+0x22/0x40
[  449.619543][T13496]  ? __sys_sendmsg_sock+0x30/0x30
[  449.624590][T13496]  ? __import_iovec+0x5f2/0x850
[  449.629477][T13496]  ? import_iovec+0x73/0xa0
[  449.634011][T13496]  ___sys_sendmsg+0x2a6/0x360
[  449.638728][T13496]  ? __sys_sendmsg+0x2a0/0x2a0
[  449.643568][T13496]  __se_sys_sendmsg+0x1c2/0x2b0
[  449.648448][T13496]  ? __x64_sys_sendmsg+0x80/0x80
[  449.653421][T13496]  ? lockdep_hardirqs_on+0x98/0x150
[  449.658658][T13496]  do_syscall_64+0x55/0xa0
[  449.663106][T13496]  ? clear_bhb_loop+0x40/0x90
[  449.667825][T13496]  ? clear_bhb_loop+0x40/0x90
[  449.672542][T13496]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  449.678470][T13496] RIP: 0033:0x7f095af9c819
[  449.682912][T13496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  449.702548][T13496] RSP: 002b:00007f095bf24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  449.710983][T13496] RAX: ffffffffffffffda RBX: 00007f095b215fa0 RCX: 00007f095af9c819
[  449.718986][T13496] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a
[  449.726993][T13496] RBP: 00007f095b032c91 R08: 0000000000000000 R09: 0000000000000000
[  449.734995][T13496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  449.743009][T13496] R13: 00007f095b216038 R14: 00007f095b215fa0 R15: 00007ffe15a234e8
[  449.751105][T13496]  </TASK>
[  449.906489][T13526] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2120'.
[  449.968147][T13528] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2121'.
[  450.013722][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 34
[  450.400736][T13540] netlink: 'syz.2.2124': attribute type 2 has an invalid length.
[  450.424015][T13540] netlink: 'syz.2.2124': attribute type 8 has an invalid length.
[  450.464708][T13540] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2124'.
[  450.500161][T13547] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2126'.
[  450.798202][T13556] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2130'.
[  450.828179][T13556] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2130'.
[  450.941717][T13559] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2131'.
[  451.150068][T13566] pim6reg1: left promiscuous mode
[  451.155181][T13566] pim6reg1: left allmulticast mode
[  451.846491][T13587] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2140'.
[  452.144442][T13597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2143'.
[  452.228346][T13603] netlink: 'syz.1.2146': attribute type 22 has an invalid length.
[  453.571784][T13643] netlink: 'syz.1.2157': attribute type 10 has an invalid length.
[  453.973384][T13647] netlink: 'syz.3.2158': attribute type 21 has an invalid length.
[  454.021556][T13647] netlink: 'syz.3.2158': attribute type 1 has an invalid length.
[  454.168391][T13647] netlink: 'syz.3.2158': attribute type 2 has an invalid length.
[  454.176223][T13647] __nla_validate_parse: 3 callbacks suppressed
[  454.176237][T13647] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.2158'.
[  454.450915][T13659] netlink: 'syz.3.2161': attribute type 9 has an invalid length.
[  454.459805][T13659] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2161'.
[  454.468163][T13660] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2162'.
[  454.518288][T13660] netlink: 'syz.2.2162': attribute type 10 has an invalid length.
[  454.546422][T13660] tun0: tun_chr_ioctl cmd 1074025678
[  454.552898][T13660] tun0: group set to 0
[  454.572127][T13660] tun0: tun_chr_ioctl cmd 1074025677
[  454.581080][T13660] tun0: linktype set to 5
[  454.667646][T13666] delete_channel: no stack
[  454.730907][T13671] netlink: 'syz.2.2162': attribute type 29 has an invalid length.
[  454.739810][T13671] netlink: 'syz.2.2162': attribute type 29 has an invalid length.
[  454.761214][T13660] netlink: 'syz.2.2162': attribute type 29 has an invalid length.
[  454.807192][T13676] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2165'.
[  455.152421][T13682] bond0: (slave bond_slave_0): Releasing backup interface
[  455.815671][T13698] delete_channel: no stack
[  457.133535][T13745] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2186'.
[  457.515637][T13763] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2190'.
[  457.538625][T13763] netlink: 64855 bytes leftover after parsing attributes in process `syz.0.2190'.
[  462.974756][T13832] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2208'.
[  463.222482][T13841] IPv6: Can't replace route, no match found
[  463.433957][T13850] ÿÿÿÿÿÿ: renamed from vlan1
[  463.524600][T13856] syzkaller0: entered promiscuous mode
[  463.551574][T13856] syzkaller0: entered allmulticast mode
[  463.886311][T13873] validate_nla: 5 callbacks suppressed
[  463.886327][T13873] netlink: 'syz.3.2220': attribute type 27 has an invalid length.
[  463.903096][T13873] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2220'.
[  465.294876][T13899] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2226'.
[  466.389502][T13887] netlink: 'syz.3.2224': attribute type 27 has an invalid length.
[  466.401299][T13887] netlink: 'syz.3.2224': attribute type 4 has an invalid length.
[  466.410155][T13887] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2224'.
[  466.820833][T13901] netlink: 'syz.1.2227': attribute type 39 has an invalid length.
[  466.859015][T13906] netlink: 'syz.3.2229': attribute type 10 has an invalid length.
[  466.868846][T13906] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2229'.
[  467.239156][T13924] netlink: 'syz.3.2235': attribute type 10 has an invalid length.
[  467.500396][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'.
[  468.005509][T13951] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  468.108926][T13954] netlink: 'syz.1.2246': attribute type 10 has an invalid length.
[  468.128229][T13954] .`: (slave bond_slave_0): Releasing backup interface
[  468.215150][T13954] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2246'.
[  468.247218][T13954] openvswitch: netlink: Tunnel attr 0 has unexpected len 533 expected 8
[  468.502722][T13968] netlink: 'syz.1.2250': attribute type 3 has an invalid length.
[  468.525390][T13968] netlink: 'syz.1.2250': attribute type 1 has an invalid length.
[  468.537903][T13968] netlink: 91732 bytes leftover after parsing attributes in process `syz.1.2250'.
[  468.671706][T13968] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2250'.
[  470.179848][T14008] netlink: 'syz.2.2261': attribute type 9 has an invalid length.
[  470.243351][T14008] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2261'.
[  470.323591][T14002] netlink: 'syz.0.2260': attribute type 2 has an invalid length.
[  470.343127][T14002] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2260'.
[  470.590788][T14012] netlink: 'syz.2.2261': attribute type 9 has an invalid length.
[  470.602144][T14018] netlink: 'syz.0.2263': attribute type 3 has an invalid length.
[  470.614780][T14012] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2261'.
[  470.630401][T14018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2263'.
[  470.841946][T14026] netlink: 'syz.3.2265': attribute type 21 has an invalid length.
[  470.867046][T14026] netlink: 'syz.3.2265': attribute type 1 has an invalid length.
[  470.876263][T14026] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.2265'.
[  470.936555][T14026] netlink: 'syz.3.2265': attribute type 3 has an invalid length.
[  470.967040][T14026] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2265'.
[  471.865184][T14062] sock: sock_timestamping_bind_phc: sock not bind to device
[  471.908812][T14060] netlink: 'syz.2.2275': attribute type 13 has an invalid length.
[  471.945129][T14060] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2275'.
[  472.074056][T14060] erspan0: refused to change device tx_queue_len
[  472.104830][T14060] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  472.794932][T14079] netlink: 'syz.2.2280': attribute type 3 has an invalid length.
[  474.281203][T14107] netlink: 'syz.0.2286': attribute type 9 has an invalid length.
[  474.301457][T14107] __nla_validate_parse: 2 callbacks suppressed
[  474.301475][T14107] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2286'.
[  474.461924][T14110] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2286'.
[  474.568780][T14102] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2284'.
[  474.621828][T14111] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.2286'.
[  474.636530][T14102] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2284'.
[  475.707694][T14149] validate_nla: 4 callbacks suppressed
[  475.707713][T14149] netlink: 'syz.0.2297': attribute type 17 has an invalid length.
[  475.790620][T14149] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2297'.
[  476.115500][T14147] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2296'.
[  476.353031][T14147] netlink: 4548 bytes leftover after parsing attributes in process `syz.2.2296'.
[  476.410232][T14147] netlink: 'syz.2.2296': attribute type 1 has an invalid length.
[  477.000409][T14161] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2298'.
[  477.160110][T14144] delete_channel: no stack
[  477.205644][T14161] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  477.214957][T14161] CPU: 0 PID: 14161 Comm: syz.0.2298 Not tainted syzkaller #0
[  477.222459][T14161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  477.232543][T14161] Call Trace:
[  477.235896][T14161]  <TASK>
[  477.238887][T14161]  dump_stack_lvl+0x18c/0x250
[  477.243614][T14161]  ? show_regs_print_info+0x20/0x20
[  477.248845][T14161]  ? load_image+0x420/0x420
[  477.253400][T14161]  sysfs_warn_dup+0x8e/0xa0
[  477.258039][T14161]  sysfs_do_create_link_sd+0xc0/0x110
[  477.263440][T14161]  device_add_class_symlinks+0x1cf/0x240
[  477.269141][T14161]  device_add+0x507/0xc20
[  477.273519][T14161]  wiphy_register+0x1dad/0x2ae0
[  477.278449][T14161]  ? cfg80211_event_work+0x40/0x40
[  477.283581][T14161]  ? minstrel_ht_alloc+0x88a/0x990
[  477.288732][T14161]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  477.294834][T14161]  ieee80211_register_hw+0x3464/0x4250
[  477.300438][T14161]  ? ieee80211_tasklet_handler+0x20/0x20
[  477.306181][T14161]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  477.312207][T14161]  ? __debug_object_init+0xec/0x450
[  477.317455][T14161]  ? __asan_memset+0x22/0x40
[  477.322086][T14161]  ? __hrtimer_init+0x186/0x270
[  477.326968][T14161]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  477.332745][T14161]  ? mac80211_hwsim_free+0x220/0x220
[  477.338060][T14161]  ? rcu_is_watching+0x15/0xb0
[  477.342869][T14161]  ? kstrndup+0xbd/0x140
[  477.347151][T14161]  hwsim_new_radio_nl+0xdc9/0x1a90
[  477.352300][T14161]  ? mark_lock+0x94/0x320
[  477.356679][T14161]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  477.363127][T14161]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  477.369312][T14161]  ? lockdep_hardirqs_on+0x98/0x150
[  477.374553][T14161]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  477.380774][T14161]  genl_family_rcv_msg_doit+0x211/0x310
[  477.386369][T14161]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  477.392325][T14161]  ? genl_rcv_msg+0x5f6/0x7a0
[  477.397037][T14161]  ? genl_family_rcv_msg_doit+0x5/0x310
[  477.402621][T14161]  genl_rcv_msg+0x619/0x7a0
[  477.407188][T14161]  ? genl_bind+0x360/0x360
[  477.411643][T14161]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  477.418091][T14161]  ? mark_lock+0x94/0x320
[  477.422462][T14161]  netlink_rcv_skb+0x241/0x4d0
[  477.427265][T14161]  ? genl_bind+0x360/0x360
[  477.431714][T14161]  ? netlink_ack+0x1180/0x1180
[  477.436529][T14161]  ? preempt_count_sub+0x2e/0x160
[  477.441591][T14161]  ? down_read+0x1ac/0x2e0
[  477.446037][T14161]  genl_rcv+0x28/0x40
[  477.450050][T14161]  netlink_unicast+0x751/0x8d0
[  477.454869][T14161]  netlink_sendmsg+0x8d0/0xbf0
[  477.459672][T14161]  ? lockdep_hardirqs_on+0x98/0x150
[  477.464925][T14161]  ? netlink_getsockopt+0x590/0x590
[  477.470160][T14161]  ? security_socket_sendmsg+0x45/0xa0
[  477.475661][T14161]  ? security_socket_sendmsg+0x80/0xa0
[  477.481148][T14161]  ? netlink_getsockopt+0x590/0x590
[  477.486396][T14161]  ____sys_sendmsg+0x5ba/0x960
[  477.491222][T14161]  ? __asan_memset+0x22/0x40
[  477.495860][T14161]  ? __sys_sendmsg_sock+0x30/0x30
[  477.500921][T14161]  ? __import_iovec+0x5f2/0x850
[  477.505816][T14161]  ? import_iovec+0x73/0xa0
[  477.510365][T14161]  ___sys_sendmsg+0x2a6/0x360
[  477.515081][T14161]  ? __sys_sendmsg+0x2a0/0x2a0
[  477.519941][T14161]  __se_sys_sendmsg+0x1c2/0x2b0
[  477.524827][T14161]  ? __x64_sys_sendmsg+0x80/0x80
[  477.529833][T14161]  ? syscall_enter_from_user_mode+0x2e/0x80
[  477.535766][T14161]  do_syscall_64+0x55/0xa0
[  477.540232][T14161]  ? clear_bhb_loop+0x40/0x90
[  477.544941][T14161]  ? clear_bhb_loop+0x40/0x90
[  477.549650][T14161]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  477.555570][T14161] RIP: 0033:0x7f58ff59c819
[  477.560010][T14161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.579904][T14161] RSP: 002b:00007f59003e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  477.588350][T14161] RAX: ffffffffffffffda RBX: 00007f58ff815fa0 RCX: 00007f58ff59c819
[  477.596356][T14161] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  477.604396][T14161] RBP: 00007f58ff632c91 R08: 0000000000000000 R09: 0000000000000000
[  477.612412][T14161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.620426][T14161] R13: 00007f58ff816038 R14: 00007f58ff815fa0 R15: 00007fffc2140848
[  477.628464][T14161]  </TASK>
[  478.553415][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  478.568266][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  478.583193][T14180] À: port 1(vlan0) entered blocking state
[  478.589337][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  478.598332][T14180] À: port 1(vlan0) entered disabled state
[  478.604813][T14180] vlan0: entered allmulticast mode
[  478.610612][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  478.618613][ T5784] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  478.626250][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  478.658693][T14180] vlan0: entered promiscuous mode
[  478.760460][T14185] tap1: tun_chr_ioctl cmd 1074025677
[  478.765943][T14185] tap1: linktype set to 780
[  478.868280][T14190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2306'.
[  479.212777][T14184] chnl_net:caif_netlink_parms(): no params data found
[  479.389324][ T6721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.511452][T14184] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.530198][T14184] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.549441][T14184] bridge_slave_0: entered allmulticast mode
[  479.562186][T14184] bridge_slave_0: entered promiscuous mode
[  479.632541][ T6721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.674474][T14184] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.684302][T14184] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.711432][T14184] bridge_slave_1: entered allmulticast mode
[  479.731430][T14184] bridge_slave_1: entered promiscuous mode
[  479.829341][ T6721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.971504][ T6721] bond0: (slave netdevsim0): Releasing backup interface
[  479.988119][ T6721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.040720][T14184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.074408][T14184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.200826][T14184] team0: Port device team_slave_0 added
[  480.221413][T14184] team0: Port device team_slave_1 added
[  480.330190][T14184] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.337493][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.396755][T14184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.433063][T14221] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2313'.
[  480.456477][T14184] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.489835][T14184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.535926][T14184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  480.561907][T14229] netlink: 'syz.1.2315': attribute type 21 has an invalid length.
[  480.677235][ T5782] Bluetooth: hci4: command tx timeout
[  480.779005][T14184] hsr_slave_0: entered promiscuous mode
[  480.796310][T14184] hsr_slave_1: entered promiscuous mode
[  481.712175][T14250] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2319'.
[  482.270245][T14269] netlink: 'syz.1.2321': attribute type 21 has an invalid length.
[  482.359217][T14269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2321'.
[  482.750639][ T5782] Bluetooth: hci4: command tx timeout
[  484.115716][T14323] netlink: 'syz.2.2332': attribute type 2 has an invalid length.
[  484.387202][T14184] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  484.418573][T14184] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  484.564576][T14334] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2334'.
[  484.639551][T14337] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2335'.
[  484.690491][T14325] syzkaller0: entered promiscuous mode
[  484.696046][T14325] syzkaller0: entered allmulticast mode
[  484.792166][T14184] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  484.815799][T14184] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  484.837308][ T5782] Bluetooth: hci4: command tx timeout
[  484.895943][T14337] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2335'.
[  486.636481][T14338] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2335'.
[  486.649515][T14342] netlink: 'syz.0.2336': attribute type 10 has an invalid length.
[  486.661479][T14342] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2336'.
[  486.912888][ T5782] Bluetooth: hci4: command tx timeout
[  487.285313][T14342] vlan0 (unregistering): left allmulticast mode
[  487.292354][T14342] veth0_vlan (unregistering): left allmulticast mode
[  487.300534][T14342] vlan0 (unregistering): left promiscuous mode
[  487.310527][T14342] À: port 1(vlan0) entered disabled state
[  487.956226][T14341] netlink: 'syz.0.2336': attribute type 10 has an invalid length.
[  487.964533][T14341] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2336'.
[  487.983298][ T6721] hsr_slave_0: left promiscuous mode
[  487.997738][ T6721] hsr_slave_1: left promiscuous mode
[  488.005077][ T6721] bridge0: port 1(hsr0) entered disabled state
[  488.020987][ T6721] bridge_slave_1: left allmulticast mode
[  488.032363][ T6721] bridge_slave_1: left promiscuous mode
[  488.039704][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state
[  488.083340][ T6721] veth1_vlan: left promiscuous mode
[  489.037353][ T6721] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  489.216014][ T6721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  489.262835][ T6721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  489.475833][ T6721] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  489.544497][ T6721] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  489.559097][ T6721] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed
[  489.570765][ T6721] bond0 (unregistering): Released all slaves
[  489.862546][T14384] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2348'.
[  490.074317][T14184] 8021q: adding VLAN 0 to HW filter on device bond0
[  490.126598][T14392] netlink: 'syz.0.2350': attribute type 10 has an invalid length.
[  490.269871][T14184] 8021q: adding VLAN 0 to HW filter on device team0
[  490.312844][T12248] bridge0: port 1(bridge_slave_0) entered blocking state
[  490.320182][T12248] bridge0: port 1(bridge_slave_0) entered forwarding state
[  490.365622][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state
[  490.372868][ T6711] bridge0: port 2(bridge_slave_1) entered forwarding state
[  490.597733][T14409] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2353'.
[  490.853250][T14418] netlink: 'syz.1.2355': attribute type 21 has an invalid length.
[  490.868062][T14418] netlink: 'syz.1.2355': attribute type 20 has an invalid length.
[  490.943259][T14423] netlink: 'syz.0.2356': attribute type 1 has an invalid length.
[  490.948372][T14184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  490.965429][T14423] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2356'.
[  491.075760][T14184] veth0_vlan: entered promiscuous mode
[  491.099984][T14184] veth1_vlan: entered promiscuous mode
[  491.242935][T14184] veth0_macvtap: entered promiscuous mode
[  491.282067][T14184] veth1_macvtap: entered promiscuous mode
[  491.355631][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.399734][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.451232][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  491.500389][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.536436][T14184] batman_adv: batadv0: Interface activated: batadv_slave_0
[  491.551882][T14428] delete_channel: no stack
[  491.599422][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.641730][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.666359][T14184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  491.687888][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  491.700659][T14184] batman_adv: batadv0: Interface activated: batadv_slave_1
[  491.741107][T14184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.770839][T14184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.791410][T14184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.817039][T14184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  492.022083][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.043301][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.122995][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  492.142061][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  492.378810][T14462] netlink: 194488 bytes leftover after parsing attributes in process `syz.2.2366'.
[  494.174112][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  494.187679][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  494.196298][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  494.207917][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  494.219897][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  494.237564][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  495.012638][T14534] chnl_net:caif_netlink_parms(): no params data found
[  495.131565][ T6721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.293883][T14566] netlink: 'syz.2.2384': attribute type 3 has an invalid length.
[  495.313231][T14566] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2384'.
[  495.349502][ T6721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.427912][T14570] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2385'.
[  495.514904][ T6721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  495.827214][T14583] mac80211_hwsim hwsim23 wlan1: left promiscuous mode
[  495.909198][T14534] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.928130][T14534] bridge0: port 1(bridge_slave_0) entered disabled state
[  495.935410][T14534] bridge_slave_0: entered allmulticast mode
[  495.969775][T14534] bridge_slave_0: entered promiscuous mode
[  496.003831][T14534] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.027233][T14534] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.042458][T14534] bridge_slave_1: entered allmulticast mode
[  496.058767][T14534] bridge_slave_1: entered promiscuous mode
[  496.141676][T14534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  496.204461][T14534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  496.267702][ T5782] Bluetooth: hci3: command tx timeout
[  496.371583][T14534] team0: Port device team_slave_0 added
[  496.415091][T14534] team0: Port device team_slave_1 added
[  496.453011][ T6721] tipc: Left network mode
[  496.613850][T14534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  496.644859][T14534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.737140][T14534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  496.780599][T14534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  496.796514][T14534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  496.824936][T14534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  496.845948][T14601] netlink: 'syz.2.2393': attribute type 21 has an invalid length.
[  496.854975][T14601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2393'.
[  497.473644][T14534] hsr_slave_0: entered promiscuous mode
[  497.512332][T14534] hsr_slave_1: entered promiscuous mode
[  497.543717][T14534] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  497.563808][T14534] Cannot create hsr debugfs directory
[  497.850421][T14623] Dead loop on virtual device ip6_vti0, fix it urgently!
[  498.347513][ T5782] Bluetooth: hci3: command tx timeout
[  498.434883][T14629] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode
[  499.804552][T14651] netlink: 'syz.3.2402': attribute type 21 has an invalid length.
[  499.820748][T14651] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2402'.
[  499.848355][T14652] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2410'.
[  500.437239][ T5782] Bluetooth: hci3: command tx timeout
[  500.993533][T14677] netlink: 'syz.1.2406': attribute type 1 has an invalid length.
[  501.006329][T14677] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2406'.
[  501.641289][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  501.650937][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  501.827420][T14680] netlink: 'syz.1.2406': attribute type 4 has an invalid length.
[  501.835231][T14680] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2406'.
[  502.135043][ T6721] bridge_slave_1: left allmulticast mode
[  502.152727][ T6721] bridge_slave_1: left promiscuous mode
[  502.180712][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.213293][ T6721] bridge_slave_0: left allmulticast mode
[  502.240202][ T6721] bridge_slave_0: left promiscuous mode
[  502.246061][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.507840][ T5782] Bluetooth: hci3: command tx timeout
[  504.289212][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  504.426373][T14710] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2416'.
[  504.462841][T14710] openvswitch: netlink: Flow key attribute not present in set flow.
[  504.510478][T14710] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2416'.
[  506.896273][T14703] netlink: 'syz.3.2415': attribute type 21 has an invalid length.
[  506.904870][T14703] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2415'.
[  506.914994][T14703] netlink: 'syz.3.2415': attribute type 5 has an invalid length.
[  506.945661][T14703] netlink: 'syz.3.2415': attribute type 6 has an invalid length.
[  506.955934][T14703] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2415'.
[  507.060157][T14534] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  507.091175][T14534] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  507.147590][T14534] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  507.158494][T14534] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  507.362924][T14534] 8021q: adding VLAN 0 to HW filter on device bond0
[  507.411540][T14534] 8021q: adding VLAN 0 to HW filter on device team0
[  507.433163][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.440394][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state
[  507.484523][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.491769][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state
[  507.795358][T14534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  507.859642][T14534] veth0_vlan: entered promiscuous mode
[  507.882036][T14534] veth1_vlan: entered promiscuous mode
[  507.924289][T14534] veth0_macvtap: entered promiscuous mode
[  507.934991][T14534] veth1_macvtap: entered promiscuous mode
[  507.961477][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  507.973238][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  507.992455][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.011373][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.021309][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  508.032629][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.044935][T14534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  508.056661][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.068015][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.079380][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.091326][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.101634][T14534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  508.112459][T14534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  508.124225][T14534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.135880][T14534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.145171][T14534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.154540][T14534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.163805][T14534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.288376][ T2990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.301178][ T2990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.350469][ T6717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.367384][ T6717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.512884][T14748] netlink: 'syz.0.2373': attribute type 3 has an invalid length.
[  508.550827][T14748] netlink: 'syz.0.2373': attribute type 1 has an invalid length.
[  508.582326][T14748] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.2373'.
[  508.672406][T14754] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2427'.
[  510.802220][T14796] netlink: 'syz.1.2424': attribute type 21 has an invalid length.
[  510.848636][T14796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2424'.
[  513.936472][T14839] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2435'.
[  516.414352][T14857] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2441'.
[  516.423922][T14872] netlink: 'syz.3.2445': attribute type 22 has an invalid length.
[  516.432376][T14872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'.
[  516.674196][T14889] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2448'.
[  516.811022][T14893] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2452'.
[  517.789111][T14909] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2456'.
[  517.828534][T14909] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2456'.
[  517.936288][ T5782] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  518.174384][T14922] netlink: 'syz.1.2459': attribute type 11 has an invalid length.
[  518.218543][T14922] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2459'.
[  518.321728][T14928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2461'.
[  518.334677][T14928] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2461'.
[  518.576289][T14937] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  518.619079][T14932] netlink: zone id is out of range
[  518.625081][T14932] netlink: zone id is out of range
[  518.634959][T14932] netlink: zone id is out of range
[  518.658297][T14932] netlink: zone id is out of range
[  518.680965][T14932] netlink: zone id is out of range
[  518.715467][T14932] netlink: zone id is out of range
[  518.741135][T14932] netlink: zone id is out of range
[  518.761318][T14932] netlink: zone id is out of range
[  518.783160][T14932] netlink: zone id is out of range
[  519.154073][T14949] __nla_validate_parse: 3 callbacks suppressed
[  519.154092][T14949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2469'.
[  519.180990][T14949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2469'.
[  519.191755][T14950] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2467'.
[  519.203565][T14949] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2469'.
[  519.216481][T14951] netlink: 'syz.0.2467': attribute type 2 has an invalid length.
[  519.247761][T14951] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2467'.
[  519.277598][T14953] netlink: 'syz.0.2467': attribute type 2 has an invalid length.
[  519.304421][T14953] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2467'.
[  519.386396][T14952] netlink: 'syz.3.2468': attribute type 10 has an invalid length.
[  519.395416][T14952] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2468'.
[  519.416425][T14952] batadv0: entered promiscuous mode
[  519.429725][T14956] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2470'.
[  519.440562][T14952] batadv0: entered allmulticast mode
[  519.453484][T14952] bridge0: port 3(batadv0) entered blocking state
[  519.467825][T14956] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2470'.
[  519.503880][T14952] bridge0: port 3(batadv0) entered disabled state
[  519.539511][T14952] bridge0: port 3(batadv0) entered blocking state
[  519.546876][T14952] bridge0: port 3(batadv0) entered forwarding state
[  519.575133][ T5782] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  519.939929][ T2990] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  519.957360][ T2990] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  520.102200][T14969] syz.2.2474: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  520.135314][T14969] CPU: 1 PID: 14969 Comm: syz.2.2474 Not tainted syzkaller #0
[  520.142860][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  520.153057][T14969] Call Trace:
[  520.156399][T14969]  <TASK>
[  520.159405][T14969]  dump_stack_lvl+0x18c/0x250
[  520.164159][T14969]  ? show_regs_print_info+0x20/0x20
[  520.169426][T14969]  ? load_image+0x420/0x420
[  520.174014][T14969]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  520.180497][T14969]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  520.187062][T14969]  warn_alloc+0x246/0x340
[  520.191453][T14969]  ? stack_trace_save+0xaa/0x100
[  520.196463][T14969]  ? zone_watermark_ok_safe+0x230/0x230
[  520.202076][T14969]  ? kasan_set_track+0x5f/0x70
[  520.206881][T14969]  ? kasan_set_track+0x4e/0x70
[  520.211736][T14969]  ? __kasan_kmalloc+0x8f/0xa0
[  520.216562][T14969]  ? xsk_init_queue+0xad/0x100
[  520.221390][T14969]  ? xsk_setsockopt+0x4e5/0x760
[  520.226305][T14969]  ? do_sock_setsockopt+0x175/0x1a0
[  520.231562][T14969]  ? __x64_sys_setsockopt+0x182/0x200
[  520.237003][T14969]  __vmalloc_node_range+0x126/0x1330
[  520.242437][T14969]  ? free_vm_area+0x50/0x50
[  520.247014][T14969]  vmalloc_user+0x74/0x80
[  520.251410][T14969]  ? xskq_create+0xbf/0x170
[  520.255986][T14969]  xskq_create+0xbf/0x170
[  520.260371][T14969]  xsk_init_queue+0xad/0x100
[  520.265018][T14969]  xsk_setsockopt+0x4e5/0x760
[  520.269766][T14969]  ? xsk_poll+0x680/0x680
[  520.274175][T14969]  ? __fget_files+0x28/0x4b0
[  520.278871][T14969]  ? __fget_files+0x28/0x4b0
[  520.283524][T14969]  ? aa_sock_opt_perm+0x74/0x100
[  520.288517][T14969]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  520.294138][T14969]  ? security_socket_setsockopt+0x7e/0xa0
[  520.299919][T14969]  ? xsk_poll+0x680/0x680
[  520.304312][T14969]  do_sock_setsockopt+0x175/0x1a0
[  520.309393][T14969]  ? __fdget+0x180/0x210
[  520.313699][T14969]  __x64_sys_setsockopt+0x182/0x200
[  520.318952][T14969]  do_syscall_64+0x55/0xa0
[  520.323425][T14969]  ? clear_bhb_loop+0x40/0x90
[  520.328162][T14969]  ? clear_bhb_loop+0x40/0x90
[  520.332894][T14969]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  520.338836][T14969] RIP: 0033:0x7fba2ab9c819
[  520.343301][T14969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  520.362991][T14969] RSP: 002b:00007fba2bada028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  520.371461][T14969] RAX: ffffffffffffffda RBX: 00007fba2ae15fa0 RCX: 00007fba2ab9c819
[  520.379580][T14969] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  520.387598][T14969] RBP: 00007fba2ac32c91 R08: 0000000000000004 R09: 0000000000000000
[  520.395701][T14969] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  520.403724][T14969] R13: 00007fba2ae16038 R14: 00007fba2ae15fa0 R15: 00007ffed2942a98
[  520.411763][T14969]  </TASK>
[  520.465550][T14969] Mem-Info:
[  520.470720][T14969] active_anon:6430 inactive_anon:0 isolated_anon:0
[  520.470720][T14969]  active_file:17668 inactive_file:40106 isolated_file:0
[  520.470720][T14969]  unevictable:768 dirty:114 writeback:0
[  520.470720][T14969]  slab_reclaimable:10503 slab_unreclaimable:95591
[  520.470720][T14969]  mapped:25053 shmem:1361 pagetables:565
[  520.470720][T14969]  sec_pagetables:0 bounce:0
[  520.470720][T14969]  kernel_misc_reclaimable:0
[  520.470720][T14969]  free:1341466 free_pcp:8471 free_cma:0
[  520.528251][T14969] Node 0 active_anon:25720kB inactive_anon:0kB active_file:70672kB inactive_file:160220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100212kB dirty:456kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11132kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no
[  520.593888][T14969] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  520.646739][T14969] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  520.697471][T14969] lowmem_reserve[]: 0 2521 2522 2522 2522
[  520.704336][T14969] Node 0 DMA32 free:1447484kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25680kB inactive_anon:0kB active_file:70672kB inactive_file:159396kB unevictable:1536kB writepending:456kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:20172kB local_pcp:13208kB free_cma:0kB
[  520.754172][T14969] lowmem_reserve[]: 0 0 0 0 0
[  520.784865][T14969] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  520.823570][T14969] lowmem_reserve[]: 0 0 0 0 0
[  520.848074][T14969] Node 1 Normal free:3898468kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16876kB local_pcp:10216kB free_cma:0kB
[  520.890395][T14969] lowmem_reserve[]: 0 0 0 0 0
[  520.896040][T14969] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  520.912381][T14969] Node 0 DMA32: 691*4kB (UME) 1100*8kB (UME) 1053*16kB (UME) 1266*32kB (UME) 348*64kB (UME) 115*128kB (UME) 181*256kB (UME) 136*512kB (UM) 54*1024kB (UM) 9*2048kB (UM) 281*4096kB (M) = 1446588kB
[  520.935156][T14969] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  520.952128][T14969] Node 1 Normal: 221*4kB (UM) 54*8kB (UME) 38*16kB (UME) 145*32kB (UME) 41*64kB (UE) 7*128kB (UME) 1*256kB (U) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3898468kB
[  520.972421][T14969] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  520.982536][T14969] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  520.992976][T14969] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  521.037451][T14969] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  521.052786][T14986] netlink: 'syz.3.2477': attribute type 1 has an invalid length.
[  521.077861][T14969] 59135 total pagecache pages
[  521.082615][T14969] 0 pages in swap cache
[  521.086806][T14969] Free swap  = 124996kB
[  521.092927][T14985] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2479'.
[  521.103135][T14986] netlink: 'syz.3.2477': attribute type 3 has an invalid length.
[  521.111735][T14969] Total swap = 124996kB
[  521.115986][T14969] 2097051 pages RAM
[  521.156919][T14969] 0 pages HighMem/MovableOnly
[  521.162205][T14969] 416926 pages reserved
[  521.166474][T14969] 0 pages cma reserved
[  523.981464][T15001] dvmrp1: tun_chr_ioctl cmd 1074033753
[  524.224609][T15016] __nla_validate_parse: 3 callbacks suppressed
[  524.224625][T15016] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2488'.
[  524.284963][T15021] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2489'.
[  525.075310][T15042] netlink: 'syz.3.2495': attribute type 29 has an invalid length.
[  525.097645][T15042] netlink: 'syz.3.2495': attribute type 3 has an invalid length.
[  525.124671][T15042] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2495'.
[  525.727748][T15062] tap0: tun_chr_ioctl cmd 1074025677
[  525.734068][T15062] tap0: linktype set to 6
[  526.257196][T15094] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2511'.
[  526.443161][T15104] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.2514'.
[  526.478054][T15106] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2515'.
[  526.726752][T15119] netlink: 'syz.2.2518': attribute type 4 has an invalid length.
[  526.753174][T15119] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2518'.
[  526.917326][T15126] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2521'.
[  527.049645][T15132] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2521'.
[  527.972413][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'.
[  528.514269][T15184] netlink: 'syz.0.2538': attribute type 3 has an invalid length.
[  528.528049][T15151] delete_channel: no stack
[  528.638180][T15189] netlink: 'syz.0.2540': attribute type 13 has an invalid length.
[  528.689582][T15189] mac80211_hwsim hwsim47 ..ãc¤±: renamed from wlan1 (while UP)
[  529.084762][T15209] netlink: 'syz.0.2547': attribute type 10 has an invalid length.
[  529.737161][T15238] netlink: 'syz.2.2555': attribute type 21 has an invalid length.
[  529.745069][T15238] __nla_validate_parse: 5 callbacks suppressed
[  529.745083][T15238] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2555'.
[  530.565990][T15255] netlink: 'syz.2.2559': attribute type 2 has an invalid length.
[  530.577582][T15255] netlink: 'syz.2.2559': attribute type 8 has an invalid length.
[  530.585514][T15255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2559'.
[  532.678658][T15268] netlink: 'syz.1.2563': attribute type 1 has an invalid length.
[  532.686523][T15268] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2563'.
[  533.503251][T15276] netlink: 'syz.3.2574': attribute type 27 has an invalid length.
[  533.513868][T15276] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2574'.
[  533.571378][T15278] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2567'.
[  533.773314][T15282] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2567'.
[  534.410296][T15293] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2571'.
[  534.445875][T15293] bridge_slave_1: default FDB implementation only supports local addresses
[  534.696446][T15289] netlink: 'syz.2.2571': attribute type 1 has an invalid length.
[  534.704801][T15289] netlink: 62996 bytes leftover after parsing attributes in process `syz.2.2571'.
[  534.714945][T15289] netlink: 'syz.2.2571': attribute type 1 has an invalid length.
[  534.931498][T15314] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2577'.
[  534.967613][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2576'.
[  535.013855][T15323] netlink: 'syz.3.2579': attribute type 6 has an invalid length.
[  535.022062][T15323] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2579'.
[  535.037958][T15324] netlink: 'syz.3.2579': attribute type 6 has an invalid length.
[  535.087197][T15324] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2579'.
[  535.309772][T15328] dvmrp1: tun_chr_ioctl cmd 1074025677
[  535.316771][T15328] dvmrp1: linktype set to 823
[  535.621058][T15335] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2582'.
[  535.860384][T15339] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2582'.
[  536.075808][T15350] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2588'.
[  536.118446][T15350] net_ratelimit: 91 callbacks suppressed
[  536.118463][T15350] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  536.162551][T15350] openvswitch: netlink: Message has 4 unknown bytes.
[  536.180926][T15348] syzkaller0: entered promiscuous mode
[  536.186451][T15348] syzkaller0: entered allmulticast mode
[  536.194249][T15348] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487
[  536.212305][T15348] netlink: 'syz.3.2588': attribute type 33 has an invalid length.
[  536.222276][T15348] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2588'.
[  536.285621][T15348] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.2588'.
[  536.318215][ T5782] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  536.401070][T15355] delete_channel: no stack
[  537.234184][T15360] delete_channel: no stack
[  537.657882][T15381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2596'.
[  538.213382][T15398] syzkaller0: entered promiscuous mode
[  538.230943][T15398] syzkaller0: entered allmulticast mode
[  539.402370][T15438] ref_ctr_offset mismatch. inode: 0x169 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  539.643400][T15452] netlink: 'syz.3.2618': attribute type 17 has an invalid length.
[  539.677182][T15452] netlink: 'syz.3.2618': attribute type 16 has an invalid length.
[  539.968442][T15461] netlink: 'syz.0.2621': attribute type 10 has an invalid length.
[  539.988892][T15461] __nla_validate_parse: 8 callbacks suppressed
[  539.988910][T15461] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2621'.
[  540.025409][T15461] bond0: entered promiscuous mode
[  540.046300][T15461] bond_slave_0: entered promiscuous mode
[  540.068215][T15461] bond_slave_1: entered promiscuous mode
[  540.097867][T15461] bridge0: port 3(bond0) entered blocking state
[  540.137511][T15461] bridge0: port 3(bond0) entered disabled state
[  540.175989][T15461] bond0: entered allmulticast mode
[  540.206401][T15461] bond_slave_0: entered allmulticast mode
[  540.237517][T15461] bond_slave_1: entered allmulticast mode
[  540.299394][T15472] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2625'.
[  540.309537][T15461] bridge0: port 3(bond0) entered blocking state
[  540.310213][T15461] bridge0: port 3(bond0) entered forwarding state
[  540.357325][ T5782] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  540.366227][ T5782] Bluetooth: hci4: Injecting HCI hardware error event
[  540.375653][ T5782] Bluetooth: hci4: hardware error 0x00
[  540.381736][T15472] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  540.761249][T15480] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  540.806029][T15480] netlink: 'syz.1.2627': attribute type 3 has an invalid length.
[  540.830676][T15480] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2627'.
[  540.884703][T15480] netlink: 'syz.1.2627': attribute type 12 has an invalid length.
[  540.906278][T15480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2627'.
[  541.388094][T15507] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2633'.
[  541.471754][T15509] netlink: 'syz.1.2634': attribute type 29 has an invalid length.
[  541.480152][T15509] netlink: 'syz.1.2634': attribute type 29 has an invalid length.
[  541.489511][T15509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'.
[  541.499937][T15509] netlink: 'syz.1.2634': attribute type 29 has an invalid length.
[  541.509740][T15509] netlink: 'syz.1.2634': attribute type 29 has an invalid length.
[  541.986584][T15526] netlink: 'syz.0.2639': attribute type 21 has an invalid length.
[  542.508810][ T5782] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  542.874012][T15547] syzkaller0: entered promiscuous mode
[  542.887875][T15547] syzkaller0: entered allmulticast mode
[  543.034724][T15544] netlink: 'syz.2.2645': attribute type 3 has an invalid length.
[  543.043436][T15544] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2645'.
[  545.751759][T15589] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2657'.
[  546.204990][T15603] netlink: 'syz.2.2669': attribute type 10 has an invalid length.
[  546.235136][T15603] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.288360][T15603] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.295604][T15603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  546.322777][T15603] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  546.468497][T15606] netlink: 'syz.3.2661': attribute type 3 has an invalid length.
[  546.476460][T15606] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2661'.
[  546.890962][T15602] syzkaller0: entered promiscuous mode
[  546.903448][T15602] syzkaller0: entered allmulticast mode
[  555.554790][T15659] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2677'.
[  555.771614][T15666] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2680'.
[  556.563361][T15683] netlink: 191820 bytes leftover after parsing attributes in process `syz.2.2685'.
[  556.597206][T15683] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  557.406128][T15688] netlink: 'syz.2.2687': attribute type 9 has an invalid length.
[  559.613610][T15701] netlink: 'syz.0.2690': attribute type 3 has an invalid length.
[  559.637215][T15701] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2690'.
[  559.684169][T15702] syzkaller0: entered promiscuous mode
[  559.695315][T15702] syzkaller0: entered allmulticast mode
[  561.990049][T15717] netlink: 'syz.3.2695': attribute type 10 has an invalid length.
[  561.998408][T15717] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2695'.
[  562.491260][T15718] netlink: 'syz.3.2695': attribute type 4 has an invalid length.
[  562.500470][T15722] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2696'.
[  562.513580][T15723] netlink: 'syz.2.2696': attribute type 10 has an invalid length.
[  562.521846][T15723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2696'.
[  562.531252][T15723] batadv0: entered promiscuous mode
[  562.536503][T15723] batadv0: entered allmulticast mode
[  562.547693][T15723] bridge0: port 1(batadv0) entered blocking state
[  562.554560][T15723] bridge0: port 1(batadv0) entered disabled state
[  562.569546][T15723] bridge0: port 1(batadv0) entered blocking state
[  562.576204][T15723] bridge0: port 1(batadv0) entered forwarding state
[  562.874400][ T6698] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  562.883972][ T6698] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  563.088534][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  563.094946][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  563.413792][T15746] netlink: 'syz.3.2704': attribute type 2 has an invalid length.
[  563.444139][T15746] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2704'.
[  564.572496][T15768] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2709'.
[  564.673963][T15771] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2708'.
[  564.788198][T15768] netlink: 'syz.0.2709': attribute type 10 has an invalid length.
[  564.796775][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2709'.
[  564.947460][T15768] batadv0: entered promiscuous mode
[  564.955023][T15768] batadv0: entered allmulticast mode
[  565.004496][T15779] syz.2.2711[15779] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  565.004742][T15779] syz.2.2711[15779] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  565.035800][T15768] bridge0: port 4(batadv0) entered blocking state
[  565.064481][T15768] bridge0: port 4(batadv0) entered disabled state
[  565.158569][T15768] bridge0: port 4(batadv0) entered blocking state
[  565.165880][T15768] bridge0: port 4(batadv0) entered forwarding state
[  565.483228][ T6698] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  565.492843][ T6698] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  567.572320][T15829] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2725'.
[  567.653972][T15829] netlink: 'syz.3.2725': attribute type 10 has an invalid length.
[  567.676320][T15829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2725'.
[  567.796130][T15834] netlink: 'syz.2.2726': attribute type 21 has an invalid length.
[  569.146511][T15860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  571.051521][T15904] netlink: 'syz.2.2741': attribute type 29 has an invalid length.
[  571.133838][T15887] netlink: 199364 bytes leftover after parsing attributes in process `syz.2.2741'.
[  571.164415][T15904] netlink: 'syz.2.2741': attribute type 29 has an invalid length.
[  571.210219][T15910] netlink: 'syz.1.2743': attribute type 21 has an invalid length.
[  571.255048][T15910] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2743'.
[  571.298286][T15887] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  571.323156][T15887] CPU: 0 PID: 15887 Comm: syz.2.2741 Not tainted syzkaller #0
[  571.330781][T15887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  571.340888][T15887] Call Trace:
[  571.344196][T15887]  <TASK>
[  571.347159][T15887]  dump_stack_lvl+0x18c/0x250
[  571.351900][T15887]  ? show_regs_print_info+0x20/0x20
[  571.357179][T15887]  ? load_image+0x420/0x420
[  571.361746][T15887]  sysfs_warn_dup+0x8e/0xa0
[  571.366293][T15887]  sysfs_do_create_link_sd+0xc0/0x110
[  571.371718][T15887]  device_add_class_symlinks+0x1cf/0x240
[  571.377407][T15887]  device_add+0x507/0xc20
[  571.381885][T15887]  wiphy_register+0x1dad/0x2ae0
[  571.386809][T15887]  ? cfg80211_event_work+0x40/0x40
[  571.391989][T15887]  ? minstrel_ht_alloc+0x88a/0x990
[  571.397202][T15887]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  571.403331][T15887]  ieee80211_register_hw+0x3464/0x4250
[  571.408963][T15887]  ? ieee80211_tasklet_handler+0x20/0x20
[  571.414637][T15887]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  571.420575][T15887]  ? __debug_object_init+0xec/0x450
[  571.425828][T15887]  ? __asan_memset+0x22/0x40
[  571.430457][T15887]  ? __hrtimer_init+0x186/0x270
[  571.435372][T15887]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  571.441169][T15887]  ? mac80211_hwsim_free+0x220/0x220
[  571.446495][T15887]  ? rcu_is_watching+0x15/0xb0
[  571.451316][T15887]  ? kstrndup+0xbd/0x140
[  571.455616][T15887]  hwsim_new_radio_nl+0xdc9/0x1a90
[  571.460778][T15887]  ? __nla_validate+0x50/0x50
[  571.465515][T15887]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  571.471906][T15887]  ? __nla_parse+0x40/0x50
[  571.476398][T15887]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  571.482774][T15887]  genl_family_rcv_msg_doit+0x211/0x310
[  571.488381][T15887]  ? apparmor_capable+0x71/0x1a0
[  571.493358][T15887]  ? apparmor_capable+0xe7/0x1a0
[  571.498343][T15887]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  571.504412][T15887]  ? bpf_lsm_capable+0x9/0x10
[  571.509172][T15887]  ? security_capable+0x89/0xb0
[  571.514094][T15887]  genl_rcv_msg+0x619/0x7a0
[  571.518651][T15887]  ? genl_bind+0x360/0x360
[  571.523109][T15887]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  571.529157][T15887]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  571.535538][T15887]  ? ref_tracker_free+0x690/0x840
[  571.540719][T15887]  netlink_rcv_skb+0x241/0x4d0
[  571.545590][T15887]  ? genl_bind+0x360/0x360
[  571.550061][T15887]  ? netlink_ack+0x1180/0x1180
[  571.554894][T15887]  ? __lock_acquire+0x7d40/0x7d40
[  571.559968][T15887]  ? down_read+0x1ac/0x2e0
[  571.564532][T15887]  genl_rcv+0x28/0x40
[  571.568581][T15887]  netlink_unicast+0x751/0x8d0
[  571.573412][T15887]  netlink_sendmsg+0x8d0/0xbf0
[  571.578244][T15887]  ? lockdep_hardirqs_on+0x98/0x150
[  571.583507][T15887]  ? netlink_getsockopt+0x590/0x590
[  571.588780][T15887]  ? netlink_getsockopt+0x590/0x590
[  571.594060][T15887]  ____sys_sendmsg+0x5ba/0x960
[  571.598875][T15887]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  571.605103][T15887]  ? __asan_memset+0x22/0x40
[  571.609749][T15887]  ? __sys_sendmsg_sock+0x30/0x30
[  571.614823][T15887]  ? __import_iovec+0x5f2/0x850
[  571.619736][T15887]  ? import_iovec+0x73/0xa0
[  571.624290][T15887]  ___sys_sendmsg+0x2a6/0x360
[  571.629030][T15887]  ? __sys_sendmsg+0x2a0/0x2a0
[  571.633905][T15887]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  571.640235][T15887]  __se_sys_sendmsg+0x1c2/0x2b0
[  571.645139][T15887]  ? __x64_sys_sendmsg+0x80/0x80
[  571.650151][T15887]  ? lockdep_hardirqs_on+0x98/0x150
[  571.655403][T15887]  do_syscall_64+0x55/0xa0
[  571.659852][T15887]  ? clear_bhb_loop+0x40/0x90
[  571.664755][T15887]  ? clear_bhb_loop+0x40/0x90
[  571.669498][T15887]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  571.675448][T15887] RIP: 0033:0x7fba2ab9c819
[  571.679904][T15887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  571.699563][T15887] RSP: 002b:00007fba2bada028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  571.708074][T15887] RAX: ffffffffffffffda RBX: 00007fba2ae15fa0 RCX: 00007fba2ab9c819
[  571.716103][T15887] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  571.724197][T15887] RBP: 00007fba2ac32c91 R08: 0000000000000000 R09: 0000000000000000
[  571.732204][T15887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  571.740222][T15887] R13: 00007fba2ae16038 R14: 00007fba2ae15fa0 R15: 00007ffed2942a98
[  571.748827][T15887]  </TASK>
[  572.139139][T15898] netlink: 'syz.1.2743': attribute type 10 has an invalid length.
[  572.147921][T15898] mac80211_hwsim hwsim23 wlan1: left allmulticast mode
[  572.643492][T15927] syzkaller0: entered promiscuous mode
[  572.658624][T15927] syzkaller0: entered allmulticast mode
[  572.712583][T15942] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2753'.
[  575.154906][T15945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  575.227467][T15947] netlink: 'syz.3.2755': attribute type 10 has an invalid length.
[  575.543637][T15966] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2760'.
[  575.554557][T15966] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8
[  576.255719][T15984] netlink: 'syz.0.2765': attribute type 10 has an invalid length.
[  576.283145][T15984] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2765'.
[  576.296350][T15984] batman_adv: batadv0: Adding interface: veth0_vlan
[  576.303308][T15984] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  576.345244][T15984] batman_adv: batadv0: Interface activated: veth0_vlan
[  576.433175][T15994] netlink: 'syz.1.2768': attribute type 1 has an invalid length.
[  576.458292][T15994] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2768'.
[  576.473570][T15994] openvswitch: netlink: Duplicate key (type 0).
[  577.597114][T16013] netlink: 'syz.3.2775': attribute type 13 has an invalid length.
[  577.619716][T16013] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2775'.
[  578.051704][T16033] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2780'.
[  580.933139][T16053] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2787'.
[  581.464593][T16076] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2794'.
[  582.218741][T16090] netlink: 2734 bytes leftover after parsing attributes in process `syz.3.2797'.
[  582.357879][T16095] netlink: 'syz.1.2799': attribute type 29 has an invalid length.
[  582.390250][T16095] netlink: 'syz.1.2799': attribute type 29 has an invalid length.
[  582.579813][T16102] netlink: 'syz.1.2800': attribute type 12 has an invalid length.
[  582.591881][T16102] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.2800'.
[  582.643934][T16104] netlink: 'syz.3.2801': attribute type 21 has an invalid length.
[  582.667287][T16104] netlink: 'syz.3.2801': attribute type 10 has an invalid length.
[  582.675151][T16104] netlink: 'syz.3.2801': attribute type 12 has an invalid length.
[  582.698232][T16102] netlink: 'syz.1.2800': attribute type 2 has an invalid length.
[  582.698830][T16104] netlink: 'syz.3.2801': attribute type 13 has an invalid length.
[  582.706599][T16104] netlink: 'syz.3.2801': attribute type 14 has an invalid length.
[  582.706617][T16104] netlink: 'syz.3.2801': attribute type 15 has an invalid length.
[  582.706640][T16104] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.2801'.
[  582.734101][T16102] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2800'.
[  583.412874][T16126] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2808'.
[  584.300793][T16149] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2815'.
[  584.345386][T16147] bond_slave_1: entered promiscuous mode
[  584.364713][T16147] bond_slave_1: entered allmulticast mode
[  584.444805][T16151] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2816'.
[  584.640839][T16155] Â: renamed from pim6reg1
[  584.787446][T16160] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2818'.
[  584.936607][T16161] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2818'.
[  584.978001][T16161] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  585.574648][T16181] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2824'.
[  586.385030][T16212] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2832'.
[  587.341769][T16216] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2835'.
[  587.551979][T16224] validate_nla: 11 callbacks suppressed
[  587.551995][T16224] netlink: 'syz.1.2838': attribute type 21 has an invalid length.
[  587.619213][T16227] netlink: 'syz.1.2838': attribute type 10 has an invalid length.
[  587.643760][T16227] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2838'.
[  587.687560][T16227] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  588.630885][T16248] netlink: 'syz.3.2844': attribute type 33 has an invalid length.
[  588.805085][T16227] batman_adv: batadv0: Removing interface: veth0_vlan
[  588.834048][T16253] netlink: 'syz.2.2845': attribute type 1 has an invalid length.
[  588.842867][T16253] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2845'.
[  589.096926][T16224] netlink: 'syz.1.2838': attribute type 4 has an invalid length.
[  589.129247][T16234] netlink: 'syz.0.2840': attribute type 39 has an invalid length.
[  590.396750][T16274] netlink: 'syz.1.2851': attribute type 10 has an invalid length.
[  590.404808][T16274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2851'.
[  590.642228][T16284] netlink: 'syz.0.2855': attribute type 3 has an invalid length.
[  590.664355][T16284] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2855'.
[  590.728005][T16284] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2855'.
[  592.337634][T16303] netlink: 'syz.0.2862': attribute type 2 has an invalid length.
[  592.345569][T16303] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2862'.
[  592.366692][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2863'.
[  592.384105][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'.
[  592.404431][T16305] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2863'.
[  592.419962][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'.
[  592.434617][T16305] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2863'.
[  593.795716][T16339] netlink: 'syz.3.2875': attribute type 3 has an invalid length.
[  593.977841][T16345] netlink: 'syz.2.2876': attribute type 21 has an invalid length.
[  594.075908][T16347] netlink: 'syz.1.2877': attribute type 22 has an invalid length.
[  594.085442][T16347] __nla_validate_parse: 2 callbacks suppressed
[  594.085495][T16347] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2877'.
[  594.243323][T16353] netlink: 'syz.2.2880': attribute type 3 has an invalid length.
[  594.277216][T16353] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2880'.
[  594.295770][T16358] netlink: 'syz.3.2882': attribute type 21 has an invalid length.
[  594.332388][T16355] syzkaller0: entered promiscuous mode
[  594.338939][T16355] syzkaller0: entered allmulticast mode
[  594.359809][T16358] netlink: 'syz.3.2882': attribute type 10 has an invalid length.
[  594.381522][T16358] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2882'.
[  594.479316][T16358] netlink: 'syz.3.2882': attribute type 4 has an invalid length.
[  595.022579][T16376] sit0: entered promiscuous mode
[  595.046996][T16376] sit0: entered allmulticast mode
[  595.986870][T16399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2893'.
[  596.638506][   T12] tipc: Subscription rejected, illegal request
[  596.795284][T16427] delete_channel: no stack
[  596.802939][T16426] delete_channel: no stack
[  596.815431][T16423] IPv6: Can't replace route, no match found
[  596.822198][T16424] IPv6: Can't replace route, no match found
[  596.968554][T16431] netlink: 'syz.0.2905': attribute type 3 has an invalid length.
[  596.981165][T16431] netlink: 'syz.0.2905': attribute type 1 has an invalid length.
[  596.990544][T16431] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2905'.
[  597.056499][T16439] netlink: 'syz.3.2907': attribute type 22 has an invalid length.
[  597.065221][T16439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'.
[  598.637628][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2563
[  598.828695][T16483] netlink: 'syz.2.2923': attribute type 1 has an invalid length.
[  598.887429][T16483] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2923'.
[  599.147779][T16491] netlink: 'syz.1.2926': attribute type 29 has an invalid length.
[  599.191676][T16491] netlink: 'syz.1.2926': attribute type 29 has an invalid length.
[  599.243360][T16489] netlink: 'syz.1.2926': attribute type 29 has an invalid length.
[  599.853292][T16498] ip6gretap0: refused to change device tx_queue_len
[  600.066509][T16506] netlink: 195208 bytes leftover after parsing attributes in process `syz.1.2932'.
[  600.100944][T16508] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  600.350887][T16511] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2932'.
[  600.535990][T16516] netlink: 'syz.0.2934': attribute type 13 has an invalid length.
[  600.563982][T16516] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2934'.
[  601.904403][T16550] netlink: 'syz.0.2946': attribute type 4 has an invalid length.
[  601.927318][T16550] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2946'.
[  601.936625][T16550] tc_dump_action: action bad kind
[  602.878521][T16554] netlink: 'syz.3.2944': attribute type 10 has an invalid length.
[  603.508899][T15477] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  603.527143][T15477] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  603.535808][T15477] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  603.544937][T15477] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  603.554317][T15477] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  603.568085][T15477] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  603.797810][T16579] Dead loop on virtual device ip6_vti0, fix it urgently!
[  604.301786][ T6717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.373234][T16572] chnl_net:caif_netlink_parms(): no params data found
[  604.523124][ T6717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.585230][T16597] netlink: 'syz.1.2956': attribute type 10 has an invalid length.
[  604.600929][T16596] netlink: 'syz.1.2956': attribute type 10 has an invalid length.
[  604.706569][ T6717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  604.851700][ T6717] bond0: (slave netdevsim0): Releasing backup interface
[  604.870114][ T6717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  605.005045][T16608] netlink: 'syz.0.2958': attribute type 1 has an invalid length.
[  605.024906][T16606] netlink: 'syz.0.2958': attribute type 1 has an invalid length.
[  605.041982][T16608] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.2958'.
[  605.054220][T16606] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.2958'.
[  605.088596][T16572] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.102488][T16572] bridge0: port 1(bridge_slave_0) entered disabled state
[  605.127143][T16572] bridge_slave_0: entered allmulticast mode
[  605.143386][T16572] bridge_slave_0: entered promiscuous mode
[  605.168824][T16572] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.187014][T16572] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.198991][T16572] bridge_slave_1: entered allmulticast mode
[  605.220154][T16572] bridge_slave_1: entered promiscuous mode
[  605.278460][T16572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  605.292003][T16572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  605.367576][T16615] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2960'.
[  605.462354][T16572] team0: Port device team_slave_0 added
[  605.479568][T16615] netlink: 'syz.3.2960': attribute type 3 has an invalid length.
[  605.504121][T16572] team0: Port device team_slave_1 added
[  605.552992][T16615] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2960'.
[  605.627153][ T5782] Bluetooth: hci0: command tx timeout
[  605.764921][T16572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  605.774379][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  605.807635][T16572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  605.865385][T16572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  605.905582][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  606.019440][T16572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  606.656355][T16572] hsr_slave_0: entered promiscuous mode
[  606.679465][T16572] hsr_slave_1: entered promiscuous mode
[  606.695114][T16572] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  606.715970][T16572] Cannot create hsr debugfs directory
[  606.955238][T16644] netlink: 'syz.0.2967': attribute type 3 has an invalid length.
[  606.982735][T16644] netlink: 'syz.0.2967': attribute type 1 has an invalid length.
[  607.013777][ T5782] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  607.028753][T16644] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2967'.
[  607.707074][ T5782] Bluetooth: hci0: command tx timeout
[  608.195006][T16681] netlink: 'syz.3.2970': attribute type 10 has an invalid length.
[  608.211982][T16681] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2970'.
[  608.364823][T16674] tap1: tun_chr_ioctl cmd 1074025677
[  608.387187][T16674] tap1: linktype set to 805
[  608.762635][T16572] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  608.850704][T16572] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  609.013482][T16572] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  609.044147][T16708] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2980'.
[  609.099013][T16572] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  609.288213][ T6717] vlan0: left allmulticast mode
[  609.294176][T16712] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.2980'.
[  609.297140][ T6717] vlan0: left promiscuous mode
[  609.338916][ T6717] À: port 1(vlan0) entered disabled state
[  609.387938][ T6717] hsr_slave_0: left promiscuous mode
[  609.410023][ T6717] hsr_slave_1: left promiscuous mode
[  609.422051][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  609.437830][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_0
[  609.456525][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  609.480951][ T6717] batman_adv: batadv0: Removing interface: batadv_slave_1
[  609.495947][ T6717] bridge0: port 1(batadv0) entered disabled state
[  609.514212][ T6717] bridge_slave_1: left allmulticast mode
[  609.524369][ T6717] bridge_slave_1: left promiscuous mode
[  609.534556][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.588113][ T6717] veth1_vlan: left promiscuous mode
[  609.788374][ T5782] Bluetooth: hci0: command tx timeout
[  610.631992][ T1299] tipc: Subscription rejected, illegal request
[  611.325454][ T6717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  611.867233][ T5782] Bluetooth: hci0: command tx timeout
[  612.008274][ T6717] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  612.028705][ T6717] bond0 (unregistering): Released all slaves
[  612.583126][T16572] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.655842][T16572] 8021q: adding VLAN 0 to HW filter on device team0
[  612.712019][ T6721] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.719292][ T6721] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.732345][T16744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2988'.
[  612.783195][ T6721] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.790500][ T6721] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.833493][T16744] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2988'.
[  612.875076][T16748] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2988'.
[  613.041326][T16572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  613.067984][T16755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2989'.
[  613.104686][T16755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2989'.
[  613.139422][T16755] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2989'.
[  613.350265][T16769] netlink: 'syz.0.2993': attribute type 21 has an invalid length.
[  613.392641][T16770] netlink: 'syz.0.2993': attribute type 21 has an invalid length.
[  613.471867][T16770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2993'.
[  613.984831][T16572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  614.138237][T16572] veth0_vlan: entered promiscuous mode
[  614.177905][T16572] veth1_vlan: entered promiscuous mode
[  614.239538][T16572] veth0_macvtap: entered promiscuous mode
[  614.263713][T16572] veth1_macvtap: entered promiscuous mode
[  614.315523][T16572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.337043][T16572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.366874][T16572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.386859][T16572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.407007][T16572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  614.426833][T16572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.449025][T16572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  614.470707][T16572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.496843][T16572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.506705][T16572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.536905][T16572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.560861][T16572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  614.586963][T16572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  614.608411][T16572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  614.644618][T16572] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  614.666896][T16572] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  614.675758][T16572] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  614.706949][T16572] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.346982][T15477] Bluetooth: hci3: command 0x0406 tx timeout
[  616.463348][T16821] netlink: 'syz.0.2996': attribute type 1 has an invalid length.
[  616.497177][T16821] netlink: 12927 bytes leftover after parsing attributes in process `syz.0.2996'.
[  616.977071][ T6717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.988163][ T6717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.063426][ T6711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  617.083401][ T6711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  617.449040][T16848] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3002'.
[  617.820604][T16859] netlink: 'syz.0.3005': attribute type 1 has an invalid length.
[  618.835830][T16877] netpci0: tun_chr_ioctl cmd 2147767517
[  620.016185][T16899] netlink: 'syz.2.3013': attribute type 10 has an invalid length.
[  620.048718][T16899] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.079350][T16899] bridge_slave_1: left allmulticast mode
[  620.092223][T16899] bridge_slave_1: left promiscuous mode
[  620.107647][T16899] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.763915][T16899] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  623.922183][T16915] netlink: 'syz.0.3017': attribute type 4 has an invalid length.
[  623.960716][T16915] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3017'.
[  624.514454][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  624.523513][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  627.648729][T16952] ÿÿÿÿÿÿ: renamed from vlan1 (while UP)
[  628.583506][T16968] netlink: 'syz.2.3035': attribute type 10 has an invalid length.
[  628.734052][T16968] team0: Device ipvlan1 failed to register rx_handler
[  628.982932][T15477] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  629.028236][T15477] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  629.039442][T15477] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  629.048865][T15477] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  629.060245][T15477] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  629.068653][T15477] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  631.146967][ T5782] Bluetooth: hci1: command tx timeout
[  631.868433][T16995] netlink: 'syz.0.3039': attribute type 4 has an invalid length.
[  631.883171][T16995] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3039'.
[  631.928917][T16995] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  632.004746][T16998] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3040'.
[  632.039423][T17000] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3041'.
[  632.295221][ T1299] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.486092][ T1299] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.614475][ T1299] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.785817][T17032] netlink: 'syz.0.3056': attribute type 3 has an invalid length.
[  632.801571][T17032] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3056'.
[  633.230064][ T5782] Bluetooth: hci1: command tx timeout
[  635.310486][ T5782] Bluetooth: hci1: command tx timeout
[  635.721362][ T1299] .`: (slave netdevsim0): Releasing backup interface
[  635.752054][ T1299] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.797009][T17031] netlink: 'syz.0.3056': attribute type 3 has an invalid length.
[  635.815416][T17037] pim6reg0: tun_chr_ioctl cmd 1074025675
[  635.822370][T17031] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3056'.
[  635.833487][T17037] pim6reg0: persist enabled
[  636.071085][T16983] chnl_net:caif_netlink_parms(): no params data found
[  636.405699][T16983] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.427514][T16983] bridge0: port 1(bridge_slave_0) entered disabled state
[  636.452655][T16983] bridge_slave_0: entered allmulticast mode
[  636.475487][T16983] bridge_slave_0: entered promiscuous mode
[  636.513963][T16983] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.538611][T16983] bridge0: port 2(bridge_slave_1) entered disabled state
[  636.568737][T16983] bridge_slave_1: entered allmulticast mode
[  636.595392][T16983] bridge_slave_1: entered promiscuous mode
[  637.019194][T16983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.052407][T16983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.368771][T17083] netlink: 'syz.3.3060': attribute type 3 has an invalid length.
[  637.396664][ T5782] Bluetooth: hci1: command tx timeout
[  637.408549][T17083] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3060'.
[  637.445431][T17086] bridge0: port 4(batadv0) entered disabled state
[  638.449695][T17086] bond0: left allmulticast mode
[  638.454957][T17086] bond_slave_0: left allmulticast mode
[  638.467001][T17086] bond_slave_1: left allmulticast mode
[  638.472779][T17086] bridge0: port 3(bond0) entered disabled state
[  640.391627][T17086] bridge_slave_1: left allmulticast mode
[  640.400790][T17086] bridge_slave_1: left promiscuous mode
[  640.406643][T17086] bridge0: port 2(bridge_slave_1) entered disabled state
[  640.435577][T17086] bridge_slave_0: left allmulticast mode
[  640.447096][T17086] bridge_slave_0: left promiscuous mode
[  640.452905][T17086] bridge0: port 1(bridge_slave_0) entered disabled state
[  640.800364][T16983] team0: Port device team_slave_0 added
[  640.819230][T16983] team0: Port device team_slave_1 added
[  640.842551][T17103] C: renamed from team_slave_0 (while UP)
[  640.885473][T17103] netlink: 'syz.0.3066': attribute type 4 has an invalid length.
[  640.921442][T17103] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3066'.
[  640.981331][T17103] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  641.008508][T17105] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3065'.
[  642.722300][T16983] batman_adv: batadv0: Adding interface: batadv_slave_0
[  642.733528][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.766576][T16983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  642.782738][T16983] batman_adv: batadv0: Adding interface: batadv_slave_1
[  642.792514][T16983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  642.826112][T16983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.131149][T16983] hsr_slave_0: entered promiscuous mode
[  643.155122][T16983] hsr_slave_1: entered promiscuous mode
[  643.213935][T16983] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  643.229220][T16983] Cannot create hsr debugfs directory
[  643.333792][T17148] netlink: 'syz.2.3073': attribute type 3 has an invalid length.
[  643.374837][T17148] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3073'.
[  644.268352][T17188] netlink: 'syz.0.3082': attribute type 21 has an invalid length.
[  644.277095][T17188] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3082'.
[  645.038465][T17199] bridge_slave_0: left allmulticast mode
[  645.055285][T17199] bridge_slave_0: left promiscuous mode
[  645.077933][T17199] bridge0: port 1(bridge_slave_0) entered disabled state
[  645.340134][T17224] netlink: 'syz.0.3090': attribute type 9 has an invalid length.
[  645.366892][T17224] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3090'.
[  645.879435][T17218] netlink: 'syz.0.3090': attribute type 10 has an invalid length.
[  646.436223][T17238] netlink: 'syz.0.3094': attribute type 9 has an invalid length.
[  646.463955][T17238] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3094'.
[  649.189770][T17246] delete_channel: no stack
[  649.283241][T17239] netlink: 'syz.0.3094': attribute type 9 has an invalid length.
[  649.314920][T17239] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3094'.
[  649.796355][T17257] netlink: 'syz.2.3098': attribute type 1 has an invalid length.
[  649.806922][T17257] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.3098'.
[  649.895399][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  649.917114][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_0
[  649.977777][ T1299] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  649.985334][ T1299] batman_adv: batadv0: Removing interface: batadv_slave_1
[  650.012403][ T1299] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  650.032697][ T1299] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  650.087580][ T1299] bridge_slave_1: left allmulticast mode
[  650.097398][ T1299] bridge_slave_1: left promiscuous mode
[  650.103236][ T1299] bridge0: port 2(bridge_slave_1) entered disabled state
[  650.188233][ T1299] bridge_slave_0: left promiscuous mode
[  650.194079][ T1299] bridge0: port 1(bridge_slave_0) entered disabled state
[  650.250327][ T1299] veth0_macvtap: left promiscuous mode
[  651.191617][ T1299] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  651.621141][ T1299] .` (unregistering): (slave bridge0): Releasing backup interface
[  651.630347][ T1299] .` (unregistering): Released all slaves
[  651.749375][T16983] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  651.770772][T16983] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  651.790729][T17271] netlink: 'syz.2.3101': attribute type 13 has an invalid length.
[  651.799589][T17271] netlink: 'syz.2.3101': attribute type 58 has an invalid length.
[  651.817084][T17271] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3101'.
[  651.838095][T17282] netlink: 'syz.3.3104': attribute type 21 has an invalid length.
[  651.857986][T17290] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  651.865453][T17290] batman_adv: batadv0: Removing interface: batadv_slave_0
[  651.914773][T17290] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  651.935883][T17290] batman_adv: batadv0: Removing interface: batadv_slave_1
[  651.963434][T17290] bridge0: port 3(batadv0) entered disabled state
[  652.041118][T17290] bridge0: port 3(batadv0) entered disabled state
[  652.074277][T16983] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  652.095614][T16983] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  652.362576][T16983] 8021q: adding VLAN 0 to HW filter on device bond0
[  652.440875][T16983] 8021q: adding VLAN 0 to HW filter on device team0
[  652.519142][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.526351][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.622323][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.630502][ T6698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.735963][T17342] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3117'.
[  653.793155][T16983] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.127693][T16983] veth0_vlan: entered promiscuous mode
[  654.176067][T16983] veth1_vlan: entered promiscuous mode
[  654.301390][T16983] veth0_macvtap: entered promiscuous mode
[  654.322031][T16983] veth1_macvtap: entered promiscuous mode
[  654.389507][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.412451][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.433504][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  654.464835][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.498615][T16983] batman_adv: batadv0: Interface activated: batadv_slave_0
[  654.539705][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  654.574653][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.605007][T16983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  654.626236][T16983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  654.658909][T16983] batman_adv: batadv0: Interface activated: batadv_slave_1
[  654.709612][T16983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  654.742882][T16983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.767347][T16983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.810166][T16983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  655.156331][ T6698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.186856][ T6698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.216473][ T6698] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  655.255582][ T6698] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  655.769812][T17387] netlink: 'syz.1.3034': attribute type 6 has an invalid length.
[  655.858047][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 3875
[  656.900688][T17427] netlink: 'syz.3.3140': attribute type 10 has an invalid length.
[  657.055216][T17427] team0: Device wg1 is of different type
[  657.193534][T17421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3139'.
[  657.342762][T17440] netlink: 'syz.1.3143': attribute type 3 has an invalid length.
[  657.359894][T17440] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3143'.
[  657.689447][T17449] syzkaller0: entered promiscuous mode
[  657.695009][T17449] syzkaller0: entered allmulticast mode
[  660.958989][T17461] netlink: 'syz.2.3149': attribute type 17 has an invalid length.
[  660.966996][T17461] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3149'.
[  660.980392][T17488] netlink: 'syz.0.3156': attribute type 10 has an invalid length.
[  661.005153][T17488] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.3156'.
[  661.320167][T17502] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.3158'.
[  661.695122][T17508] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  661.703760][T17508] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  661.780680][T17508] netlink: 'syz.2.3162': attribute type 10 has an invalid length.
[  661.889420][T17508] team0: Device veth0_macvtap failed to register rx_handler
[  662.004621][T17527] netlink: 'syz.0.3168': attribute type 29 has an invalid length.
[  662.083551][T17527] netlink: 'syz.0.3168': attribute type 29 has an invalid length.
[  662.309711][T17539] netlink: 'syz.3.3173': attribute type 3 has an invalid length.
[  662.464622][T17545] delete_channel: no stack
[  662.492849][T17550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3177'.
[  662.695958][T17560] macvlan1: entered promiscuous mode
[  662.744525][T17561] netlink: 'syz.3.3180': attribute type 10 has an invalid length.
[  663.271538][ T5782] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10
[  663.413671][T17587] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3188'.
[  663.451644][T17587] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  663.531559][T17587] netlink: 'syz.3.3188': attribute type 3 has an invalid length.
[  663.547241][T17587] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3188'.
[  663.786699][T17598] netlink: 'syz.0.3193': attribute type 10 has an invalid length.
[  663.846659][T17598] netlink: 'syz.0.3193': attribute type 9 has an invalid length.
[  663.867882][T17598] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3193'.
[  664.196673][T17605] netlink: 'syz.0.3193': attribute type 9 has an invalid length.
[  664.209749][T17605] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3193'.
[  664.584979][T17635] netlink: 'syz.0.3200': attribute type 1 has an invalid length.
[  664.608051][T17635] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3200'.
[  664.639642][T17635] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  665.307208][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  665.475365][T17653] netlink: 'syz.1.3207': attribute type 2 has an invalid length.
[  665.609874][T17661] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3209'.
[  665.805388][T17659] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3209'.
[  665.933073][T17664] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3210'.
[  665.951320][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  665.961646][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  665.977686][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.028384][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.057993][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.067965][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.390661][T17658] delete_channel: no stack
[  666.696884][T17664] net_ratelimit: 6238 callbacks suppressed
[  666.696903][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.716939][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.730204][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.740236][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.753069][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.763509][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.773890][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  666.783905][T17664] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815
[  667.135631][T17678] validate_nla: 34 callbacks suppressed
[  667.135653][T17678] netlink: 'syz.2.3216': attribute type 10 has an invalid length.
[  667.673052][T17703] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  667.893420][T17707] netlink: 'syz.0.3224': attribute type 29 has an invalid length.
[  668.175601][T17720] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3224'.
[  668.574982][T17732] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  671.138466][T17791] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3243'.
[  672.514562][T17806] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3248'.
[  672.745662][T17810] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3249'.
[  673.236029][T17812] syz.3.3251 (17812) used obsolete PPPIOCDETACH ioctl
[  673.674280][T17826] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3253'.
[  673.702188][T17826] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  673.712985][T17826] CPU: 1 PID: 17826 Comm: syz.2.3253 Not tainted syzkaller #0
[  673.720508][T17826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  673.730607][T17826] Call Trace:
[  673.733936][T17826]  <TASK>
[  673.736909][T17826]  dump_stack_lvl+0x18c/0x250
[  673.741711][T17826]  ? show_regs_print_info+0x20/0x20
[  673.746975][T17826]  ? load_image+0x420/0x420
[  673.751549][T17826]  sysfs_warn_dup+0x8e/0xa0
[  673.756097][T17826]  sysfs_do_create_link_sd+0xc0/0x110
[  673.761567][T17826]  device_add_class_symlinks+0x1cf/0x240
[  673.767258][T17826]  device_add+0x507/0xc20
[  673.771647][T17826]  wiphy_register+0x1dad/0x2ae0
[  673.776561][T17826]  ? cfg80211_event_work+0x40/0x40
[  673.781720][T17826]  ? minstrel_ht_alloc+0x88a/0x990
[  673.786897][T17826]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  673.793103][T17826]  ieee80211_register_hw+0x3464/0x4250
[  673.798644][T17826]  ? ieee80211_tasklet_handler+0x20/0x20
[  673.804342][T17826]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  673.810388][T17826]  ? __debug_object_init+0xec/0x450
[  673.815643][T17826]  ? __asan_memset+0x22/0x40
[  673.820291][T17826]  ? __hrtimer_init+0x186/0x270
[  673.825200][T17826]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  673.830994][T17826]  ? mac80211_hwsim_free+0x220/0x220
[  673.836330][T17826]  ? rcu_is_watching+0x15/0xb0
[  673.841147][T17826]  ? kstrndup+0xbd/0x140
[  673.845457][T17826]  hwsim_new_radio_nl+0xdc9/0x1a90
[  673.850656][T17826]  ? __nla_validate+0x50/0x50
[  673.855399][T17826]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  673.861811][T17826]  ? __nla_parse+0x40/0x50
[  673.866274][T17826]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  673.872662][T17826]  genl_family_rcv_msg_doit+0x211/0x310
[  673.878238][T17826]  ? end_current_label_crit_section+0x170/0x170
[  673.884523][T17826]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  673.890466][T17826]  ? bpf_lsm_capable+0x9/0x10
[  673.895178][T17826]  ? security_capable+0x89/0xb0
[  673.900069][T17826]  genl_rcv_msg+0x619/0x7a0
[  673.904601][T17826]  ? genl_bind+0x360/0x360
[  673.909046][T17826]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  673.915425][T17826]  ? perf_trace_lock+0xfc/0x3b0
[  673.920320][T17826]  netlink_rcv_skb+0x241/0x4d0
[  673.925126][T17826]  ? genl_bind+0x360/0x360
[  673.929592][T17826]  ? netlink_ack+0x1180/0x1180
[  673.934412][T17826]  ? __lock_acquire+0x7d40/0x7d40
[  673.939481][T17826]  ? down_read+0x1ac/0x2e0
[  673.943927][T17826]  genl_rcv+0x28/0x40
[  673.947958][T17826]  netlink_unicast+0x751/0x8d0
[  673.952789][T17826]  netlink_sendmsg+0x8d0/0xbf0
[  673.957601][T17826]  ? netlink_getsockopt+0x590/0x590
[  673.962841][T17826]  ? aa_sock_msg_perm+0x94/0x150
[  673.967821][T17826]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  673.973126][T17826]  ? security_socket_sendmsg+0x80/0xa0
[  673.978616][T17826]  ? netlink_getsockopt+0x590/0x590
[  673.983858][T17826]  ____sys_sendmsg+0x5ba/0x960
[  673.988656][T17826]  ? __asan_memset+0x22/0x40
[  673.993289][T17826]  ? __sys_sendmsg_sock+0x30/0x30
[  673.998351][T17826]  ? __import_iovec+0x5f2/0x850
[  674.003238][T17826]  ? import_iovec+0x73/0xa0
[  674.007765][T17826]  ___sys_sendmsg+0x2a6/0x360
[  674.012465][T17826]  ? __sys_sendmsg+0x2a0/0x2a0
[  674.017279][T17826]  ? trace_call_bpf+0xc3/0x6c0
[  674.022110][T17826]  __se_sys_sendmsg+0x1c2/0x2b0
[  674.026995][T17826]  ? __x64_sys_sendmsg+0x80/0x80
[  674.032037][T17826]  ? lockdep_hardirqs_on+0x98/0x150
[  674.037288][T17826]  do_syscall_64+0x55/0xa0
[  674.041772][T17826]  ? clear_bhb_loop+0x40/0x90
[  674.046478][T17826]  ? clear_bhb_loop+0x40/0x90
[  674.051187][T17826]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  674.057110][T17826] RIP: 0033:0x7ff30c59c819
[  674.061558][T17826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  674.081190][T17826] RSP: 002b:00007ff30d504028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  674.089639][T17826] RAX: ffffffffffffffda RBX: 00007ff30c816090 RCX: 00007ff30c59c819
[  674.097635][T17826] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  674.105635][T17826] RBP: 00007ff30c632c91 R08: 0000000000000000 R09: 0000000000000000
[  674.113657][T17826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  674.121658][T17826] R13: 00007ff30c816128 R14: 00007ff30c816090 R15: 00007fffc9b2ff18
[  674.129762][T17826]  </TASK>
[  674.609711][T17834] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3257'.
[  674.641569][T17835] netlink: 'syz.2.3257': attribute type 29 has an invalid length.
[  674.733368][T17835] netlink: 'syz.2.3257': attribute type 29 has an invalid length.
[  674.758188][T17836] netlink: 'syz.2.3257': attribute type 29 has an invalid length.
[  675.121107][T17834] netlink: 'syz.2.3257': attribute type 29 has an invalid length.
[  675.324971][T17853] netlink: 'syz.0.3263': attribute type 29 has an invalid length.
[  675.512101][T17835] netlink: 'syz.2.3257': attribute type 29 has an invalid length.
[  675.521783][T17853] netlink: 'syz.0.3263': attribute type 29 has an invalid length.
[  675.541692][T17834] netlink: 'syz.2.3257': attribute type 29 has an invalid length.
[  675.621684][T17856] netlink: 'syz.0.3263': attribute type 29 has an invalid length.
[  675.631165][T17857] netlink: 'syz.0.3263': attribute type 29 has an invalid length.
[  675.635565][T17863] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3265'.
[  676.389797][T17875] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3269'.
[  677.146477][T17884] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  677.499939][T17891] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3274'.
[  677.563859][T17891] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3274'.
[  678.199218][T17881] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3271'.
[  678.679099][T17910] netlink: 826 bytes leftover after parsing attributes in process `syz.1.3279'.
[  678.762873][T17914] sock: sock_timestamping_bind_phc: sock not bind to device
[  678.980788][T17922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  681.626848][T17943] validate_nla: 6 callbacks suppressed
[  681.626866][T17943] netlink: 'syz.0.3297': attribute type 21 has an invalid length.
[  682.297920][T17958] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32
[  682.598214][T17961] netlink: 'syz.3.3295': attribute type 3 has an invalid length.
[  682.682389][T17961] netlink: 'syz.3.3295': attribute type 8 has an invalid length.
[  682.767070][T17961] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.3295'.
[  683.090841][T17968] netlink: 'syz.3.3298': attribute type 1 has an invalid length.
[  683.101632][T17968] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3298'.
[  683.285895][T17939] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3289'.
[  683.370015][T17970] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3299'.
[  683.548619][T17939] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  684.535842][T17998] netlink: 'syz.2.3306': attribute type 4 has an invalid length.
[  684.556217][T17998] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3306'.
[  684.716288][T17998] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  684.760143][T18001] netlink: 'syz.1.3309': attribute type 25 has an invalid length.
[  684.769765][T18001] netlink: 'syz.1.3309': attribute type 29 has an invalid length.
[  684.903686][T18005] netlink: 'syz.0.3318': attribute type 21 has an invalid length.
[  684.960304][T18005] IPv6: NLM_F_CREATE should be specified when creating new route
[  685.959783][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  685.966167][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  686.137124][T18004] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3310'.
[  686.467570][ T6701] tipc: Subscription rejected, illegal request
[  688.419451][T18004] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  688.694320][T18072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3328'.
[  688.704332][T18072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3328'.
[  688.744537][T18072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3328'.
[  688.767565][T18072] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3328'.
[  689.042667][T17781] tipc: Subscription rejected, illegal request
[  689.182603][T18090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  689.190236][T18090] IPv6: NLM_F_CREATE should be set when creating new route
[  689.197992][T18090] IPv6: NLM_F_CREATE should be set when creating new route
[  689.205477][T18090] IPv6: NLM_F_CREATE should be set when creating new route
[  689.253429][T18096] netlink: 'syz.1.3336': attribute type 21 has an invalid length.
[  689.262130][T18096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3336'.
[  689.654719][T18122] netlink: 'syz.3.3344': attribute type 21 has an invalid length.
[  689.811982][T18125] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3345'.
[  689.985712][T18130] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3347'.
[  690.039824][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.052083][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.065701][T18130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  690.079330][T18130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  690.101849][T18130] batadv_slave_1: entered promiscuous mode
[  690.330750][T18146] netlink: 'syz.2.3352': attribute type 10 has an invalid length.
[  690.394009][T18146] veth0_vlan: left promiscuous mode
[  690.430540][T18146] veth0_vlan: entered promiscuous mode
[  690.460809][T18146] team0: Device veth0_vlan failed to register rx_handler
[  690.593885][T18154] IPv6: NLM_F_CREATE should be specified when creating new route
[  690.635952][T18156] netlink: 'syz.2.3355': attribute type 23 has an invalid length.
[  690.650755][T18156] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3355'.
[  691.245624][T18189] syzkaller0: entered promiscuous mode
[  691.258336][T18189] syzkaller0: entered allmulticast mode
[  693.382186][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3373'.
[  694.028802][T18247] delete_channel: no stack
[  694.174160][T18258] netlink: 'syz.3.3382': attribute type 10 has an invalid length.
[  694.247958][T18258] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  697.271089][T18279] netlink: 'syz.2.3389': attribute type 17 has an invalid length.
[  697.279860][T18279] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3389'.
[  697.290698][T18279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  697.687027][T18306] netlink: 'syz.2.3397': attribute type 9 has an invalid length.
[  697.704474][T18306] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3397'.
[  699.401327][T18302] netlink: 'syz.2.3397': attribute type 10 has an invalid length.
[  699.411190][T18302] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.421278][T18302] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.433720][T18302] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.473051][T18302] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  699.670583][T18308] netlink: 'syz.2.3397': attribute type 9 has an invalid length.
[  699.683321][T18308] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3397'.
[  700.267290][T18342] delete_channel: no stack
[  700.296134][T18342] delete_channel: no stack
[  700.362439][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  700.615058][T18358] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3409'.
[  700.625964][T18356] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3409'.
[  700.833326][T18365] netlink: 'syz.2.3412': attribute type 2 has an invalid length.
[  701.030529][T18379] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3416'.
[  701.057316][T18379] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  701.217226][T18383] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3418'.
[  701.499757][T18396] netlink: 'syz.2.3423': attribute type 1 has an invalid length.
[  701.524824][T18396] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3423'.
[  701.602527][T18396] netlink: 'syz.2.3423': attribute type 2 has an invalid length.
[  701.624510][T18396] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3423'.
[  702.661311][T18418] netlink: 'syz.2.3432': attribute type 4 has an invalid length.
[  702.670248][T18418] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3432'.
[  702.730820][T18418] .`: renamed from bond0 (while UP)
[  702.833333][T18423] netlink: 'syz.2.3432': attribute type 10 has an invalid length.
[  702.922437][T18423] team0: Device ipvlan1 failed to register rx_handler
[  704.565080][T18476] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode
[  704.573570][T18476] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode
[  704.919847][T18492] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3457'.
[  706.057871][T18520] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  706.077508][T18523] netlink: 'syz.3.3469': attribute type 10 has an invalid length.
[  706.086483][T18523] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3469'.
[  706.202618][T18532] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3472'.
[  706.233136][T18531] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3472'.
[  706.525582][T18553] netlink: 'syz.0.3481': attribute type 5 has an invalid length.
[  706.545736][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3480'.
[  706.607921][T18553] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3481'.
[  706.623605][T18555] netlink: 'syz.2.3479': attribute type 10 has an invalid length.
[  706.826516][T18555] team0: Port device wlan1 added
[  706.849531][T18554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  709.811955][T18667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3514'.
[  710.041721][T18667] netlink: 'syz.0.3514': attribute type 12 has an invalid length.
[  710.073243][T18667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3514'.
[  710.404489][T18679] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3518'.
[  710.797330][T18687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  710.985082][T18695] netlink: 'syz.3.3523': attribute type 1 has an invalid length.
[  710.997598][T18695] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3523'.
[  711.181844][T18701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3525'.
[  711.228156][T18699] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3525'.
[  711.600368][T18714] syzkaller0: entered promiscuous mode
[  711.606051][T18714] syzkaller0: entered allmulticast mode
[  711.617624][T18715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3526'.
[  711.934932][T18699] delete_channel: no stack
[  712.269058][T18732] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3535'.
[  713.895925][T18725] netlink: 'syz.3.3533': attribute type 10 has an invalid length.
[  713.919105][T18725] team0: Port device hsr0 added
[  714.712538][ T5782] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12
[  715.079705][T18789] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3552'.
[  715.108815][T18789] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.3552'.
[  716.207874][T18819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3563'.
[  716.766049][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  717.292366][T18835] netlink: 56847 bytes leftover after parsing attributes in process `syz.1.3568'.
[  718.166002][T18856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3575'.
[  718.237796][T18860] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3576'.
[  720.510439][T18888] syz.3.3579[18888] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  720.510608][T18888] syz.3.3579[18888] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  720.730662][T18890] netlink: 'syz.2.3585': attribute type 10 has an invalid length.
[  720.833879][T18890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  720.856112][T18890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  720.878956][T18890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  720.914982][T18890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  720.992068][T18890] team0: Port device geneve1 added
[  721.515514][T18917] netlink: 'syz.0.3592': attribute type 21 has an invalid length.
[  721.565209][T18917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3592'.
[  722.485380][T18931] netlink: 'syz.0.3596': attribute type 10 has an invalid length.
[  722.506342][T18931] veth1_macvtap: left promiscuous mode
[  722.695523][T18941] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3597'.
[  732.754245][ T5782] Bluetooth: hci0: command 0x0406 tx timeout
[  738.989268][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  739.002815][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  739.010865][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  739.020152][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  739.028877][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  739.038522][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  739.173254][T18956] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  739.187021][T18956] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  739.196117][T18956] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  739.204649][T18956] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  739.213339][T18956] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  739.226539][T18956] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  739.364220][T18960] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  739.380630][T18960] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  739.388725][T18960] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  739.399571][T18960] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  739.409864][T18960] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  739.417341][T18960] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  739.990695][T18963] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  740.002281][T18963] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  740.010887][T18963] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  740.023561][T18963] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  740.038327][T18963] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  740.045743][T18963] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  799.038551][T18977] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  799.048620][T18977] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  799.057242][T18977] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  799.067443][T18977] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  799.075419][T18977] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  799.086968][T18977] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  799.191513][T18980] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  799.207081][T18980] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  799.215357][T18980] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  799.223521][T18980] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  799.232100][T18980] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  799.240207][T18980] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  799.782963][T18985] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  799.802137][T18985] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  799.810607][T18985] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  799.823052][T18985] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  799.831042][T18985] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  799.838374][ T1285] ieee802154 phy0 wpan0: encryption failed: -22
[  799.844687][ T1285] ieee802154 phy1 wpan1: encryption failed: -22
[  799.855758][T18985] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  800.820656][T18989] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  800.837684][T18989] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  800.845610][T18989] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  800.854638][T18989] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  800.863862][T18989] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  800.871591][T18989] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  813.714113][T18991] Bluetooth: hci1: command 0x0406 tx timeout
[  831.086783][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  831.093513][    C0] rcu: 	0-....: (10069 ticks this GP) idle=08e4/1/0x4000000000000000 softirq=70202/70203 fqs=4202
[  831.105158][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  831.111680][    C0] rcu: 	 number:  1406815          0            0
[  831.118108][    C0] rcu: 	cputime:    18238      34251           65   ==> 52490(ms)
[  831.125929][    C0] rcu: 	(t=10500 jiffies g=92629 q=1859 ncpus=2)
[  831.132270][    C0] CPU: 0 PID: 18935 Comm: syz.3.3597 Not tainted syzkaller #0
[  831.139756][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  831.149844][    C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x17/0x90
[  831.156204][    C0] Code: 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 60 92 7c 7e 65 8b 0d 61 92 7c 7e <81> e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00
[  831.175875][    C0] RSP: 0018:ffffc90000006fb0 EFLAGS: 00000246
[  831.181977][    C0] RAX: ffffffff813b5407 RBX: ffffc900000070c0 RCX: 0000000000000302
[  831.190060][    C0] RDX: ffff888029400000 RSI: 0000000000000001 RDI: 0000000000000001
[  831.198058][    C0] RBP: 0000000000000001 R08: ffff888029400000 R09: 0000000000000003
[  831.206067][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000007088
[  831.214055][    C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc900000070c8
[  831.222049][    C0] FS:  00007f77144806c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  831.230997][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  831.237607][    C0] CR2: 0000000000000000 CR3: 0000000075079000 CR4: 00000000003506f0
[  831.245599][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  831.253600][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  831.261586][    C0] Call Trace:
[  831.264970][    C0]  <IRQ>
[  831.267830][    C0]  unwind_next_frame+0x1c47/0x2970
[  831.273000][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.279191][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.285427][    C0]  ? stack_trace_save+0x100/0x100
[  831.290483][    C0]  arch_stack_walk+0x144/0x190
[  831.295269][    C0]  ? preempt_schedule_irq+0xba/0x150
[  831.300600][    C0]  stack_trace_save+0xaa/0x100
[  831.305401][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  831.310550][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  831.315719][    C0]  kasan_save_stack+0x3e/0x60
[  831.320445][    C0]  ? kasan_save_stack+0x3e/0x60
[  831.325325][    C0]  ? __kasan_record_aux_stack+0xaf/0xc0
[  831.330887][    C0]  ? call_rcu+0x153/0x950
[  831.335249][    C0]  ? __dev_queue_xmit+0x97a/0x3660
[  831.340379][    C0]  ? ip6_finish_output2+0xe3d/0x1630
[  831.345794][    C0]  ? ndisc_send_skb+0xc26/0x14f0
[  831.350747][    C0]  ? addrconf_rs_timer+0x2d5/0x630
[  831.355963][    C0]  ? call_timer_fn+0x189/0x540
[  831.360914][    C0]  ? __run_timers+0x542/0x800
[  831.365612][    C0]  ? run_timer_softirq+0x67/0xf0
[  831.370570][    C0]  ? handle_softirqs+0x280/0x820
[  831.375529][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  831.380316][    C0]  ? irq_exit_rcu+0x9/0x20
[  831.384793][    C0]  ? sysvec_apic_timer_interrupt+0xa4/0xc0
[  831.390629][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.396854][    C0]  __kasan_record_aux_stack+0xaf/0xc0
[  831.402254][    C0]  ? rcuref_put+0x220/0x220
[  831.406777][    C0]  call_rcu+0x153/0x950
[  831.410965][    C0]  ? percpu_counter_set+0x1a0/0x1a0
[  831.416188][    C0]  ? rcuref_put+0x1cc/0x220
[  831.420749][    C0]  ? dst_release+0x1a0/0x1a0
[  831.425376][    C0]  ? rcu_lockdep_current_cpu_online+0x37/0x120
[  831.431565][    C0]  ? rcu_force_quiescent_state+0x230/0x230
[  831.437405][    C0]  ? rcu_read_lock_bh_held+0x7a/0x100
[  831.442809][    C0]  ? rcu_read_lock_held+0x40/0x40
[  831.447871][    C0]  ? dst_release+0x121/0x1a0
[  831.452490][    C0]  __dev_queue_xmit+0x97a/0x3660
[  831.457475][    C0]  ? __dev_queue_xmit+0x265/0x3660
[  831.462637][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  831.467874][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.474064][    C0]  ? netdev_core_pick_tx+0x340/0x340
[  831.479391][    C0]  ? neigh_resolve_output+0x4d6/0x730
[  831.484796][    C0]  ? neigh_resolve_output+0x618/0x730
[  831.490217][    C0]  ip6_finish_output2+0xe3d/0x1630
[  831.495366][    C0]  ? ip6_finish_output2+0x645/0x1630
[  831.500686][    C0]  ? ip6_mtu+0x7d/0x3f0
[  831.504863][    C0]  ? nf_hook+0x390/0x390
[  831.509239][    C0]  ? ip6_finish_output+0x57b/0x820
[  831.514399][    C0]  ndisc_send_skb+0xc26/0x14f0
[  831.519199][    C0]  ? ndisc_send_skb+0x1f5/0x14f0
[  831.524187][    C0]  ? ndisc_mc_map+0x680/0x680
[  831.528900][    C0]  ? skb_dst+0xd0/0xd0
[  831.533010][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.539203][    C0]  ? ndisc_send_rs+0x43d/0x610
[  831.544265][    C0]  addrconf_rs_timer+0x2d5/0x630
[  831.549239][    C0]  ? addrconf_disable_policy_idev+0x480/0x480
[  831.555335][    C0]  ? kasan_check_range+0x85/0x290
[  831.560391][    C0]  call_timer_fn+0x189/0x540
[  831.565029][    C0]  ? addrconf_disable_policy_idev+0x480/0x480
[  831.571122][    C0]  ? call_timer_fn+0xd2/0x540
[  831.575913][    C0]  ? __run_timers+0x800/0x800
[  831.580623][    C0]  ? addrconf_disable_policy_idev+0x480/0x480
[  831.586719][    C0]  __run_timers+0x542/0x800
[  831.591258][    C0]  ? detach_timer+0x2b0/0x2b0
[  831.595965][    C0]  ? lock_chain_count+0x20/0x20
[  831.600847][    C0]  run_timer_softirq+0x67/0xf0
[  831.605635][    C0]  handle_softirqs+0x280/0x820
[  831.610436][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  831.615235][    C0]  ? do_softirq+0x1a0/0x1a0
[  831.619837][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  831.625087][    C0]  __irq_exit_rcu+0xd3/0x190
[  831.629709][    C0]  ? irq_exit_rcu+0x20/0x20
[  831.634348][    C0]  irq_exit_rcu+0x9/0x20
[  831.638651][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  831.644312][    C0]  </IRQ>
[  831.647269][    C0]  <TASK>
[  831.650235][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.656247][    C0] RIP: 0010:preempt_schedule_irq+0xba/0x150
[  831.662178][    C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 a1 1b ce f6 e8 cc 28 ff f6 fb bf 01 00 00 00 <e8> f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f
[  831.681830][    C0] RSP: 0018:ffffc90004a67a80 EFLAGS: 00000282
[  831.687936][    C0] RAX: 0f246408a3edaa00 RBX: 0000000000000000 RCX: 0f246408a3edaa00
[  831.695938][    C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001
[  831.703936][    C0] RBP: ffffc90004a67b20 R08: ffffffff911c45ff R09: 1ffffffff22388bf
[  831.711934][    C0] R10: dffffc0000000000 R11: fffffbfff22388c0 R12: 0000000000000000
[  831.720020][    C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200094cf50
[  831.728040][    C0]  ? preempt_schedule_notrace+0x110/0x110
[  831.733810][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  831.739644][    C0]  irqentry_exit+0x67/0x70
[  831.744093][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.750111][    C0] RIP: 0010:perf_install_in_context+0x764/0x920
[  831.756381][    C0] Code: 00 4b c7 44 27 08 00 00 00 00 43 c7 44 27 10 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 84 24 00 01 00 00 0f 85 4a 01 00 00 <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 78 b0 d7 ff e9 37
[  831.776003][    C0] RSP: 0018:ffffc90004a67be0 EFLAGS: 00000246
[  831.782099][    C0] RAX: 0f246408a3edaa00 RBX: 0000000000000000 RCX: 0000000000080000
[  831.790098][    C0] RDX: ffffc90015cc9000 RSI: 000000000000d940 RDI: 000000000000d941
[  831.798094][    C0] RBP: ffffc90004a67d30 R08: ffffffff911c45ff R09: 1ffffffff22388bf
[  831.806171][    C0] R10: dffffc0000000000 R11: fffffbfff22388c0 R12: dffffc0000000000
[  831.814181][    C0] R13: ffff888029400014 R14: ffffc90004a67c60 R15: 1ffff9200094cf88
[  831.822206][    C0]  ? exclusive_event_installable+0x2c0/0x2c0
[  831.828302][    C0]  ? add_event_to_ctx+0x1180/0x1180
[  831.833529][    C0]  ? exclusive_event_installable+0xd3/0x2c0
[  831.839460][    C0]  ? anon_inode_getfile+0x109/0x1a0
[  831.844687][    C0]  ? perf_event__header_size+0x165/0x220
[  831.850346][    C0]  __se_sys_perf_event_open+0x1836/0x1c50
[  831.856112][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  831.861371][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  831.867055][    C0]  ? lock_chain_count+0x20/0x20
[  831.871940][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  831.877190][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  831.882946][    C0]  do_syscall_64+0x55/0xa0
[  831.887414][    C0]  ? clear_bhb_loop+0x40/0x90
[  831.892122][    C0]  ? clear_bhb_loop+0x40/0x90
[  831.896841][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  831.902794][    C0] RIP: 0033:0x7f771359c819
[  831.907278][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  831.926910][    C0] RSP: 002b:00007f7714480028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  831.935375][    C0] RAX: ffffffffffffffda RBX: 00007f7713816090 RCX: 00007f771359c819
[  831.943386][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  831.951391][    C0] RBP: 00007f7713632c91 R08: 0000000000000002 R09: 0000000000000000
[  831.959386][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  831.967384][    C0] R13: 00007f7713816128 R14: 00007f7713816090 R15: 00007ffc6479acf8
[  831.975402][    C0]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)