last executing test programs:

21.962014212s ago: executing program 2 (id=2144):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x25506, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe, 0x1, @perf_bp={0x0, 0x4}, 0xa081, 0x10000, 0xc, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x20, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x2, 0xee, &(0x7f0000000900)=""/238, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f00)=[{0x1, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x2, 0xb}, {0x8000002, 0x1, 0x3, 0xa}], 0x10, 0xfffffffc}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)

21.622313036s ago: executing program 1 (id=2147):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c1f0017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

21.488630217s ago: executing program 1 (id=2148):
r0 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x87}, 0x0, 0x20000035, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff4b, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000004e007f049e", 0x9}, {&(0x7f00000008c0)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800010000003bc0ab46b9bba5c600009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000200000000000000000000007d360598bb17863048e0b90e13891e19ca2e0fdc393ea5390e21bd890123b66ca097af3453b3f2f9f3213ac85528cd1231fcf5e3096411db1fa0ab1574f57f376246cc17f623124283cd6b37226f6bf69a4a97868e43b5"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r6, &(0x7f0000000740)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x2, @remote, 0x17}, 0x80, 0x0}, 0x6000084)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b"], 0x0, 0x4a}, 0x28)
r7 = perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x5, 0x81, 0xe, 0x6, 0x0, 0x8, 0x9109, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7f, 0xff0000}, 0x2080, 0x3, 0xe9be, 0x1, 0x9, 0x39d7, 0xa, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x9, 0x0, 0x20, 0x0, 0x2, 0x8000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x3542, 0x1ff, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffefffffff, r7, 0xa)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100b24, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

20.915509324s ago: executing program 0 (id=2149):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8919, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)}, 0xc4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
sendmsg$kcm(r2, 0x0, 0x0)
sendmsg(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

20.912599905s ago: executing program 2 (id=2150):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e6, 0x5, 0x10008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x110, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="0010000900"})
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000004700)=""/4137, 0x1029}, {&(0x7f0000001880)=""/127, 0x7f}], 0x4, 0x0, 0x0, 0x8000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24)

20.844903656s ago: executing program 1 (id=2151):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000001800000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

20.596258159s ago: executing program 1 (id=2153):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8919, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c0016", 0x5}], 0x1}, 0xc4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
sendmsg$kcm(r2, 0x0, 0x0)
sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000780)=ANY=[], 0x210}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)

20.595566359s ago: executing program 0 (id=2154):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000004a80)=[{&(0x7f00000043c0)="3610ab5b52bc4d575b33523644", 0xd}], 0x1, &(0x7f0000004680)=[{0x18, 0x88, 0x0, '4'}, {0x20, 0x84, 0x8, "530000000201000000"}, {0x10, 0x6, 0x10001}], 0x48}, 0x0)

20.543634989s ago: executing program 2 (id=2155):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33)
socket$kcm(0x18, 0x7, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e, 0x10001}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00627f050000000004000009000000010000009c68b8fa1a12d8eaa96dc8f83c1e8158ab755e29c80c243112d020decf79b83ca80d3eb1a5d0ef7da13b81a8915c995a1c930168cfc6a88e5ae61aebab6761208b9e58d30bbf5888d32c90c2f6b0d71350294f1cb83655d8866aa692f8c011ce1794ead22e054624ea08ff34537271f6382dd96c2b6218db0333881fad66eef4600270b8df", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100}}}], 0x20}, 0x4000080)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc)

20.221002073s ago: executing program 3 (id=2156):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c1f0017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

20.220862023s ago: executing program 0 (id=2157):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x5, 0x0, 0x1, 0x0, 0x5, 0x1, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c00000000000000"], 0x68}, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

20.220633773s ago: executing program 3 (id=2158):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x25506, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe, 0x1, @perf_bp={0x0, 0x4}, 0xa081, 0x10000, 0xc, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x20, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x2, 0xee, &(0x7f0000000900)=""/238, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f00)=[{0x1, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x2, 0xb}, {0x8000002, 0x1, 0x3, 0xa}], 0x10, 0xfffffffc}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)

20.220346883s ago: executing program 1 (id=2159):
r0 = socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x87}, 0x0, 0x20000035, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0xfffffffc, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300))
r3 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff4b, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000004e007f049e", 0x9}, {&(0x7f00000008c0)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd75, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800010000003bc0ab46b9bba5c600009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r3, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000200000000000000000000007d360598bb17863048e0b90e13891e19ca2e0fdc393ea5390e21bd890123b66ca097af3453b3f2f9f3213ac85528cd1231fcf5e3096411db1fa0ab1574f57f376246cc17f623124283cd6b37226f6bf69a4a97868e43b5"], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x6, &(0x7f0000000040), 0x4)
sendmsg$kcm(r6, &(0x7f0000000740)={&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x2, @remote, 0x17}, 0x80, 0x0}, 0x6000084)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000b"], 0x0, 0x4a}, 0x28)
r7 = perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x5, 0x81, 0xe, 0x6, 0x0, 0x8, 0x9109, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7f, 0xff0000}, 0x2080, 0x3, 0xe9be, 0x1, 0x9, 0x39d7, 0xa, 0x0, 0x10, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x9, 0x0, 0x20, 0x0, 0x2, 0x8000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x3542, 0x1ff, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0xffffffffefffffff, r7, 0xa)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x4}, 0x38)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100b24, 0x81, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)

20.069875085s ago: executing program 2 (id=2160):
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000005b80)='tasks\x00', 0x2, 0x0)
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x0, 0x32, 0x9, 0x7, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000b80))
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYRES8=r3], 0xfe33)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80000, 0x1a, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x15}, 0x2000, 0x0, 0x9, 0x7, 0x8, 0x2, 0x14, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510000002000000e8dd84d07600000095000000000000009500a50500000000d9fadcfe9a3e56815d6d92d8f93db8f045e549c11f29470d6c3ec6c7ba6205ee82b37a0d416c0963e8aa7ea3aabefb4b0fb27cfab1bdc85828ffb0f98e121d9aec6735dcc25c9fc102cc1f1d4397dde6996bfd23af4b2adebcc7c8c2d72eb470be22bf2a082226a9a2008f741d0a14e3d8f77fca34c9baeab6abaa167ad6f0a9"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x6}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x57)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="b402000000000025d707fc2715cd00c980914fd76661114c0000000000850000001c000083cce1b3e563cf787338c198ea63858dccf13f56c8d31f7c0ae5f98d73193aa065dee3a6f148e58aeb285eaf30aa9459b8d46438b010513a632ab3b7a526f3b393c224f7a74d407d3835efec3bf92caab6720b381ef8435cb97c1db3c6649f"], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0xffff0001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000002c0)=r7, 0x4)
sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x2663}, 0x20008004)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0)

19.403604553s ago: executing program 0 (id=2161):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x0], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x25, 0x1, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x88, 0x67, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

19.353224523s ago: executing program 3 (id=2162):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

19.239201395s ago: executing program 1 (id=2163):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000cc0a00000000000073013a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0})
r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r1, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="00000039c56845270000000000b7080000000000e37b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000"], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000500000000000000000000001842000004000000000000000000000018440000faffffff0000000000000000d8a41000f0ffffff1980f8ff0400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000c30800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000100820000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x1, 0x79, &(0x7f0000000640)=""/121, 0x41000, 0xf, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0x6, 0xfff}, 0x10, 0x1eef9, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0x1], &(0x7f0000000740)=[{0x4, 0x5, 0xb, 0xa}], 0x10, 0x3}, 0x94)
syz_clone(0x80, &(0x7f0000000380)="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", 0xff, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="a987bf3c7eddac63999cb09be4f6b241482d10beac")
r4 = getpid()
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]})
ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x616d, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x100, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r8], 0x0, 0x42}, 0x28)

19.017279488s ago: executing program 3 (id=2164):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000002000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

19.015585188s ago: executing program 2 (id=2165):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507", 0x1b7}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48)
recvmsg(0xffffffffffffffff, 0x0, 0x10102)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
recvmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b63d2", 0x9}, {&(0x7f00000000c0)="06081833d0062d04944103", 0xb}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x11, 0x2, 0x0)
close(r1)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8)
r4 = socket$kcm(0x11, 0x2, 0x0)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x8)
r6 = socket$kcm(0x11, 0x2, 0x300)
socket$kcm(0x29, 0x0, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8)

18.907660309s ago: executing program 0 (id=2166):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8919, 0x0)
r2 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)}, 0xc4)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xb)
ioctl$TUNSETLINK(r5, 0x400454cd, 0x30a)
sendmsg$kcm(r2, 0x0, 0x0)
sendmsg(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

18.8339362s ago: executing program 3 (id=2167):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)
setsockopt$sock_attach_bpf(r0, 0x10e, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="4c00000014006b03000000d86e6c1d001000250002000f2c1f0017d34460bc24feb556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000000", 0x4b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

18.684383142s ago: executing program 2 (id=2168):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33)
socket$kcm(0x18, 0x7, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e, 0x10001}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00627f050000000004000009000000010000009c68b8fa1a12d8eaa96dc8f83c1e8158ab755e29c80c243112d020decf79b83ca80d3eb1a5d0ef7da13b81a8915c995a1c930168cfc6a88e5ae61aebab6761208b9e58d30bbf5888d32c90c2f6b0d71350294f1cb83655d8866aa692f8c011ce1794ead22e054624ea08ff34537271f6382dd96c2b6218db0333881fad66eef4600270b8df", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100}}}], 0x20}, 0x4000080)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc)

18.632542783s ago: executing program 3 (id=2169):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x5, 0x0, 0x1, 0x0, 0x5, 0x1, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c00000000000000"], 0x68}, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

712.131µs ago: executing program 0 (id=2170):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x25506, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe, 0x1, @perf_bp={0x0, 0x4}, 0xa081, 0x10000, 0xc, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x20, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x2, 0xee, &(0x7f0000000900)=""/238, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f00)=[{0x1, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x2, 0xb}, {0x8000002, 0x1, 0x3, 0xa}], 0x10, 0xfffffffc}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)

435.791µs ago: executing program 32 (id=2170):
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x25506, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fe, 0x1, @perf_bp={0x0, 0x4}, 0xa081, 0x10000, 0xc, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0xa, 0x2, 0x73)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x20, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x2, 0xee, &(0x7f0000000900)=""/238, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f00)=[{0x1, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x2, 0xb}, {0x8000002, 0x1, 0x3, 0xa}], 0x10, 0xfffffffc}, 0x94)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0xa, 0x4, 0x8, 0xc}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)

252.951µs ago: executing program 33 (id=2163):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000cc0a00000000000073013a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r0})
r1 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r1, 0x12)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="00000039c56845270000000000b7080000000000e37b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000"], &(0x7f00000001c0)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc)
socket$kcm(0x29, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000500000000000000000000001842000004000000000000000000000018440000faffffff0000000000000000d8a41000f0ffffff1980f8ff0400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000c30800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000100820000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x1, 0x79, &(0x7f0000000640)=""/121, 0x41000, 0xf, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x2, 0x2, 0x6, 0xfff}, 0x10, 0x1eef9, 0xffffffffffffffff, 0x1, &(0x7f0000000700)=[0x1], &(0x7f0000000740)=[{0x4, 0x5, 0xb, 0xa}], 0x10, 0x3}, 0x94)
syz_clone(0x80, &(0x7f0000000380)="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", 0xff, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="a987bf3c7eddac63999cb09be4f6b241482d10beac")
r4 = getpid()
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff00c}]})
ioctl$TUNGETVNETLE(r5, 0x40107447, &(0x7f0000000180))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x616d, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x100, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r8], 0x0, 0x42}, 0x28)

104.511µs ago: executing program 34 (id=2168):
r0 = socket$kcm(0x10, 0x3, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33)
socket$kcm(0x18, 0x7, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1e, 0x10001}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48)
r4 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}})
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00627f050000000004000009000000010000009c68b8fa1a12d8eaa96dc8f83c1e8158ab755e29c80c243112d020decf79b83ca80d3eb1a5d0ef7da13b81a8915c995a1c930168cfc6a88e5ae61aebab6761208b9e58d30bbf5888d32c90c2f6b0d71350294f1cb83655d8866aa692f8c011ce1794ead22e054624ea08ff34537271f6382dd96c2b6218db0333881fad66eef4600270b8df", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r8 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010100}}}], 0x20}, 0x4000080)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r9}, 0xc)

0s ago: executing program 35 (id=2169):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x5, 0x0, 0x1, 0x0, 0x5, 0x1, 0x0, 0xfffffffd, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x5452, &(0x7f00000013c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff38)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c00000000000000"], 0x68}, 0x0)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)

kernel console output (not intermixed with test programs):

 4 has an invalid length.
[  213.861495][ T7459] netlink: 168 bytes leftover after parsing attributes in process `syz.0.486'.
[  214.084018][ T7465] netlink: 'syz.2.488': attribute type 1 has an invalid length.
[  214.113180][ T7465] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.488'.
[  214.610359][ T7480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.832002][ T7485] netlink: 'syz.0.492': attribute type 3 has an invalid length.
[  214.885386][ T7485] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.492'.
[  214.941229][ T7478] tap0: tun_chr_ioctl cmd 1074025677
[  214.993301][ T7478] tap0: linktype set to 778
[  215.743471][ T7482] netlink: 'syz.1.494': attribute type 10 has an invalid length.
[  215.826094][ T7482] team0: Device ipvlan1 failed to register rx_handler
[  216.305211][ T7505] netlink: 'syz.1.499': attribute type 1 has an invalid length.
[  216.327437][ T7505] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.499'.
[  216.456260][ T7503] tap0: tun_chr_ioctl cmd 1074025677
[  216.487796][ T7503] tap0: linktype set to 778
[  216.651586][ T7504] netlink: 'syz.0.498': attribute type 10 has an invalid length.
[  216.680138][ T7504] netlink: 55 bytes leftover after parsing attributes in process `syz.0.498'.
[  217.480020][ T7492] Bluetooth: hci0: command 0x0406 tx timeout
[  217.480061][ T7490] Bluetooth: hci1: command 0x0406 tx timeout
[  217.488147][ T7492] Bluetooth: hci2: command 0x0406 tx timeout
[  217.494862][ T7490] Bluetooth: hci3: command 0x0406 tx timeout
[  218.552520][ T7542] netlink: 'syz.3.508': attribute type 1 has an invalid length.
[  218.573983][ T7542] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.508'.
[  218.887410][ T7553] tap0: tun_chr_ioctl cmd 1074025677
[  218.937391][ T7553] tap0: linktype set to 778
[  219.193662][ T7549] syzkaller0: entered promiscuous mode
[  219.224383][ T7549] syzkaller0: entered allmulticast mode
[  222.303571][ T7568] netlink: 'syz.3.514': attribute type 10 has an invalid length.
[  222.313288][ T7568] netlink: 55 bytes leftover after parsing attributes in process `syz.3.514'.
[  222.716257][ T7590] pim6reg0: tun_chr_ioctl cmd 1074812118
[  222.936101][ T7601] tap0: tun_chr_ioctl cmd 1074025677
[  222.945132][ T7601] tap0: linktype set to 778
[  222.972265][ T7604] netlink: 'syz.0.521': attribute type 1 has an invalid length.
[  222.981214][ T7604] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.521'.
[  223.123290][ T7595] netlink: 'syz.2.518': attribute type 3 has an invalid length.
[  223.137941][ T7595] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.518'.
[  223.344203][ T7612] delete_channel: no stack
[  223.374094][ T7612] delete_channel: no stack
[  223.385404][ T7613] delete_channel: no stack
[  223.464118][ T7613] delete_channel: no stack
[  223.765989][ T7625] tap0: tun_chr_ioctl cmd 1074025677
[  223.777784][ T7625] tap0: linktype set to 778
[  223.925308][ T7620] netlink: 'syz.2.526': attribute type 3 has an invalid length.
[  223.974845][ T7620] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.526'.
[  225.405403][ T7645] netlink: 'syz.1.534': attribute type 1 has an invalid length.
[  225.440319][ T7645] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.534'.
[  225.833837][ T7656] tap0: tun_chr_ioctl cmd 1074025677
[  225.870204][ T7656] tap0: linktype set to 778
[  225.976134][ T7652] netlink: 'syz.3.536': attribute type 3 has an invalid length.
[  226.000022][ T7652] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.536'.
[  226.061672][ T7660] netlink: 'syz.0.546': attribute type 1 has an invalid length.
[  226.071612][ T7660] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.546'.
[  227.155342][ T7672] tap0: tun_chr_ioctl cmd 1074025677
[  227.176220][ T7672] tap0: linktype set to 778
[  227.233119][ T7672] netlink: 'syz.3.541': attribute type 3 has an invalid length.
[  227.310862][ T7672] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.541'.
[  227.837369][ T7689] netlink: 'syz.0.548': attribute type 1 has an invalid length.
[  227.847958][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'.
[  228.172021][ T7697] netlink: 'syz.3.549': attribute type 3 has an invalid length.
[  228.185421][ T7697] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.549'.
[  228.257300][ T7689] netlink: 'syz.0.548': attribute type 10 has an invalid length.
[  228.513434][ T7689] team0: Port device wlan1 added
[  228.519579][ T7695] tap0: tun_chr_ioctl cmd 1074025677
[  228.525294][ T7695] tap0: linktype set to 778
[  228.716478][ T7708] netlink: 'syz.0.552': attribute type 15 has an invalid length.
[  228.745811][ T7708] netlink: 168 bytes leftover after parsing attributes in process `syz.0.552'.
[  228.776799][ T7707] netlink: 'syz.0.552': attribute type 10 has an invalid length.
[  228.831634][ T7707] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.841566][ T7707] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.924224][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.932606][ T7707] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.941687][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.949069][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state
[  229.007838][ T7707] team0: Port device bridge0 added
[  229.134123][ T7715] netlink: 14 bytes leftover after parsing attributes in process `syz.1.553'.
[  229.253778][ T7715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.277622][ T7715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.301317][ T7715] bond0 (unregistering): Released all slaves
[  229.378446][ T7723] tap0: tun_chr_ioctl cmd 1074025677
[  229.391206][ T7723] tap0: linktype set to 778
[  229.489091][ T7723] netlink: 'syz.0.557': attribute type 3 has an invalid length.
[  229.497710][ T7723] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.557'.
[  229.582914][ T7728] netlink: 'syz.1.559': attribute type 19 has an invalid length.
[  229.613756][ T7728] netlink: 55 bytes leftover after parsing attributes in process `syz.1.559'.
[  229.621956][ T7730] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.560'.
[  229.693011][ T7728] sctp: [Deprecated]: syz.1.559 (pid 7728) Use of struct sctp_assoc_value in delayed_ack socket option.
[  229.693011][ T7728] Use struct sctp_sack_info instead
[  229.786475][ T7733] netlink: 'syz.2.561': attribute type 9 has an invalid length.
[  229.834740][ T7733] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.561'.
[  230.049488][ T7739] tun0: tun_chr_ioctl cmd 2147767507
[  230.404543][ T7727] delete_channel: no stack
[  230.418970][ T7744] tap0: tun_chr_ioctl cmd 1074025677
[  230.430396][ T7744] tap0: linktype set to 778
[  230.512911][ T7741] netlink: 'syz.0.564': attribute type 3 has an invalid length.
[  230.523758][ T7741] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.564'.
[  230.563782][ T7746] netlink: 'syz.3.565': attribute type 1 has an invalid length.
[  230.579213][ T7746] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.565'.
[  230.936246][ T7754] netlink: 'syz.0.568': attribute type 29 has an invalid length.
[  230.978581][ T7754] netlink: 'syz.0.568': attribute type 29 has an invalid length.
[  231.032071][ T7755] netlink: 'syz.0.568': attribute type 29 has an invalid length.
[  231.043014][ T7756] netlink: 'syz.0.568': attribute type 29 has an invalid length.
[  231.178649][ T7760] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.569'.
[  231.377076][ T7766] syzkaller0: entered allmulticast mode
[  231.420104][ T7767] netlink: 'syz.2.572': attribute type 10 has an invalid length.
[  231.548217][ T7767] team0: Port device geneve1 added
[  231.616642][ T7767] syz.2.572 (7767) used greatest stack depth: 18792 bytes left
[  231.658131][ T7771] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.573'.
[  231.993517][ T7777] tap0: tun_chr_ioctl cmd 1074025677
[  232.013313][ T7777] tap0: linktype set to 778
[  232.117864][ T7777] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.576'.
[  232.775951][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.787375][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.801929][ T7802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.814128][ T7802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.218821][ T7798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.362940][ T7798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.464036][ T7798] bond0 (unregistering): Released all slaves
[  233.636546][ T7816] tap0: tun_chr_ioctl cmd 1074025677
[  233.651090][ T7816] tap0: linktype set to 778
[  233.966086][ T7823] tap0: tun_chr_ioctl cmd 1074025677
[  233.990983][ T7823] tap0: linktype set to 778
[  234.309398][ T7835] team0: Device wg1 is of different type
[  234.843018][ T7847] __nla_validate_parse: 6 callbacks suppressed
[  234.843042][ T7847] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.598'.
[  234.876227][ T7847] validate_nla: 7 callbacks suppressed
[  234.876250][ T7847] netlink: 'syz.2.598': attribute type 33 has an invalid length.
[  234.919907][ T7847] netlink: 'syz.2.598': attribute type 3 has an invalid length.
[  234.946337][ T7847] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.598'.
[  235.202148][ T7855] pim6reg1: tun_chr_ioctl cmd 1074025677
[  235.208087][ T7855] pim6reg1: linktype set to 776
[  235.332811][ T7857] netlink: 14 bytes leftover after parsing attributes in process `syz.0.601'.
[  235.946843][ T7863] netlink: 'syz.2.606': attribute type 1 has an invalid length.
[  235.969356][ T7863] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.606'.
[  236.085521][ T7857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.202171][ T7857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.309545][ T7857] bond0 (unregistering): Released all slaves
[  236.550652][ T7875] netlink: 'syz.2.607': attribute type 3 has an invalid length.
[  236.568056][ T7875] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.607'.
[  236.654380][ T7874] tap0: tun_chr_ioctl cmd 1074025677
[  236.666201][ T7874] tap0: linktype set to 778
[  236.905817][ T7879] tap0: tun_chr_ioctl cmd 1074025677
[  236.917443][ T7879] tap0: linktype set to 778
[  237.147080][ T7881] syzkaller0: entered promiscuous mode
[  237.156242][ T7881] syzkaller0: entered allmulticast mode
[  237.434572][ T7897] netlink: 'syz.1.615': attribute type 1 has an invalid length.
[  237.455281][ T7897] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.615'.
[  237.604449][ T7906] __sock_release: fasync list not empty!
[  238.012995][ T7912] netlink: 'syz.1.627': attribute type 1 has an invalid length.
[  238.026266][ T7912] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.627'.
[  238.498050][ T7920] netlink: 'syz.1.620': attribute type 3 has an invalid length.
[  238.508932][ T7920] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.620'.
[  239.949826][ T7910] netlink: 14 bytes leftover after parsing attributes in process `syz.2.619'.
[  240.093262][ T7910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  240.115342][ T7910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  240.137479][ T7910] bond0 (unregistering): Released all slaves
[  240.167808][ T7919] tap0: tun_chr_ioctl cmd 1074025677
[  240.174704][ T7919] tap0: linktype set to 778
[  240.193811][ T7922] bridge_slave_1: left allmulticast mode
[  240.200909][ T7922] bridge_slave_1: left promiscuous mode
[  240.207275][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.264009][ T7922] bridge_slave_0: left allmulticast mode
[  240.275169][ T7922] bridge_slave_0: left promiscuous mode
[  240.286245][ T7922] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.392332][ T7922] team0: Port device bridge0 removed
[  240.605812][ T7928] tap0: tun_chr_ioctl cmd 1074025677
[  240.620011][ T7928] tap0: linktype set to 778
[  240.678226][ T7934] netlink: 196 bytes leftover after parsing attributes in process `syz.1.624'.
[  241.018947][ T7945] netlink: 'syz.2.629': attribute type 1 has an invalid length.
[  241.035810][ T7945] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.629'.
[  241.111840][ T7949] netlink: 1772 bytes leftover after parsing attributes in process `syz.3.630'.
[  241.272364][ T7953] syzkaller0: entered promiscuous mode
[  241.278367][ T7953] syzkaller0: entered allmulticast mode
[  241.727506][ T7965] netlink: 'syz.3.633': attribute type 3 has an invalid length.
[  241.756623][ T7965] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.633'.
[  241.845292][ T7960] netlink: 'syz.2.634': attribute type 12 has an invalid length.
[  241.860023][ T7960] netlink: 132 bytes leftover after parsing attributes in process `syz.2.634'.
[  242.025350][ T7968] netlink: 'syz.2.635': attribute type 9 has an invalid length.
[  242.034542][ T7968] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.635'.
[  243.857285][ T7964] tap0: tun_chr_ioctl cmd 1074025677
[  243.863887][ T7964] tap0: linktype set to 778
[  244.166568][ T7974] netlink: 'syz.1.637': attribute type 6 has an invalid length.
[  244.192648][ T7974] netlink: 168 bytes leftover after parsing attributes in process `syz.1.637'.
[  244.340757][ T7977] tap0: tun_chr_ioctl cmd 1074025677
[  244.357168][ T7977] tap0: linktype set to 778
[  247.392883][ T7992] netlink: 'syz.2.642': attribute type 1 has an invalid length.
[  247.412653][ T7992] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.642'.
[  248.120758][ T8007] syzkaller0: entered promiscuous mode
[  248.126752][ T8007] syzkaller0: entered allmulticast mode
[  248.148438][ T8001] tap0: tun_chr_ioctl cmd 1074025677
[  248.171922][ T8001] tap0: linktype set to 778
[  251.014465][ T8012] netlink: 14 bytes leftover after parsing attributes in process `syz.3.649'.
[  251.576768][ T8033] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.651'.
[  251.799017][ T8033] netlink: zone id is out of range
[  251.841732][ T8033] netlink: zone id is out of range
[  251.872851][ T8033] netlink: zone id is out of range
[  251.885217][ T8040] netlink: 'syz.1.655': attribute type 1 has an invalid length.
[  251.902275][ T8040] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.655'.
[  251.919756][ T8033] netlink: zone id is out of range
[  251.959852][ T8033] netlink: zone id is out of range
[  251.984555][ T8033] netlink: zone id is out of range
[  252.024548][ T8033] netlink: zone id is out of range
[  252.052212][ T8033] netlink: zone id is out of range
[  252.080181][ T8033] netlink: zone id is out of range
[  252.085795][ T8033] netlink: zone id is out of range
[  252.708527][ T8059] tap0: tun_chr_ioctl cmd 1074025677
[  252.715753][ T8059] tap0: linktype set to 778
[  253.665945][ T8081] netlink: 'syz.3.666': attribute type 1 has an invalid length.
[  253.695739][ T8081] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.666'.
[  254.004115][ T8084] syzkaller0: entered promiscuous mode
[  254.019056][ T8084] syzkaller0: entered allmulticast mode
[  256.285373][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  256.294306][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  256.857324][ T8111] tap0: tun_chr_ioctl cmd 1074025677
[  256.865610][ T8111] tap0: linktype set to 778
[  256.946435][ T8115] tap0: tun_chr_ioctl cmd 1074025677
[  256.954805][ T8115] tap0: linktype set to 778
[  256.976494][ T8115] netlink: 'syz.3.674': attribute type 3 has an invalid length.
[  257.008246][ T8115] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.674'.
[  257.891108][ T8128] netlink: 'syz.3.679': attribute type 3 has an invalid length.
[  257.904944][ T8128] netlink: 137972 bytes leftover after parsing attributes in process `syz.3.679'.
[  260.729287][ T8153] tap0: tun_chr_ioctl cmd 1074025677
[  260.750786][ T8153] tap0: linktype set to 778
[  260.807453][ T8153] netlink: 'syz.2.685': attribute type 3 has an invalid length.
[  260.826436][ T8153] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.685'.
[  260.966842][ T8158] tap0: tun_chr_ioctl cmd 1074025677
[  260.990122][ T8158] tap0: linktype set to 778
[  261.619933][ T8166] tap0: tun_chr_ioctl cmd 1074025677
[  261.675689][ T8166] tap0: linktype set to 778
[  262.408274][ T8178] netlink: 'syz.3.693': attribute type 10 has an invalid length.
[  262.463633][ T8182] FAULT_INJECTION: forcing a failure.
[  262.463633][ T8182] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.499850][ T8182] CPU: 1 PID: 8182 Comm: syz.1.687 Not tainted syzkaller #0
[  262.507533][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  262.517747][ T8182] Call Trace:
[  262.521320][ T8182]  <TASK>
[  262.525412][ T8182]  dump_stack_lvl+0x18c/0x250
[  262.531797][ T8182]  ? show_regs_print_info+0x20/0x20
[  262.538112][ T8182]  ? load_image+0x420/0x420
[  262.545473][ T8182]  ? __might_fault+0xaa/0x120
[  262.551792][ T8182]  ? __lock_acquire+0x7d80/0x7d80
[  262.557569][ T8182]  should_fail_ex+0x394/0x4c0
[  262.563935][ T8182]  _copy_from_user+0x2f/0xe0
[  262.569303][ T8182]  __sys_bpf+0x23e/0x890
[  262.576793][ T8182]  ? bpf_link_show_fdinfo+0x390/0x390
[  262.583919][ T8182]  ? lock_chain_count+0x20/0x20
[  262.590285][ T8182]  __x64_sys_bpf+0x7c/0x90
[  262.596314][ T8182]  do_syscall_64+0x55/0xb0
[  262.602363][ T8182]  ? clear_bhb_loop+0x40/0x90
[  262.608427][ T8182]  ? clear_bhb_loop+0x40/0x90
[  262.613531][ T8182]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  262.621065][ T8182] RIP: 0033:0x7fea7f79ce59
[  262.626954][ T8182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  262.652704][ T8182] RSP: 002b:00007fea805c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  262.662909][ T8182] RAX: ffffffffffffffda RBX: 00007fea7fa16180 RCX: 00007fea7f79ce59
[  262.673466][ T8182] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  262.681829][ T8182] RBP: 00007fea805c2090 R08: 0000000000000000 R09: 0000000000000000
[  262.690745][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.699953][ T8182] R13: 00007fea7fa16218 R14: 00007fea7fa16180 R15: 00007ffe45ec8988
[  262.709326][ T8182]  </TASK>
[  262.903988][ T8178] team0: Device wg1 is of different type
[  263.089487][ T8176] tap0: tun_chr_ioctl cmd 1074025677
[  263.100885][ T8176] tap0: linktype set to 778
[  263.391407][ T8189] TCP: TCP_TX_DELAY enabled
[  263.587374][ T8187] netlink: 'syz.2.696': attribute type 3 has an invalid length.
[  263.598773][ T8187] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.696'.
[  263.617423][ T8192] tap0: tun_chr_ioctl cmd 1074025677
[  263.640864][ T8192] tap0: linktype set to 778
[  263.686949][ T8192] netlink: 'syz.1.697': attribute type 3 has an invalid length.
[  263.750591][ T8192] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.697'.
[  264.138735][ T8197] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.698'.
[  264.577632][ T8209] netlink: 'syz.3.703': attribute type 58 has an invalid length.
[  264.591506][ T8209] netlink: 144 bytes leftover after parsing attributes in process `syz.3.703'.
[  264.736441][ T8213] netlink: 'syz.3.704': attribute type 9 has an invalid length.
[  264.752770][ T8213] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.704'.
[  265.030925][ T8216] netlink: 'syz.3.704': attribute type 9 has an invalid length.
[  265.042146][ T8216] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.704'.
[  265.431040][ T8225] netlink: 'syz.1.707': attribute type 6 has an invalid length.
[  265.446615][ T8225] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.707'.
[  265.986631][ T8237] tap0: tun_chr_ioctl cmd 1074025677
[  266.011594][ T8237] tap0: linktype set to 778
[  266.134287][ T8234] netlink: 'syz.0.708': attribute type 3 has an invalid length.
[  266.155151][ T8234] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.708'.
[  266.681479][ T8241] tap0: tun_chr_ioctl cmd 1074025677
[  266.687291][ T8241] tap0: linktype set to 778
[  266.717518][ T8241] netlink: 'syz.1.710': attribute type 3 has an invalid length.
[  266.746841][ T8241] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.710'.
[  267.017297][ T8254] tap0: tun_chr_ioctl cmd 1074025677
[  267.041966][ T8254] tap0: linktype set to 778
[  267.247267][ T8243] syzkaller0: entered promiscuous mode
[  267.259975][ T8243] syzkaller0: entered allmulticast mode
[  268.871966][ T8282] netlink: 'syz.1.722': attribute type 3 has an invalid length.
[  268.883553][ T8282] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.722'.
[  269.987726][ T8266] netlink: 'syz.0.718': attribute type 5 has an invalid length.
[  270.020359][ T8281] tap0: tun_chr_ioctl cmd 1074025677
[  270.029359][ T8281] tap0: linktype set to 778
[  270.221190][ T8284] tap0: tun_chr_ioctl cmd 1074025677
[  270.226769][ T8284] tap0: linktype set to 778
[  270.362597][ T8291] netlink: 128 bytes leftover after parsing attributes in process `syz.1.726'.
[  270.403088][ T8291] net_ratelimit: 216 callbacks suppressed
[  270.403108][ T8291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  270.434541][ T8291] netlink: 156 bytes leftover after parsing attributes in process `syz.1.726'.
[  270.728419][ T8299] tap0: tun_chr_ioctl cmd 1074025677
[  270.763379][ T8299] tap0: linktype set to 778
[  271.422133][ T8315] tap0: tun_chr_ioctl cmd 1074025677
[  271.428802][ T8315] tap0: linktype set to 778
[  271.447183][ T8315] netlink: 'syz.3.734': attribute type 3 has an invalid length.
[  271.457779][ T8315] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.734'.
[  271.946763][ T8329] netlink: 'syz.1.739': attribute type 29 has an invalid length.
[  271.972977][ T8329] netlink: 'syz.1.739': attribute type 29 has an invalid length.
[  272.036900][ T8332] netlink: 'syz.1.739': attribute type 29 has an invalid length.
[  272.047574][ T8329] netlink: 'syz.1.739': attribute type 29 has an invalid length.
[  272.077693][ T8329] netlink: 'syz.1.739': attribute type 21 has an invalid length.
[  272.105927][ T8329] netlink: 176 bytes leftover after parsing attributes in process `syz.1.739'.
[  272.380198][ T8339] tap0: tun_chr_ioctl cmd 1074025677
[  272.415679][ T8339] tap0: linktype set to 778
[  272.755048][ T8341] netlink: 'syz.2.744': attribute type 3 has an invalid length.
[  272.859447][ T8347] tap0: tun_chr_ioctl cmd 1074025677
[  272.910326][ T8347] tap0: linktype set to 778
[  272.930892][ T8350] netlink: 'syz.3.746': attribute type 3 has an invalid length.
[  272.940453][ T8350] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.746'.
[  273.575699][ T8362] tap0: tun_chr_ioctl cmd 1074025677
[  273.621982][ T8362] tap0: linktype set to 778
[  273.657050][ T8368] netlink: 'syz.1.751': attribute type 10 has an invalid length.
[  273.878425][ T8368] geneve0: entered promiscuous mode
[  274.232437][ T8378] tap0: tun_chr_ioctl cmd 1074025677
[  274.248508][ T8378] tap0: linktype set to 778
[  274.486338][ T8382] netlink: 'syz.0.757': attribute type 3 has an invalid length.
[  275.165017][ T8403] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.764'.
[  275.175574][ T8403] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.764'.
[  275.998004][ T8414] tap0: tun_chr_ioctl cmd 1074025677
[  276.022173][ T8414] tap0: linktype set to 778
[  276.072284][ T8413] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.768'.
[  276.526292][ T8421] validate_nla: 1 callbacks suppressed
[  276.526312][ T8421] netlink: 'syz.0.771': attribute type 21 has an invalid length.
[  276.566215][ T8421] netlink: 164 bytes leftover after parsing attributes in process `syz.0.771'.
[  276.747387][ T8422] netlink: 'syz.3.770': attribute type 3 has an invalid length.
[  277.430514][ T8441] tap0: tun_chr_ioctl cmd 1074025677
[  277.437471][ T8441] tap0: linktype set to 778
[  277.653481][ T8445] tap0: tun_chr_ioctl cmd 1074025677
[  277.669125][ T8445] tap0: linktype set to 778
[  277.727333][ T8448] netlink: 'syz.0.780': attribute type 10 has an invalid length.
[  277.793970][ T8445] netlink: 'syz.1.779': attribute type 3 has an invalid length.
[  277.810417][ T8445] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.779'.
[  278.479986][ T8452] netlink: 'syz.3.782': attribute type 33 has an invalid length.
[  278.521406][ T8452] netlink: 152 bytes leftover after parsing attributes in process `syz.3.782'.
[  278.544937][ T8452] `: renamed from syz_tun (while UP)
[  279.112379][ T8468] netlink: 'syz.3.787': attribute type 11 has an invalid length.
[  279.123046][ T8468] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.787'.
[  280.417789][ T8469] netlink: 'syz.1.785': attribute type 3 has an invalid length.
[  280.966527][ T8489] tap0: tun_chr_ioctl cmd 1074025677
[  280.978417][ T8489] tap0: linktype set to 778
[  281.043231][ T8489] netlink: 'syz.1.793': attribute type 3 has an invalid length.
[  281.056608][ T8489] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.793'.
[  281.614893][ T8495] tap0: tun_chr_ioctl cmd 1074025677
[  281.628645][ T8495] tap0: linktype set to 778
[  281.921497][ T8507] syzkaller0: entered promiscuous mode
[  281.928255][ T8507] syzkaller0: entered allmulticast mode
[  281.987318][ T8507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.807'.
[  282.055301][ T8507] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.807'.
[  282.283191][ T8512] tap0: tun_chr_ioctl cmd 1074025677
[  282.291977][ T8512] tap0: linktype set to 778
[  282.934604][ T8522] netlink: 'syz.1.804': attribute type 1 has an invalid length.
[  282.944681][ T8522] netlink: 159444 bytes leftover after parsing attributes in process `syz.1.804'.
[  284.425005][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.802'.
[  284.474305][ T8521] netlink: 'syz.1.804': attribute type 13 has an invalid length.
[  284.505634][ T8521] netlink: 168 bytes leftover after parsing attributes in process `syz.1.804'.
[  284.759184][ T8534] tap0: tun_chr_ioctl cmd 1074025677
[  284.840035][ T8534] tap0: linktype set to 778
[  284.909202][ T8526] netlink: 'syz.0.806': attribute type 3 has an invalid length.
[  284.973287][ T8526] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.806'.
[  285.026456][ T8538] tap0: tun_chr_ioctl cmd 1074025677
[  285.034826][ T8538] tap0: linktype set to 778
[  285.662002][ T8540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  285.671285][ T8540] IPv6: NLM_F_CREATE should be set when creating new route
[  285.679130][ T8540] IPv6: NLM_F_CREATE should be set when creating new route
[  285.686978][ T8540] IPv6: NLM_F_CREATE should be set when creating new route
[  285.757221][ T8541] netlink: 'syz.1.811': attribute type 9 has an invalid length.
[  285.792649][ T8541] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.811'.
[  285.838315][ T8548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.814'.
[  285.973013][ T8540] netlink: 'syz.1.811': attribute type 9 has an invalid length.
[  285.997684][ T8540] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.811'.
[  286.526423][ T8564] tap0: tun_chr_ioctl cmd 1074025677
[  286.539949][ T8564] tap0: linktype set to 778
[  286.797578][ T8571] tap0: tun_chr_ioctl cmd 1074025677
[  286.811628][ T8571] tap0: linktype set to 778
[  286.882089][ T8571] netlink: 'syz.1.821': attribute type 3 has an invalid length.
[  286.899240][ T8571] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.821'.
[  287.673497][ T8587] netlink: 'syz.1.826': attribute type 1 has an invalid length.
[  287.700020][ T8587] netlink: 208312 bytes leftover after parsing attributes in process `syz.1.826'.
[  287.730601][ T8590] netlink: 'syz.2.827': attribute type 1 has an invalid length.
[  287.738646][ T8590] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.827'.
[  288.128726][ T8599] tap0: tun_chr_ioctl cmd 1074025677
[  288.149269][ T8599] tap0: linktype set to 778
[  288.427238][ T8610] nr0: tun_chr_ioctl cmd 2148553947
[  288.533954][ T8615] netlink: 'syz.2.836': attribute type 1 has an invalid length.
[  288.546990][ T8615] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.836'.
[  288.672260][ T8613] tap0: tun_chr_ioctl cmd 1074025677
[  288.678460][ T8613] tap0: linktype set to 778
[  288.738549][ T8618] netlink: 'syz.3.834': attribute type 3 has an invalid length.
[  288.788071][ T8618] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.834'.
[  289.711228][ T8632] netlink: 'syz.1.842': attribute type 1 has an invalid length.
[  289.731288][ T8632] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.842'.
[  290.549400][ T8660] tap0: tun_chr_ioctl cmd 1074025677
[  290.601376][ T8660] tap0: linktype set to 778
[  290.633066][ T8660] netlink: 'syz.1.852': attribute type 3 has an invalid length.
[  290.646166][ T8660] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.852'.
[  290.823019][ T8664] tap0: tun_chr_ioctl cmd 1074025677
[  290.857216][ T8664] tap0: linktype set to 778
[  291.215765][ T8678] netlink: 'syz.0.858': attribute type 1 has an invalid length.
[  291.234449][ T8678] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.858'.
[  291.319575][ T8683] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.861'.
[  291.378713][ T8680] tap0: tun_chr_ioctl cmd 1074025677
[  291.401651][ T8680] tap0: linktype set to 778
[  291.745025][ T8692] tap0: tun_chr_ioctl cmd 1074025677
[  291.752809][ T8692] tap0: linktype set to 778
[  291.817485][ T8692] netlink: 'syz.0.864': attribute type 3 has an invalid length.
[  291.826565][ T8692] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.864'.
[  292.828892][ T8705] tap0: tun_chr_ioctl cmd 1074025677
[  292.837649][ T8705] tap0: linktype set to 778
[  293.098155][ T8716] netlink: 'syz.2.873': attribute type 1 has an invalid length.
[  293.118569][ T8716] netlink: 'syz.2.873': attribute type 3 has an invalid length.
[  293.129024][ T8716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.873'.
[  293.316299][ T8732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.877'.
[  293.345901][ T8720] netlink: 'syz.3.874': attribute type 3 has an invalid length.
[  293.380134][ T8720] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.874'.
[  294.393617][ T8758] tap0: tun_chr_ioctl cmd 1074025677
[  294.399252][ T8758] tap0: linktype set to 778
[  294.450438][ T8748] netlink: 76 bytes leftover after parsing attributes in process `syz.3.881'.
[  294.506377][ T8752] netlink: 132 bytes leftover after parsing attributes in process `syz.3.881'.
[  294.721307][ T8771] netlink: 188 bytes leftover after parsing attributes in process `syz.0.887'.
[  295.054007][ T8778] tap0: tun_chr_ioctl cmd 1074025677
[  295.077564][ T8778] tap0: linktype set to 778
[  295.147092][ T8778] netlink: 'syz.1.889': attribute type 3 has an invalid length.
[  295.201194][ T8778] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.889'.
[  296.071599][ T8801] tun0: tun_chr_ioctl cmd 2147767507
[  296.299491][ T8799] netlink: 76 bytes leftover after parsing attributes in process `syz.0.897'.
[  296.334148][ T8799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.897'.
[  297.265115][ T8817] netlink: 'syz.3.902': attribute type 3 has an invalid length.
[  297.309106][ T8817] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.902'.
[  297.355774][ T8816] tap0: tun_chr_ioctl cmd 1074025677
[  297.366444][ T8816] tap0: linktype set to 778
[  297.893024][ T8833] netlink: 'syz.0.909': attribute type 1 has an invalid length.
[  298.064811][ T8839] Q±6ã�`Ò˜: renamed from lo (while UP)
[  298.130532][ T8829] __nla_validate_parse: 3 callbacks suppressed
[  298.130569][ T8829] netlink: 76 bytes leftover after parsing attributes in process `syz.2.908'.
[  298.174907][ T8841] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  298.263881][ T8829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.908'.
[  298.637452][ T8851] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  298.672640][ T8851] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  298.833440][ T8850] tap0: tun_chr_ioctl cmd 1074025677
[  298.872766][ T8850] tap0: linktype set to 778
[  298.962070][ T8850] netlink: 'syz.2.915': attribute type 3 has an invalid length.
[  298.983189][ T8850] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.915'.
[  299.029451][ T8856] can: request_module (can-proto-0) failed.
[  299.375614][ T8867] veth1_macvtap: entered allmulticast mode
[  300.285418][ T8881] netlink: 'syz.1.922': attribute type 28 has an invalid length.
[  300.295793][ T8881] netlink: 'syz.1.922': attribute type 29 has an invalid length.
[  300.304535][ T8881] netlink: 132 bytes leftover after parsing attributes in process `syz.1.922'.
[  300.798305][ T8892] tap0: tun_chr_ioctl cmd 1074025677
[  300.808231][ T8892] tap0: linktype set to 778
[  300.854391][ T8892] netlink: 'syz.0.928': attribute type 3 has an invalid length.
[  300.862887][ T8892] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.928'.
[  301.098651][ T8903] netlink: 'syz.3.933': attribute type 5 has an invalid length.
[  302.347361][ T8922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'.
[  302.418004][ T8922] netlink: 60 bytes leftover after parsing attributes in process `syz.2.938'.
[  302.552058][ T8922] netlink: 128 bytes leftover after parsing attributes in process `syz.2.938'.
[  302.577009][ T8922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  302.714889][ T8927] tap0: tun_chr_ioctl cmd 1074025677
[  302.731420][ T8927] tap0: linktype set to 778
[  302.786492][ T8927] netlink: 'syz.3.940': attribute type 3 has an invalid length.
[  302.800743][ T8927] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.940'.
[  303.055665][ T8936] netlink: 'syz.3.943': attribute type 29 has an invalid length.
[  303.126948][ T8934] tap0: tun_chr_ioctl cmd 1074025677
[  303.141331][ T8934] tap0: linktype set to 778
[  303.149097][ T8936] netlink: 'syz.3.943': attribute type 29 has an invalid length.
[  303.161894][ T8939] netlink: 'syz.3.943': attribute type 10 has an invalid length.
[  303.175895][ T8939] geneve0: entered promiscuous mode
[  304.755972][ T8966] tap0: tun_chr_ioctl cmd 1074025677
[  304.776200][ T8966] tap0: linktype set to 778
[  304.868983][ T8963] netlink: 'syz.3.951': attribute type 3 has an invalid length.
[  304.892440][ T8963] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.951'.
[  305.032355][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.954'.
[  305.048074][ T8972] bridge_slave_0: entered allmulticast mode
[  305.254468][ T8979] netlink: 179636 bytes leftover after parsing attributes in process `syz.3.956'.
[  305.304019][ T8979] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  305.536380][ T8985] netlink: 'syz.2.958': attribute type 1 has an invalid length.
[  305.565584][ T8985] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.958'.
[  307.076162][ T9003] tap0: tun_chr_ioctl cmd 1074025677
[  307.083390][ T9003] tap0: linktype set to 778
[  307.131891][ T9003] netlink: 'syz.2.964': attribute type 3 has an invalid length.
[  307.143071][ T9003] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.964'.
[  307.656612][ T9015] netlink: 'syz.0.968': attribute type 33 has an invalid length.
[  307.667116][ T9015] netlink: 152 bytes leftover after parsing attributes in process `syz.0.968'.
[  307.677513][ T9015] `: renamed from ip6tnl0 (while UP)
[  307.693198][ T9015] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  308.208930][ T9026] netlink: 'syz.1.969': attribute type 10 has an invalid length.
[  308.252833][ T9026] team0: Device ipvlan1 failed to register rx_handler
[  308.635204][ T9037] tap0: tun_chr_ioctl cmd 1074025677
[  308.642943][ T9037] tap0: linktype set to 778
[  309.165443][ T9051] tap0: tun_chr_ioctl cmd 1074025677
[  309.200515][ T9051] tap0: linktype set to 778
[  309.285906][ T9051] netlink: 'syz.0.978': attribute type 3 has an invalid length.
[  309.297038][ T9051] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.978'.
[  309.419844][ T9061] netlink: 'syz.3.981': attribute type 21 has an invalid length.
[  309.528129][ T9064] netlink: 'syz.2.982': attribute type 1 has an invalid length.
[  309.624301][ T9064] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.982'.
[  309.668590][ T9068] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.982'.
[  309.701812][ T9070] netlink: 'syz.3.981': attribute type 29 has an invalid length.
[  309.722066][ T9065] netlink: 'syz.3.981': attribute type 21 has an invalid length.
[  309.744612][ T9065] netlink: 'syz.3.981': attribute type 22 has an invalid length.
[  309.799607][ T9065] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.981'.
[  311.554854][ T9111] validate_nla: 3 callbacks suppressed
[  311.554871][ T9111] netlink: 'syz.1.991': attribute type 3 has an invalid length.
[  311.584181][ T9105] tap0: tun_chr_ioctl cmd 1074025677
[  311.597187][ T9105] tap0: linktype set to 778
[  311.613688][ T9111] __nla_validate_parse: 1 callbacks suppressed
[  311.613715][ T9111] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.991'.
[  311.956755][ T9115] sit0: left promiscuous mode
[  312.447802][ T9123] sit0: entered promiscuous mode
[  312.685919][ T9135] tap0: tun_chr_ioctl cmd 1074025677
[  312.718083][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  312.731498][ T9135] tap0: linktype set to 778
[  312.741476][ T9140] netlink: 'syz.2.1001': attribute type 27 has an invalid length.
[  312.749403][ T9140] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1001'.
[  312.808432][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  312.859253][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  312.868291][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  312.892268][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  312.928357][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  313.006875][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  313.056638][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  313.077774][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  313.100470][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  313.134669][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  313.180002][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  313.352151][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  313.440073][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  313.496493][ T9139] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  313.525582][ T9139] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1001'.
[  313.629875][ T9153] tap0: tun_chr_ioctl cmd 1074025677
[  313.636331][ T9153] tap0: linktype set to 778
[  317.727735][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  317.735306][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  318.116718][ T9186] validate_nla: 2 callbacks suppressed
[  318.116742][ T9186] netlink: 'syz.2.1016': attribute type 1 has an invalid length.
[  318.131061][ T9186] __nla_validate_parse: 2 callbacks suppressed
[  318.131078][ T9186] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1016'.
[  319.802947][ T9176] netlink: 'syz.1.1015': attribute type 10 has an invalid length.
[  319.812304][ T9176] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.822197][ T9176] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.833088][ T9176] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.842262][ T9176] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.861207][ T9176] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  319.882212][ T9176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  319.898130][ T9176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  319.907475][ T9176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  319.924519][ T9176] team0: Port device geneve1 added
[  319.931264][ T9180] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1013'.
[  319.960315][ T9183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1013'.
[  320.231898][ T9197] tap0: tun_chr_ioctl cmd 1074025677
[  320.238649][ T9197] tap0: linktype set to 778
[  320.347273][ T9197] netlink: 'syz.0.1019': attribute type 3 has an invalid length.
[  320.403927][ T9197] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1019'.
[  320.556044][ T9205] netlink: 'syz.2.1022': attribute type 3 has an invalid length.
[  320.579954][ T9205] netlink: 'syz.2.1022': attribute type 4 has an invalid length.
[  320.594088][ T9205] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.1022'.
[  321.135448][ T9218] netlink: 'syz.2.1027': attribute type 1 has an invalid length.
[  321.160058][ T9218] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1027'.
[  321.739086][ T9229] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1029'.
[  321.855902][ T9225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1029'.
[  322.235495][ T9239] tap0: tun_chr_ioctl cmd 1074025677
[  322.246828][ T9244] netlink: 'syz.1.1032': attribute type 3 has an invalid length.
[  322.258264][ T9239] tap0: linktype set to 778
[  322.277010][ T9244] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1032'.
[  322.720916][ T9251] netlink: 'syz.1.1037': attribute type 1 has an invalid length.
[  322.749864][ T9251] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1037'.
[  322.869008][ T9256] netlink: 'syz.3.1038': attribute type 1 has an invalid length.
[  324.223166][ T9269] __nla_validate_parse: 1 callbacks suppressed
[  324.223202][ T9269] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1042'.
[  324.288894][ T9269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1042'.
[  324.563229][ T9284] tap0: tun_chr_ioctl cmd 1074025677
[  324.585672][ T9284] tap0: linktype set to 778
[  324.637407][ T9279] netlink: 'syz.3.1045': attribute type 3 has an invalid length.
[  324.711635][ T9279] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1045'.
[  324.857498][ T9296] netlink: 'syz.0.1050': attribute type 1 has an invalid length.
[  324.893564][ T9296] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1050'.
[  325.676724][ T9316] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1055'.
[  326.415739][ T9332] netlink: 'syz.2.1061': attribute type 1 has an invalid length.
[  326.479932][ T9332] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1061'.
[  327.083372][ T9347] tap0: tun_chr_ioctl cmd 1074025677
[  327.127436][ T9347] tap0: linktype set to 778
[  327.240646][ T9354] netlink: 'syz.3.1066': attribute type 1 has an invalid length.
[  327.248833][ T9354] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1066'.
[  328.250901][ T9364] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1068'.
[  328.309962][ T9365] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1068'.
[  328.351657][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1069'.
[  328.753796][ T9373] netlink: 'syz.2.1071': attribute type 29 has an invalid length.
[  328.777740][ T9373] netlink: 'syz.2.1071': attribute type 29 has an invalid length.
[  329.043611][ T9377] netlink: 'syz.3.1073': attribute type 1 has an invalid length.
[  329.200809][ T9379] netlink: 'syz.2.1074': attribute type 21 has an invalid length.
[  329.213588][ T9379] netlink: 'syz.2.1074': attribute type 6 has an invalid length.
[  329.255598][ T9379] __nla_validate_parse: 2 callbacks suppressed
[  329.255618][ T9379] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1074'.
[  329.368550][ T9383] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1075'.
[  329.402756][ T9383] netlink: 'syz.0.1075': attribute type 28 has an invalid length.
[  329.413054][ T9383] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1075'.
[  329.647082][ T9388] validate_nla: 1 callbacks suppressed
[  329.647105][ T9388] netlink: 'syz.3.1077': attribute type 1 has an invalid length.
[  329.671034][ T9388] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1077'.
[  329.924830][ T9398] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1079'.
[  330.077400][ T9390] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1079'.
[  330.327978][ T9403] tap0: tun_chr_ioctl cmd 1074025677
[  330.371180][ T9403] tap0: linktype set to 778
[  330.452088][ T9403] netlink: 'syz.3.1082': attribute type 3 has an invalid length.
[  330.489836][ T9403] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1082'.
[  330.529440][ T9413] tap0: tun_chr_ioctl cmd 1074025677
[  330.544377][ T9413] tap0: linktype set to 778
[  330.612181][ T9407] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1081'.
[  330.657593][ T9407] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1081'.
[  331.009532][ T9417] netlink: 'syz.3.1085': attribute type 21 has an invalid length.
[  331.023444][ T9417] netlink: 'syz.3.1085': attribute type 6 has an invalid length.
[  331.050136][ T9417] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1085'.
[  331.498075][ T9436] netlink: 'syz.0.1090': attribute type 1 has an invalid length.
[  332.344735][ T9458] netlink: 'syz.3.1094': attribute type 3 has an invalid length.
[  332.420252][ T9455] tap0: tun_chr_ioctl cmd 1074025677
[  332.428078][ T9455] tap0: linktype set to 778
[  332.936380][ T9466] netlink: 'syz.1.1100': attribute type 21 has an invalid length.
[  332.970014][ T9466] netlink: 'syz.1.1100': attribute type 6 has an invalid length.
[  333.405361][ T9476] netlink: 'syz.0.1104': attribute type 3 has an invalid length.
[  335.104282][ T9497] __nla_validate_parse: 8 callbacks suppressed
[  335.104323][ T9497] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1111'.
[  335.259404][ T9497] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1111'.
[  335.293722][ T9498] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1111'.
[  335.329288][ T9497] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1111'.
[  335.472914][ T9497] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1111'.
[  336.817944][ T9548] tap0: tun_chr_ioctl cmd 1074025677
[  336.871938][ T9548] tap0: linktype set to 778
[  337.011197][ T9546] netlink: 'syz.0.1115': attribute type 3 has an invalid length.
[  337.025793][ T9546] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1115'.
[  338.863975][ T9576] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1126'.
[  338.929985][ T9576] bridge_slave_1: default FDB implementation only supports local addresses
[  339.309563][ T9581] netlink: 'syz.1.1125': attribute type 1 has an invalid length.
[  339.328702][ T9581] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1125'.
[  339.761158][ T9587] tap0: tun_chr_ioctl cmd 1074025677
[  339.768697][ T9587] tap0: linktype set to 778
[  339.905724][ T9597] tap0: tun_chr_ioctl cmd 1074025677
[  339.924308][ T9597] tap0: linktype set to 778
[  339.944398][ T9587] netlink: 'syz.3.1129': attribute type 3 has an invalid length.
[  339.969954][ T9587] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1129'.
[  340.019369][ T9597] netlink: 'syz.1.1133': attribute type 3 has an invalid length.
[  340.051179][ T9597] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1133'.
[  340.207910][ T9602] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1132'.
[  340.337968][ T9595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1132'.
[  340.650307][ T9610] tap0: tun_chr_ioctl cmd 1074025677
[  340.659440][ T9610] tap0: linktype set to 778
[  341.067772][ T9621] netlink: 'syz.2.1140': attribute type 11 has an invalid length.
[  341.078716][ T9621] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1140'.
[  341.194658][ T9621] netlink: 'syz.2.1140': attribute type 13 has an invalid length.
[  341.208625][ T9621] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1140'.
[  341.500775][ T9632] tap0: tun_chr_ioctl cmd 1074025677
[  341.510774][ T9632] tap0: linktype set to 778
[  341.555379][ T9632] netlink: 'syz.3.1144': attribute type 3 has an invalid length.
[  341.578577][ T9632] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1144'.
[  341.669772][ T9634] team0: Port device team_slave_0 removed
[  341.809461][ T9638] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1146'.
[  341.843996][ T9638] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1146'.
[  342.106932][ T9646] netlink: 'syz.3.1149': attribute type 9 has an invalid length.
[  342.115380][ T9646] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1149'.
[  342.213160][ T9647] netlink: 'syz.3.1149': attribute type 9 has an invalid length.
[  342.222903][ T9647] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1149'.
[  342.538094][ T9652] netlink: 'syz.2.1151': attribute type 1 has an invalid length.
[  342.547276][ T9652] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1151'.
[  343.372952][ T9672] tap0: tun_chr_ioctl cmd 1074025677
[  343.403035][ T9672] tap0: linktype set to 778
[  343.576303][ T9677] netlink: 'syz.0.1159': attribute type 7 has an invalid length.
[  343.780684][ T9681] netlink: 'syz.0.1161': attribute type 1 has an invalid length.
[  344.006147][ T9685] netlink: 'syz.2.1162': attribute type 3 has an invalid length.
[  344.589155][ T9698] netlink: 'syz.1.1169': attribute type 16 has an invalid length.
[  344.630300][ T9698] netlink: 'syz.1.1169': attribute type 10 has an invalid length.
[  344.777354][ T9698] team0: Port device macvlan0 added
[  344.833491][ T9701] netlink: 'syz.3.1170': attribute type 7 has an invalid length.
[  345.300338][ T9719] netlink: 'syz.1.1175': attribute type 3 has an invalid length.
[  345.332100][ T9719] __nla_validate_parse: 9 callbacks suppressed
[  345.332138][ T9719] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1175'.
[  345.729573][ T9731] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1178'.
[  345.758762][ T9731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1178'.
[  345.918580][ T9738] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1181'.
[  346.092964][ T9734] team0: Port device team_slave_0 removed
[  346.526630][ T9753] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1186'.
[  347.047331][ T9768] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1190'.
[  347.140881][ T9762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1190'.
[  347.756493][ T9780] pim6reg0: tun_chr_ioctl cmd 1074812118
[  347.792556][ T9780] pim6reg0: tun_chr_ioctl cmd 1074025675
[  347.800431][ T9780] pim6reg0: persist enabled
[  348.010747][ T9782] validate_nla: 2 callbacks suppressed
[  348.010784][ T9782] netlink: 'syz.2.1197': attribute type 3 has an invalid length.
[  348.035588][ T9782] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1197'.
[  348.182086][ T9793] netlink: 'syz.2.1202': attribute type 1 has an invalid length.
[  348.190480][ T9793] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1202'.
[  349.195297][ T9822] netlink: 'syz.0.1210': attribute type 3 has an invalid length.
[  349.217113][ T9819] netlink: 'syz.3.1211': attribute type 16 has an invalid length.
[  349.230171][ T9822] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1210'.
[  349.276835][ T9819] netlink: 'syz.3.1211': attribute type 10 has an invalid length.
[  349.598844][ T9819] team0: Port device macvlan0 added
[  349.759008][ T9834] netlink: 'syz.0.1214': attribute type 21 has an invalid length.
[  349.789201][ T9832] netlink: 'syz.1.1213': attribute type 1 has an invalid length.
[  350.455418][ T9842] syzkaller0: entered promiscuous mode
[  350.466891][ T9842] syzkaller0: entered allmulticast mode
[  350.537733][ T9855] netlink: 'syz.1.1223': attribute type 3 has an invalid length.
[  350.560097][ T9855] __nla_validate_parse: 3 callbacks suppressed
[  350.560138][ T9855] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1223'.
[  351.241997][ T9867] netlink: 'syz.0.1226': attribute type 16 has an invalid length.
[  351.466387][ T9867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1226'.
[  353.510518][ T9872] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1227'.
[  353.522841][ T9867] netlink: 'syz.0.1226': attribute type 10 has an invalid length.
[  353.550698][ T9867] team0: Port device macvlan0 added
[  353.556536][ T9873] Ù: renamed from bond_slave_1
[  353.702252][ T9883] netlink: 'syz.3.1230': attribute type 1 has an invalid length.
[  353.729715][ T9883] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1230'.
[  354.100996][ T9897] netlink: 'syz.0.1236': attribute type 33 has an invalid length.
[  354.358842][ T9901] netlink: 'syz.3.1238': attribute type 10 has an invalid length.
[  354.367605][ T9901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1238'.
[  354.391125][ T9901] batman_adv: batadv0: Adding interface: virt_wifi0
[  354.398060][ T9901] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  354.431168][ T9901] batman_adv: batadv0: Interface activated: virt_wifi0
[  354.443526][ T9905] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1239'.
[  354.462242][ T9905] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1239'.
[  354.473002][ T9905] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1239'.
[  354.941193][ T9915] netlink: 'syz.1.1242': attribute type 7 has an invalid length.
[  355.176823][ T9926] netlink: 'syz.2.1246': attribute type 1 has an invalid length.
[  355.203419][ T9926] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1246'.
[  355.255604][ T9929] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1247'.
[  355.290177][ T9929] netlink: get zone limit has 4 unknown bytes
[  356.172470][ T9956] __nla_validate_parse: 1 callbacks suppressed
[  356.172493][ T9956] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1253'.
[  356.283026][ T9947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1253'.
[  356.465540][ T9960] tap0: tun_chr_ioctl cmd 1074025677
[  356.490589][ T9960] tap0: linktype set to 778
[  356.713901][ T9964] netlink: 'syz.3.1257': attribute type 1 has an invalid length.
[  356.736523][ T9964] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1257'.
[  356.988036][ T9973] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1260'.
[  357.458007][ T9989] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1265'.
[  357.623728][ T9985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1265'.
[  358.188875][T10004] tap0: tun_chr_ioctl cmd 1074025677
[  358.196149][T10004] tap0: linktype set to 778
[  358.382490][T10006] netlink: 'syz.1.1273': attribute type 1 has an invalid length.
[  358.399841][T10006] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1273'.
[  358.597431][T10010] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1275'.
[  358.713386][T10010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1275'.
[  359.940300][T10048] tap0: tun_chr_ioctl cmd 1074025677
[  359.945927][T10048] tap0: linktype set to 778
[  360.008124][T10044] netlink: 'syz.3.1285': attribute type 10 has an invalid length.
[  360.026697][T10047] netlink: 'syz.2.1286': attribute type 1 has an invalid length.
[  360.055101][T10047] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1286'.
[  360.137096][T10044] team0: Device nlmon0 is of different type
[  361.867383][T10079] __nla_validate_parse: 3 callbacks suppressed
[  361.867413][T10079] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1297'.
[  361.897160][T10081] netlink: 'syz.1.1296': attribute type 1 has an invalid length.
[  361.948141][T10081] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1296'.
[  361.974089][T10079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.612196][T10092] netlink: 'syz.1.1301': attribute type 16 has an invalid length.
[  362.642750][T10092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1301'.
[  362.722954][T10092] netlink: 'syz.1.1301': attribute type 10 has an invalid length.
[  363.079208][T10105] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1302'.
[  363.148868][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1302'.
[  364.654981][T10126] netlink: 'syz.3.1309': attribute type 1 has an invalid length.
[  364.722956][T10126] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1309'.
[  364.893014][T10131] sctp: [Deprecated]: syz.2.1310 (pid 10131) Use of int in maxseg socket option.
[  364.893014][T10131] Use struct sctp_assoc_value instead
[  365.005054][T10124] bridge0: port 3(syz_tun) entered blocking state
[  365.030895][T10124] bridge0: port 3(syz_tun) entered disabled state
[  365.083236][T10124] syz_tun: entered allmulticast mode
[  365.162432][T10124] syz_tun: entered promiscuous mode
[  365.209713][T10124] bridge0: port 3(syz_tun) entered blocking state
[  365.220774][T10124] bridge0: port 3(syz_tun) entered forwarding state
[  365.883052][T10146] netlink: 'syz.2.1313': attribute type 16 has an invalid length.
[  365.950932][T10146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1313'.
[  366.066791][T10142] tap0: tun_chr_ioctl cmd 1074025677
[  366.092044][T10142] tap0: linktype set to 778
[  366.260813][T10148] netlink: 'syz.2.1313': attribute type 10 has an invalid length.
[  366.396060][T10148] team0: Port device macvlan0 added
[  366.428749][T10154] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1314'.
[  366.474664][T10150] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1314'.
[  366.979211][T10161] netlink: 'syz.0.1315': attribute type 10 has an invalid length.
[  367.001730][T10161] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1315'.
[  367.748302][T10174] netlink: 'syz.0.1321': attribute type 1 has an invalid length.
[  367.842523][T10174] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1321'.
[  368.711224][T10183] netlink: 'syz.3.1324': attribute type 16 has an invalid length.
[  368.749964][T10183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1324'.
[  368.783129][T10184] netlink: 'syz.3.1324': attribute type 10 has an invalid length.
[  369.186173][T10196] tap0: tun_chr_ioctl cmd 1074025677
[  369.197308][T10196] tap0: linktype set to 778
[  369.345443][T10193] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1326'.
[  369.440411][T10191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1326'.
[  369.590783][T10203] netlink: 'syz.2.1337': attribute type 16 has an invalid length.
[  369.600857][T10203] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1337'.
[  369.627544][T10203] netlink: 'syz.2.1337': attribute type 10 has an invalid length.
[  369.825237][T10204] netlink: 'syz.3.1329': attribute type 7 has an invalid length.
[  370.150868][T10212] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1331'.
[  372.973690][T10222] syzkaller0: entered promiscuous mode
[  372.979285][T10222] syzkaller0: entered allmulticast mode
[  373.279365][T10233] netlink: 'syz.2.1336': attribute type 1 has an invalid length.
[  373.287913][T10233] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1336'.
[  373.831192][T10243] tap0: tun_chr_ioctl cmd 1074025677
[  373.837401][T10243] tap0: linktype set to 778
[  374.016442][T10245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1340'.
[  374.081405][T10245] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1340'.
[  374.103432][T10249] netlink: 'syz.0.1341': attribute type 7 has an invalid length.
[  374.626365][T10265] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  374.635050][T10265] netlink: 'syz.1.1348': attribute type 3 has an invalid length.
[  374.652284][T10265] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1348'.
[  374.806954][T10273] netlink: 'syz.1.1350': attribute type 1 has an invalid length.
[  374.821841][T10273] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1350'.
[  374.873735][T10275] netlink: 'syz.0.1351': attribute type 16 has an invalid length.
[  374.890070][T10275] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1351'.
[  374.943052][T10279] netlink: 'syz.0.1351': attribute type 10 has an invalid length.
[  375.506859][T10291] tap0: tun_chr_ioctl cmd 1074025677
[  375.513279][T10291] tap0: linktype set to 778
[  375.640120][T10289] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1354'.
[  375.680436][T10287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1354'.
[  375.986182][T10298] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  375.996233][T10298] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1358'.
[  376.006526][T10298] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  376.040052][T10304] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1358'.
[  376.064380][T10303] netlink: 'syz.3.1360': attribute type 1 has an invalid length.
[  376.587788][T10319] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  376.611734][T10319] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  376.851816][T10328] tap0: tun_chr_ioctl cmd 1074025677
[  376.865457][T10328] tap0: linktype set to 778
[  377.602992][T10324] delete_channel: no stack
[  378.572293][T10360] __nla_validate_parse: 5 callbacks suppressed
[  378.572316][T10360] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1379'.
[  378.716472][T10362] tap0: tun_chr_ioctl cmd 1074025677
[  378.726555][T10362] tap0: linktype set to 778
[  379.203736][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  379.211059][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  380.259927][T10388] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1389'.
[  380.816861][T10396] validate_nla: 4 callbacks suppressed
[  380.816884][T10396] netlink: 'syz.2.1393': attribute type 21 has an invalid length.
[  380.855660][T10396] netlink: 'syz.2.1393': attribute type 1 has an invalid length.
[  382.192599][T10422] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1402'.
[  382.294697][T10424] netlink: 'syz.1.1403': attribute type 21 has an invalid length.
[  382.304786][T10424] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1403'.
[  383.028343][T10440] netlink: 'syz.0.1409': attribute type 1 has an invalid length.
[  383.062223][T10440] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1409'.
[  383.098596][T10446] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1409'.
[  383.099853][T10440] netlink: 'syz.0.1409': attribute type 1 has an invalid length.
[  383.507021][T10460] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1415'.
[  383.655674][T10466] tap0: tun_chr_ioctl cmd 1074025677
[  383.663033][T10466] tap0: linktype set to 778
[  383.685867][T10466] netlink: 'syz.0.1417': attribute type 3 has an invalid length.
[  383.697236][T10466] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1417'.
[  384.895647][T10487] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1425'.
[  384.907165][T10487] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1425'.
[  384.947285][T10488] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1425'.
[  385.026184][T10487] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1425'.
[  385.065104][T10488] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1425'.
[  385.517676][T10502] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1427'.
[  386.101918][T10533] netlink: 'syz.2.1429': attribute type 16 has an invalid length.
[  386.173478][T10533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1429'.
[  386.228506][T10536] netlink: 'syz.2.1429': attribute type 10 has an invalid length.
[  386.594166][T10544] netlink: 'syz.3.1433': attribute type 1 has an invalid length.
[  386.605237][T10544] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1433'.
[  387.238062][T10559] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1438'.
[  387.595904][T10574] netlink: 'syz.3.1443': attribute type 16 has an invalid length.
[  387.628122][T10574] netlink: 'syz.3.1443': attribute type 10 has an invalid length.
[  387.642020][T10575] tap0: tun_chr_ioctl cmd 1074025677
[  387.648934][T10575] tap0: linktype set to 778
[  387.692172][T10575] netlink: 'syz.2.1451': attribute type 3 has an invalid length.
[  387.710432][T10577] netlink: 'syz.0.1444': attribute type 1 has an invalid length.
[  388.022400][T10586] netlink: 'syz.1.1446': attribute type 13 has an invalid length.
[  388.159538][T10584] netlink: 'syz.2.1445': attribute type 3 has an invalid length.
[  389.445606][T10618] netlink: 'syz.1.1458': attribute type 1 has an invalid length.
[  389.465563][T10618] __nla_validate_parse: 6 callbacks suppressed
[  389.465586][T10618] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1458'.
[  389.500032][T10620] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1457'.
[  389.645275][T10627] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1456'.
[  389.854961][T10632] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1460'.
[  389.923989][T10634] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1460'.
[  390.881714][T10659] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1468'.
[  391.183012][T10663] validate_nla: 6 callbacks suppressed
[  391.183032][T10663] netlink: 'syz.2.1469': attribute type 2 has an invalid length.
[  391.315126][T10663] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.1469'.
[  391.647600][T10672] netlink: 'syz.2.1471': attribute type 16 has an invalid length.
[  391.669997][T10672] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1471'.
[  391.738547][T10672] netlink: 'syz.2.1471': attribute type 10 has an invalid length.
[  391.957585][T10680] netlink: 'syz.1.1472': attribute type 10 has an invalid length.
[  392.000177][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1472'.
[  392.061466][T10680] netlink: 'syz.1.1472': attribute type 10 has an invalid length.
[  392.089975][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1472'.
[  392.505490][T10691] netlink: 'syz.1.1477': attribute type 1 has an invalid length.
[  393.007309][T10707] syzkaller0: entered promiscuous mode
[  393.013222][T10707] syzkaller0: entered allmulticast mode
[  393.036448][T10707] netlink: 'syz.1.1482': attribute type 64 has an invalid length.
[  393.345659][T10712] netlink: 'syz.0.1484': attribute type 16 has an invalid length.
[  394.924594][T10735] netlink: 'syz.2.1491': attribute type 1 has an invalid length.
[  394.939751][T10735] __nla_validate_parse: 2 callbacks suppressed
[  394.939770][T10735] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1491'.
[  396.502432][T10712] netlink: 'syz.0.1484': attribute type 10 has an invalid length.
[  396.511823][T10721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1486'.
[  396.802113][T10746] netlink: 'syz.2.1494': attribute type 21 has an invalid length.
[  397.080934][T10753] netlink: 'syz.2.1498': attribute type 9 has an invalid length.
[  397.088903][T10753] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1498'.
[  397.172688][T10754] netlink: 'syz.2.1498': attribute type 9 has an invalid length.
[  397.184751][T10754] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1498'.
[  397.495969][T10759] netlink: 'syz.2.1501': attribute type 16 has an invalid length.
[  397.504750][T10759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1501'.
[  397.520576][T10759] netlink: 'syz.2.1501': attribute type 10 has an invalid length.
[  397.697096][T10770] netlink: 'syz.3.1504': attribute type 10 has an invalid length.
[  397.754764][T10770] team0: Port device wlan1 added
[  397.943878][T10774] delete_channel: no stack
[  398.150833][T10782] tap0: tun_chr_ioctl cmd 1074025677
[  398.191101][T10782] tap0: linktype set to 778
[  398.582083][T10796] SÛ÷: renamed from bond_slave_0
[  398.847017][T10806] netlink: 'syz.1.1516': attribute type 16 has an invalid length.
[  398.862081][T10806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1516'.
[  398.883612][T10806] netlink: 'syz.1.1516': attribute type 10 has an invalid length.
[  399.110584][T10816] netlink: 'syz.2.1518': attribute type 29 has an invalid length.
[  399.558081][T10824] tap0: tun_chr_ioctl cmd 1074025677
[  399.564429][T10822] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1517'.
[  399.573940][T10824] tap0: linktype set to 778
[  399.598024][T10822] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1517'.
[  399.868295][T10809] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1517'.
[  399.957602][T10829] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1517'.
[  400.855351][T10850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1529'.
[  401.760177][T10865] tap0: tun_chr_ioctl cmd 1074025677
[  401.766263][T10865] tap0: linktype set to 778
[  401.779215][T10863] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1533'.
[  401.801247][T10863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  401.876274][T10862] validate_nla: 6 callbacks suppressed
[  401.876331][T10862] netlink: 'syz.1.1532': attribute type 3 has an invalid length.
[  401.906784][T10862] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1532'.
[  402.218091][T10875] tap0: tun_chr_ioctl cmd 1074025677
[  402.225123][T10875] tap0: linktype set to 778
[  402.254232][ T6270] tipc: Subscription rejected, illegal request
[  402.510806][T10885] netlink: 'syz.1.1540': attribute type 16 has an invalid length.
[  402.523844][T10885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1540'.
[  402.538371][T10885] netlink: 'syz.1.1540': attribute type 10 has an invalid length.
[  404.505602][T10908] tap0: tun_chr_ioctl cmd 1074025677
[  404.530669][T10908] tap0: linktype set to 778
[  404.569981][T10908] netlink: 'syz.3.1547': attribute type 3 has an invalid length.
[  404.588346][T10908] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1547'.
[  404.619254][T10914] netlink: 'syz.1.1549': attribute type 16 has an invalid length.
[  404.639791][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1549'.
[  404.670393][T10914] netlink: 'syz.1.1549': attribute type 10 has an invalid length.
[  405.013927][T10926] tap0: tun_chr_ioctl cmd 1074025677
[  405.044842][T10926] tap0: linktype set to 778
[  405.936043][T10953] netlink: 'syz.1.1561': attribute type 16 has an invalid length.
[  405.961803][T10953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1561'.
[  406.005991][T10956] netlink: 'syz.1.1561': attribute type 10 has an invalid length.
[  406.029221][T10955] tap0: tun_chr_ioctl cmd 1074025677
[  406.039447][T10955] tap0: linktype set to 778
[  406.083919][T10955] netlink: 'syz.0.1560': attribute type 3 has an invalid length.
[  406.100730][T10955] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1560'.
[  406.406655][T10966] tap0: tun_chr_ioctl cmd 1074025677
[  406.417287][T10966] tap0: linktype set to 778
[  407.310300][T10994] netlink: 'syz.2.1573': attribute type 16 has an invalid length.
[  407.324955][T10994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1573'.
[  407.362031][T10994] netlink: 'syz.2.1573': attribute type 10 has an invalid length.
[  407.877259][T11007] tap0: tun_chr_ioctl cmd 1074025677
[  407.890062][T11007] tap0: linktype set to 778
[  408.313493][T11017] netlink: 'syz.0.1581': attribute type 10 has an invalid length.
[  408.446356][T11015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.671550][T11025] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1583'.
[  408.975621][T11034] netlink: 'syz.2.1585': attribute type 16 has an invalid length.
[  408.987331][T11034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1585'.
[  409.014528][T11034] netlink: 'syz.2.1585': attribute type 10 has an invalid length.
[  409.297192][T11042] tap0: tun_chr_ioctl cmd 1074025677
[  409.310678][T11042] tap0: linktype set to 778
[  409.610686][T11051] netlink: 'syz.2.1593': attribute type 9 has an invalid length.
[  409.618662][T11051] netlink: 162504 bytes leftover after parsing attributes in process `syz.2.1593'.
[  410.402651][T11058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  410.410234][T11058] IPv6: NLM_F_CREATE should be set when creating new route
[  410.419166][T11058] IPv6: NLM_F_CREATE should be set when creating new route
[  410.426786][T11058] IPv6: NLM_F_CREATE should be set when creating new route
[  410.573087][T11070] netlink: 'syz.2.1599': attribute type 16 has an invalid length.
[  410.582165][T11070] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1599'.
[  410.593997][T11068] netlink: 'syz.3.1598': attribute type 21 has an invalid length.
[  410.607207][T11068] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1598'.
[  410.617911][T11070] netlink: 'syz.2.1599': attribute type 10 has an invalid length.
[  410.953009][T11074] tap0: tun_chr_ioctl cmd 1074025677
[  410.992412][T11074] tap0: linktype set to 778
[  411.298047][T11088] netlink: 'syz.1.1606': attribute type 10 has an invalid length.
[  412.134801][T11088] veth0_vlan: left promiscuous mode
[  412.149125][T11088] veth0_vlan: entered promiscuous mode
[  412.169490][T11088] team0: Device veth0_vlan failed to register rx_handler
[  412.434496][T11100] netlink: 'syz.1.1609': attribute type 29 has an invalid length.
[  412.481779][T11100] netlink: 'syz.1.1609': attribute type 29 has an invalid length.
[  412.491504][T11098] netlink: 'syz.1.1609': attribute type 29 has an invalid length.
[  412.762217][T11109] netlink: 'syz.3.1612': attribute type 1 has an invalid length.
[  412.778378][T11109] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1612'.
[  413.385474][T11115] tap0: tun_chr_ioctl cmd 1074025677
[  413.392326][T11115] tap0: linktype set to 778
[  413.431903][T11115] netlink: 'syz.1.1614': attribute type 3 has an invalid length.
[  413.456400][T11115] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1614'.
[  413.719558][T11125] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1616'.
[  413.819067][T11119] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1616'.
[  414.056363][T11131] netlink: 'syz.2.1620': attribute type 16 has an invalid length.
[  414.082872][T11131] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1620'.
[  414.115621][T11131] netlink: 'syz.2.1620': attribute type 10 has an invalid length.
[  414.639147][T11141] tap0: tun_chr_ioctl cmd 1074025677
[  414.648501][T11141] tap0: linktype set to 778
[  415.635017][T11155] netlink: 'syz.0.1627': attribute type 3 has an invalid length.
[  415.714346][T11155] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1627'.
[  415.788554][T11152] tap0: tun_chr_ioctl cmd 1074025677
[  415.794511][T11152] tap0: linktype set to 778
[  416.113108][T11159] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1629'.
[  416.136675][T11159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1629'.
[  416.390545][T11173] netlink: 'syz.1.1633': attribute type 16 has an invalid length.
[  416.403681][T11173] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1633'.
[  416.435260][T11173] netlink: 'syz.1.1633': attribute type 10 has an invalid length.
[  416.476961][T11175] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1634'.
[  417.284435][T11196] tap0: tun_chr_ioctl cmd 1074025677
[  417.292247][T11196] tap0: linktype set to 778
[  417.308072][T11194] tap0: tun_chr_ioctl cmd 1074025677
[  417.338025][T11194] tap0: linktype set to 778
[  417.454563][T11192] validate_nla: 1 callbacks suppressed
[  417.454608][T11192] netlink: 'syz.0.1640': attribute type 3 has an invalid length.
[  417.743268][T11204] netlink: 'syz.3.1644': attribute type 16 has an invalid length.
[  417.772392][T11204] netlink: 'syz.3.1644': attribute type 10 has an invalid length.
[  417.794800][T11199] __nla_validate_parse: 3 callbacks suppressed
[  417.794825][T11199] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1642'.
[  419.480029][T11227] tap0: tun_chr_ioctl cmd 1074025677
[  419.485985][T11227] tap0: linktype set to 778
[  419.543651][T11229] netlink: 'syz.3.1654': attribute type 16 has an invalid length.
[  419.579901][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1654'.
[  419.594152][T11224] netlink: 'syz.2.1653': attribute type 3 has an invalid length.
[  419.606112][T11231] netlink: 'syz.3.1654': attribute type 10 has an invalid length.
[  419.631679][T11224] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1653'.
[  419.909129][T11239] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1656'.
[  419.989030][T11235] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1656'.
[  420.186614][T11246] netlink: 'syz.3.1659': attribute type 1 has an invalid length.
[  420.195775][T11246] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1659'.
[  420.363872][T11245] tap0: tun_chr_ioctl cmd 1074025677
[  420.381428][T11245] tap0: linktype set to 778
[  420.485683][T11255] netlink: 'syz.2.1662': attribute type 28 has an invalid length.
[  420.782251][T11262] netlink: 'syz.2.1665': attribute type 16 has an invalid length.
[  420.800231][T11262] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1665'.
[  421.375720][T11266] tap0: tun_chr_ioctl cmd 1074025677
[  421.404143][T11266] tap0: linktype set to 778
[  421.487347][T11266] netlink: 'syz.0.1666': attribute type 3 has an invalid length.
[  421.508485][T11266] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1666'.
[  421.795210][T11274] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1669'.
[  421.864748][T11274] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1669'.
[  423.544845][T11310] validate_nla: 2 callbacks suppressed
[  423.544866][T11310] netlink: 'syz.3.1680': attribute type 3 has an invalid length.
[  423.560226][T11309] tap0: tun_chr_ioctl cmd 1074025677
[  423.565874][T11309] tap0: linktype set to 778
[  423.571290][T11310] __nla_validate_parse: 1 callbacks suppressed
[  423.571305][T11310] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1680'.
[  423.684019][T11313] netlink: 'syz.1.1681': attribute type 1 has an invalid length.
[  423.699874][T11313] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1681'.
[  424.089947][T11321] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1683'.
[  424.226000][T11321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1683'.
[  424.268251][T11329] netlink: 'syz.2.1686': attribute type 16 has an invalid length.
[  424.280371][T11326] tap0: tun_chr_ioctl cmd 1074025677
[  424.286717][T11329] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1686'.
[  424.318209][T11326] tap0: linktype set to 778
[  424.340198][T11329] netlink: 'syz.2.1686': attribute type 10 has an invalid length.
[  424.994199][T11347] tap0: tun_chr_ioctl cmd 1074025677
[  425.032597][T11347] tap0: linktype set to 778
[  425.128496][T11345] netlink: 'syz.2.1691': attribute type 3 has an invalid length.
[  425.152441][T11345] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1691'.
[  425.563152][T11359] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.1696'.
[  425.591488][T11359] netlink: 'syz.3.1696': attribute type 4 has an invalid length.
[  425.903066][T11363] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1697'.
[  426.009260][T11363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1697'.
[  426.520691][T11374] netlink: 'syz.2.1701': attribute type 16 has an invalid length.
[  426.538529][T11374] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1701'.
[  426.598398][T11375] tap0: tun_chr_ioctl cmd 1074025677
[  426.610788][T11375] tap0: linktype set to 778
[  426.633456][T11375] netlink: 'syz.3.1702': attribute type 3 has an invalid length.
[  427.307497][T11388] netlink: 'syz.2.1706': attribute type 22 has an invalid length.
[  427.995615][T11400] tap0: tun_chr_ioctl cmd 1074025677
[  428.008955][T11400] tap0: linktype set to 778
[  428.454995][T11408] tap0: tun_chr_ioctl cmd 1074025677
[  428.484246][T11408] tap0: linktype set to 778
[  428.505423][T11410] netlink: 'syz.3.1714': attribute type 16 has an invalid length.
[  428.555548][T11407] netlink: 'syz.1.1713': attribute type 3 has an invalid length.
[  428.638218][T11414] netlink: 'syz.2.1715': attribute type 10 has an invalid length.
[  428.722893][T11414] team0: Device vxcan1 is of different type
[  429.437786][T11432] __nla_validate_parse: 5 callbacks suppressed
[  429.437809][T11432] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1721'.
[  429.596228][T11430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1721'.
[  430.008132][T11439] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1723'.
[  430.034603][T11439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.095268][T11442] tap0: tun_chr_ioctl cmd 1074025677
[  430.115095][T11442] tap0: linktype set to 778
[  430.222096][T11442] netlink: 'syz.3.1725': attribute type 3 has an invalid length.
[  430.231554][T11442] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1725'.
[  430.480891][T11451] netlink: 'syz.2.1728': attribute type 16 has an invalid length.
[  430.489164][T11451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1728'.
[  430.732079][T11454] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1730'.
[  430.755574][T11459] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1731'.
[  431.218070][T11472] tap0: tun_chr_ioctl cmd 1074025677
[  431.224456][T11472] tap0: linktype set to 778
[  431.448080][T11475] netlink: 'syz.1.1736': attribute type 1 has an invalid length.
[  431.470361][T11475] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1736'.
[  431.662347][T11481] tap0: tun_chr_ioctl cmd 1074025677
[  431.668685][T11481] tap0: linktype set to 778
[  431.688608][T11481] netlink: 'syz.0.1738': attribute type 3 has an invalid length.
[  431.697450][T11481] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1738'.
[  431.825951][T11485] netlink: 'syz.1.1740': attribute type 16 has an invalid length.
[  431.855307][T11485] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1740'.
[  433.205804][T11515] tap0: tun_chr_ioctl cmd 1074025677
[  433.226308][T11515] tap0: linktype set to 778
[  433.246512][T11513] netlink: 'syz.1.1751': attribute type 16 has an invalid length.
[  433.318481][T11509] netlink: 'syz.0.1749': attribute type 3 has an invalid length.
[  433.836214][T11528] tap0: tun_chr_ioctl cmd 1074025677
[  433.869949][T11528] tap0: linktype set to 778
[  434.144857][T11536] netlink: 'syz.3.1757': attribute type 1 has an invalid length.
[  434.451828][T11545] tap0: tun_chr_ioctl cmd 1074025677
[  434.457811][T11545] tap0: linktype set to 778
[  434.515992][T11545] netlink: 'syz.3.1760': attribute type 3 has an invalid length.
[  434.539776][T11545] __nla_validate_parse: 6 callbacks suppressed
[  434.539816][T11545] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1760'.
[  434.839200][T11551] netlink: 'syz.3.1763': attribute type 16 has an invalid length.
[  434.857787][T11551] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1763'.
[  435.836901][T11566] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1767'.
[  435.868884][T11566] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1767'.
[  436.237654][T11576] tap0: tun_chr_ioctl cmd 1074025677
[  436.248010][T11576] tap0: linktype set to 778
[  436.293255][T11576] netlink: 'syz.1.1771': attribute type 3 has an invalid length.
[  436.302436][T11576] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1771'.
[  436.369243][T11584] netlink: 'syz.0.1774': attribute type 10 has an invalid length.
[  437.196906][T11597] tap0: tun_chr_ioctl cmd 1074025677
[  437.216072][T11597] tap0: linktype set to 778
[  437.709334][T11607] netlink: 'syz.0.1780': attribute type 1 has an invalid length.
[  437.808632][T11607] netlink: 13695 bytes leftover after parsing attributes in process `syz.0.1780'.
[  437.980415][T11600] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1779'.
[  438.622629][T11621] tap0: tun_chr_ioctl cmd 1074025677
[  438.628874][T11621] tap0: linktype set to 778
[  438.668376][T11618] netlink: 'syz.0.1784': attribute type 3 has an invalid length.
[  438.685403][T11618] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1784'.
[  438.728119][T11623] netlink: 'syz.2.1786': attribute type 10 has an invalid length.
[  439.427688][T11637] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1791'.
[  439.549481][T11637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1791'.
[  439.913307][T11647] netlink: 'syz.3.1794': attribute type 1 has an invalid length.
[  439.937873][T11647] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1794'.
[  440.287597][T11655] netlink: 'syz.0.1797': attribute type 10 has an invalid length.
[  440.335641][T11653] netlink: 'syz.2.1796': attribute type 3 has an invalid length.
[  440.365168][T11653] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1796'.
[  440.596231][T11666] tap0: tun_chr_ioctl cmd 1074025677
[  440.608101][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  440.614700][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  440.623945][T11666] tap0: linktype set to 778
[  441.025668][T11675] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1803'.
[  441.063754][T11675] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1803'.
[  441.371400][T11687] netlink: 'syz.2.1807': attribute type 10 has an invalid length.
[  441.417540][T11687] hsr_slave_0: left promiscuous mode
[  441.501846][T11687] hsr_slave_1: left promiscuous mode
[  442.230894][T11694] tap0: tun_chr_ioctl cmd 1074025677
[  442.238075][T11694] tap0: linktype set to 778
[  442.257030][T11697] netlink: 'syz.1.1810': attribute type 10 has an invalid length.
[  442.294936][T11694] netlink: 'syz.0.1809': attribute type 3 has an invalid length.
[  442.317543][T11694] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1809'.
[  442.907995][T11720] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1815'.
[  443.016366][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1815'.
[  443.061166][T11724] netlink: 'syz.0.1818': attribute type 1 has an invalid length.
[  443.069342][T11724] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1818'.
[  443.937379][T11733] netlink: 'syz.1.1821': attribute type 10 has an invalid length.
[  443.999072][T11735] netlink: 'syz.2.1822': attribute type 3 has an invalid length.
[  444.032997][T11735] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1822'.
[  444.080288][T11737] tap0: tun_chr_ioctl cmd 1074025677
[  444.092035][T11737] tap0: linktype set to 778
[  444.200418][T11741] netlink: 'syz.3.1823': attribute type 10 has an invalid length.
[  444.413947][T11744] tap0: tun_chr_ioctl cmd 1074025677
[  444.445164][T11744] tap0: linktype set to 778
[  444.807990][T11759] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1827'.
[  445.578424][T11776] tap0: tun_chr_ioctl cmd 1074025677
[  445.608483][T11776] tap0: linktype set to 778
[  445.835559][T11773] netlink: 'syz.1.1834': attribute type 3 has an invalid length.
[  445.869369][T11773] __nla_validate_parse: 1 callbacks suppressed
[  445.869420][T11773] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1834'.
[  446.301021][T11781] netlink: 'syz.3.1836': attribute type 1 has an invalid length.
[  446.308905][T11781] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1836'.
[  446.418707][T11785] netlink: 'syz.2.1837': attribute type 10 has an invalid length.
[  446.497405][T11793] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1839'.
[  446.947752][T11809] tap0: tun_chr_ioctl cmd 1074025677
[  446.954540][T11809] tap0: linktype set to 778
[  446.966700][T11800] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1841'.
[  447.047895][T11800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1841'.
[  447.301788][T11813] tap0: tun_chr_ioctl cmd 1074025677
[  447.358188][T11813] tap0: linktype set to 778
[  447.377877][T11814] netlink: 'syz.1.1846': attribute type 3 has an invalid length.
[  447.418184][T11814] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1846'.
[  447.793325][T11819] netlink: 'syz.1.1848': attribute type 4 has an invalid length.
[  447.804343][T11819] netlink: 'syz.1.1848': attribute type 1 has an invalid length.
[  448.011473][T11826] netlink: 'syz.1.1851': attribute type 16 has an invalid length.
[  448.023333][T11826] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1851'.
[  448.068678][T11826] netlink: 'syz.1.1851': attribute type 10 has an invalid length.
[  448.202843][T11832] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1853'.
[  448.223186][T11838] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1854'.
[  448.283954][T11832] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1853'.
[  448.568823][T11849] tap0: tun_chr_ioctl cmd 1074025677
[  448.587783][T11850] netlink: 'syz.2.1859': attribute type 1 has an invalid length.
[  448.599871][T11849] tap0: linktype set to 778
[  448.654508][T11844] netlink: 'syz.0.1856': attribute type 3 has an invalid length.
[  449.658390][T11864] tap0: tun_chr_ioctl cmd 1074025677
[  449.684172][T11864] tap0: linktype set to 778
[  450.195663][T11884] tap0: tun_chr_ioctl cmd 1074025677
[  450.224511][T11884] tap0: linktype set to 778
[  450.968117][T11904] validate_nla: 3 callbacks suppressed
[  450.968139][T11904] netlink: 'syz.0.1877': attribute type 1 has an invalid length.
[  450.986473][T11904] __nla_validate_parse: 6 callbacks suppressed
[  450.986494][T11904] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1877'.
[  451.189468][T11908] netlink: 'syz.3.1878': attribute type 3 has an invalid length.
[  451.198274][T11908] netlink: 'syz.3.1878': attribute type 1 has an invalid length.
[  451.208391][T11908] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1878'.
[  451.254283][T11910] netlink: 'syz.0.1879': attribute type 16 has an invalid length.
[  451.263059][T11910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1879'.
[  451.286945][T11910] netlink: 'syz.0.1879': attribute type 10 has an invalid length.
[  451.545695][T11913] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1880'.
[  451.607897][T11913] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1880'.
[  451.635815][T11918] tap0: tun_chr_ioctl cmd 1074025677
[  451.661331][T11918] tap0: linktype set to 778
[  451.705763][T11918] netlink: 'syz.2.1881': attribute type 3 has an invalid length.
[  451.739314][T11918] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1881'.
[  451.811423][T11922] tap0: tun_chr_ioctl cmd 1074025677
[  451.822068][T11922] tap0: linktype set to 778
[  452.704215][T11946] netlink: 'syz.2.1891': attribute type 16 has an invalid length.
[  452.714444][T11946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1891'.
[  452.732883][T11946] netlink: 'syz.2.1891': attribute type 10 has an invalid length.
[  453.245615][T11957] tap0: tun_chr_ioctl cmd 1074025677
[  453.284434][T11957] tap0: linktype set to 778
[  453.327234][T11954] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1893'.
[  453.360407][T11957] netlink: 'syz.3.1894': attribute type 3 has an invalid length.
[  453.382139][T11954] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1893'.
[  453.400672][T11957] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1894'.
[  454.313460][T11976] netlink: 'syz.3.1901': attribute type 16 has an invalid length.
[  455.401868][T11994] tap0: tun_chr_ioctl cmd 1074025677
[  455.419424][T11994] tap0: linktype set to 778
[  455.777309][T11999] tap0: tun_chr_ioctl cmd 1074025677
[  455.787462][T11999] tap0: linktype set to 778
[  456.367182][T12012] validate_nla: 2 callbacks suppressed
[  456.367226][T12012] netlink: 'syz.3.1913': attribute type 16 has an invalid length.
[  456.388253][T12014] __nla_validate_parse: 4 callbacks suppressed
[  456.388276][T12014] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1912'.
[  456.430085][T12012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1913'.
[  456.456829][T12016] netlink: 'syz.3.1913': attribute type 10 has an invalid length.
[  456.492448][T12014] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  456.545771][T12014] CPU: 1 PID: 12014 Comm: syz.1.1912 Not tainted syzkaller #0
[  456.553381][T12014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  456.563518][T12014] Call Trace:
[  456.566958][T12014]  <TASK>
[  456.570071][T12014]  dump_stack_lvl+0x18c/0x250
[  456.575114][T12014]  ? show_regs_print_info+0x20/0x20
[  456.580400][T12014]  ? load_image+0x420/0x420
[  456.585014][T12014]  sysfs_warn_dup+0x8e/0xa0
[  456.589608][T12014]  sysfs_do_create_link_sd+0xc0/0x110
[  456.595076][T12014]  device_add_class_symlinks+0x1cf/0x240
[  456.600810][T12014]  device_add+0x4f9/0xc40
[  456.605332][T12014]  wiphy_register+0x1d99/0x2ac0
[  456.610543][T12014]  ? cfg80211_event_work+0x40/0x40
[  456.615744][T12014]  ? minstrel_ht_alloc+0x88a/0x990
[  456.620965][T12014]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  456.627356][T12014]  ieee80211_register_hw+0x2dd8/0x3b30
[  456.632974][T12014]  ? ieee80211_register_hw+0xfc1/0x3b30
[  456.638742][T12014]  ? ieee80211_tasklet_handler+0x20/0x20
[  456.644743][T12014]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  456.650930][T12014]  ? __debug_object_init+0xec/0x450
[  456.656551][T12014]  ? __asan_memset+0x22/0x40
[  456.661250][T12014]  ? __hrtimer_init+0x189/0x270
[  456.666214][T12014]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  456.672304][T12014]  ? mac80211_hwsim_free+0x220/0x220
[  456.677691][T12014]  ? rcu_is_watching+0x15/0xb0
[  456.683183][T12014]  ? kstrndup+0xbd/0x140
[  456.687934][T12014]  hwsim_new_radio_nl+0xdad/0x1a70
[  456.693353][T12014]  ? __nla_validate+0x50/0x50
[  456.698521][T12014]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  456.705180][T12014]  ? __nla_parse+0x40/0x50
[  456.710087][T12014]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  456.716539][T12014]  genl_family_rcv_msg_doit+0x21a/0x310
[  456.722734][T12014]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  456.728764][T12014]  ? bpf_lsm_capable+0x9/0x10
[  456.733555][T12014]  ? security_capable+0x89/0xb0
[  456.738703][T12014]  genl_rcv_msg+0x611/0x7a0
[  456.743320][T12014]  ? genl_bind+0x360/0x360
[  456.747829][T12014]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  456.754340][T12014]  ? perf_trace_lock+0x303/0x3b0
[  456.759365][T12014]  ? __kasan_kmalloc_large+0x8b/0xa0
[  456.764764][T12014]  netlink_rcv_skb+0x235/0x4c0
[  456.769693][T12014]  ? genl_bind+0x360/0x360
[  456.774207][T12014]  ? netlink_ack+0x1160/0x1160
[  456.779704][T12014]  ? __lock_acquire+0x7d80/0x7d80
[  456.784850][T12014]  ? down_read+0x1ac/0x2e0
[  456.789463][T12014]  genl_rcv+0x28/0x40
[  456.793630][T12014]  netlink_unicast+0x7b1/0x930
[  456.798526][T12014]  netlink_sendmsg+0x8d0/0xbf0
[  456.804251][T12014]  ? perf_trace_lock+0x303/0x3b0
[  456.809388][T12014]  ? netlink_getsockopt+0x590/0x590
[  456.814700][T12014]  ? aa_sock_msg_perm+0x94/0x150
[  456.819848][T12014]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  456.825223][T12014]  ? security_socket_sendmsg+0x80/0xa0
[  456.830768][T12014]  ? netlink_getsockopt+0x590/0x590
[  456.836063][T12014]  ____sys_sendmsg+0x61b/0x980
[  456.840932][T12014]  ? __asan_memset+0x22/0x40
[  456.845714][T12014]  ? __sys_sendmsg_sock+0x30/0x30
[  456.850939][T12014]  ? __import_iovec+0x5f2/0x850
[  456.855976][T12014]  ? import_iovec+0x73/0xa0
[  456.861029][T12014]  ___sys_sendmsg+0x2a6/0x360
[  456.865840][T12014]  ? __sys_sendmsg+0x2b0/0x2b0
[  456.870923][T12014]  __se_sys_sendmsg+0x1d0/0x2c0
[  456.875893][T12014]  ? __x64_sys_sendmsg+0x80/0x80
[  456.881012][T12014]  ? trace_sys_enter+0x1f/0x80
[  456.885904][T12014]  do_syscall_64+0x55/0xb0
[  456.890418][T12014]  ? clear_bhb_loop+0x40/0x90
[  456.895178][T12014]  ? clear_bhb_loop+0x40/0x90
[  456.899989][T12014]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  456.906068][T12014] RIP: 0033:0x7fea7f79ce59
[  456.910574][T12014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  456.931527][T12014] RSP: 002b:00007fea805e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  456.940693][T12014] RAX: ffffffffffffffda RBX: 00007fea7fa16090 RCX: 00007fea7f79ce59
[  456.949094][T12014] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  456.957669][T12014] RBP: 00007fea7f832e6f R08: 0000000000000000 R09: 0000000000000000
[  456.965996][T12014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  456.974491][T12014] R13: 00007fea7fa16128 R14: 00007fea7fa16090 R15: 00007ffe45ec8988
[  456.982597][T12014]  </TASK>
[  457.055011][T12009] 
@0Ùÿÿ: renamed from bond_slave_1
[  457.388147][T12025] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1916'.
[  457.489878][T12025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1916'.
[  457.543161][T12031] tap0: tun_chr_ioctl cmd 1074025677
[  457.555478][T12031] tap0: linktype set to 778
[  457.604186][T12031] netlink: 'syz.1.1917': attribute type 3 has an invalid length.
[  457.620472][T12031] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1917'.
[  457.801835][T12038] netlink: 'syz.3.1921': attribute type 1 has an invalid length.
[  457.837454][T12038] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1921'.
[  458.223328][T12048] netlink: 'syz.3.1924': attribute type 16 has an invalid length.
[  458.240467][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1924'.
[  458.263117][T12048] netlink: 'syz.3.1924': attribute type 10 has an invalid length.
[  458.642180][T12055] tap0: tun_chr_ioctl cmd 1074025677
[  458.650231][T12055] tap0: linktype set to 778
[  459.174124][T12065] tap0: tun_chr_ioctl cmd 1074025677
[  459.201245][T12065] tap0: linktype set to 778
[  459.255607][T12065] netlink: 'syz.1.1930': attribute type 3 has an invalid length.
[  459.269748][T12068] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1929'.
[  459.276200][T12065] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1930'.
[  459.363220][T12063] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1929'.
[  460.016749][T12090] netlink: 'syz.2.1937': attribute type 16 has an invalid length.
[  460.126772][T12087] syzkaller0: entered promiscuous mode
[  460.149827][T12087] syzkaller0: entered allmulticast mode
[  460.165941][T12090] netlink: 'syz.2.1937': attribute type 10 has an invalid length.
[  461.265395][T12109] netlink: 'syz.0.1940': attribute type 3 has an invalid length.
[  463.368177][T12107] tap0: tun_chr_ioctl cmd 1074025677
[  463.374665][T12107] tap0: linktype set to 778
[  463.396310][T12104] __nla_validate_parse: 2 callbacks suppressed
[  463.396329][T12104] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1941'.
[  463.421752][T12108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1941'.
[  463.553767][T12112] netlink: 'syz.2.1942': attribute type 1 has an invalid length.
[  463.575761][T12112] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1942'.
[  464.713239][T12135] netlink: 'syz.2.1950': attribute type 16 has an invalid length.
[  464.734396][T12135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1950'.
[  464.766399][T12136] netlink: 'syz.2.1950': attribute type 10 has an invalid length.
[  465.061332][T12142] tap0: tun_chr_ioctl cmd 1074025677
[  465.080855][T12142] tap0: linktype set to 778
[  465.280993][T12148] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1952'.
[  465.362982][T12151] tap0: tun_chr_ioctl cmd 1074025677
[  465.368625][T12151] tap0: linktype set to 778
[  465.397803][T12147] netlink: 'syz.0.1953': attribute type 3 has an invalid length.
[  465.429839][T12147] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1953'.
[  465.470015][T12144] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1952'.
[  465.584822][T12158] netlink: 'syz.1.1957': attribute type 13 has an invalid length.
[  465.630169][T12158] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1957'.
[  466.122135][T12169] netlink: 'syz.0.1962': attribute type 16 has an invalid length.
[  466.131282][T12169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1962'.
[  466.161230][T12169] netlink: 'syz.0.1962': attribute type 10 has an invalid length.
[  466.704703][T12174] netlink: 'syz.0.1963': attribute type 1 has an invalid length.
[  466.734181][T12174] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1963'.
[  467.069223][T12183] tap0: tun_chr_ioctl cmd 1074025677
[  467.081793][T12183] tap0: linktype set to 778
[  467.106051][T12183] netlink: 'syz.3.1966': attribute type 3 has an invalid length.
[  467.422903][T12192] tap0: tun_chr_ioctl cmd 1074025677
[  467.442736][T12192] tap0: linktype set to 778
[  467.552716][T12198] netlink: 'syz.0.1971': attribute type 16 has an invalid length.
[  468.781638][T12219] tap0: tun_chr_ioctl cmd 1074025677
[  468.788198][T12219] tap0: linktype set to 778
[  468.816602][T12219] validate_nla: 1 callbacks suppressed
[  468.816640][T12219] netlink: 'syz.3.1978': attribute type 3 has an invalid length.
[  468.831397][T12219] __nla_validate_parse: 5 callbacks suppressed
[  468.831431][T12219] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1978'.
[  469.073041][T12230] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1980'.
[  469.217307][T12225] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1980'.
[  469.222778][T12234] netlink: 'syz.3.1984': attribute type 16 has an invalid length.
[  469.226901][T12234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1984'.
[  469.272206][T12234] netlink: 'syz.3.1984': attribute type 10 has an invalid length.
[  469.554982][T12242] netlink: 'syz.1.1987': attribute type 1 has an invalid length.
[  469.567688][T12242] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1987'.
[  470.500990][T12257] tap0: tun_chr_ioctl cmd 1074025677
[  470.507482][T12257] tap0: linktype set to 778
[  470.605007][T12253] netlink: 'syz.3.1991': attribute type 3 has an invalid length.
[  470.639346][T12253] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1991'.
[  471.145353][T12269] tap0: tun_chr_ioctl cmd 1074025677
[  471.180040][T12269] tap0: linktype set to 778
[  471.380152][T12277] netlink: 'syz.2.1997': attribute type 16 has an invalid length.
[  471.401600][T12268] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1995'.
[  471.419805][T12277] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1997'.
[  471.448517][T12278] netlink: 'syz.2.1997': attribute type 10 has an invalid length.
[  471.539261][T12268] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1995'.
[  471.581141][T12282] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1999'.
[  472.165241][T12293] tap0: tun_chr_ioctl cmd 1074025677
[  472.177205][T12293] tap0: linktype set to 778
[  472.310733][T12291] netlink: 'syz.2.2003': attribute type 3 has an invalid length.
[  472.886691][T12302] netlink: 'syz.2.2006': attribute type 1 has an invalid length.
[  474.139897][T12321] netlink: 'syz.3.2011': attribute type 16 has an invalid length.
[  474.224613][T12326] tap0: tun_chr_ioctl cmd 1074025677
[  474.241804][T12326] tap0: linktype set to 778
[  474.247500][T12321] __nla_validate_parse: 4 callbacks suppressed
[  474.247544][T12321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2011'.
[  474.278382][T12327] netlink: 'syz.3.2011': attribute type 10 has an invalid length.
[  474.289206][T12326] netlink: 'syz.2.2014': attribute type 3 has an invalid length.
[  474.299245][T12326] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2014'.
[  475.477198][T12344] tap0: tun_chr_ioctl cmd 1074025677
[  475.486255][T12344] tap0: linktype set to 778
[  475.695795][T12358] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2021'.
[  475.717373][T12355] tap0: tun_chr_ioctl cmd 1074025677
[  475.747882][T12355] tap0: linktype set to 778
[  475.776509][T12359] netlink: 'syz.1.2023': attribute type 3 has an invalid length.
[  475.799010][T12352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2021'.
[  475.816875][T12359] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2023'.
[  475.874612][T12361] netlink: 'syz.2.2024': attribute type 16 has an invalid length.
[  475.887174][T12361] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2024'.
[  475.901816][T12361] netlink: 'syz.2.2024': attribute type 10 has an invalid length.
[  476.282750][T12372] tun0: tun_chr_ioctl cmd 1074025675
[  476.309982][T12372] tun0: persist enabled
[  476.331374][T12372] tun0: tun_chr_ioctl cmd 1074025675
[  476.361717][T12372] tun0: persist disabled
[  476.395808][T12372] tun0: tun_chr_ioctl cmd 2147767517
[  478.092035][T12382] netlink: 'syz.3.2030': attribute type 1 has an invalid length.
[  478.115550][T12382] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2030'.
[  478.406177][T12394] tap0: tun_chr_ioctl cmd 1074025677
[  478.412834][T12394] tap0: linktype set to 778
[  478.437567][T12394] netlink: 'syz.2.2035': attribute type 3 has an invalid length.
[  478.480480][T12394] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2035'.
[  478.669848][T12399] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2037'.
[  478.731171][T12399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2037'.
[  479.107348][T12411] netlink: 'syz.3.2041': attribute type 16 has an invalid length.
[  479.124056][T12411] netlink: 'syz.3.2041': attribute type 10 has an invalid length.
[  479.930163][T12428] tap0: tun_chr_ioctl cmd 1074025677
[  479.935960][T12428] tap0: linktype set to 778
[  480.276018][T12433] tap0: tun_chr_ioctl cmd 1074025677
[  480.285269][T12433] tap0: linktype set to 778
[  480.308527][T12433] netlink: 'syz.1.2048': attribute type 3 has an invalid length.
[  480.317006][T12433] __nla_validate_parse: 1 callbacks suppressed
[  480.317053][T12433] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2048'.
[  480.495794][T12435] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2049'.
[  480.608743][T12440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'.
[  480.684806][T12443] netlink: 'syz.1.2052': attribute type 16 has an invalid length.
[  480.698937][T12443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2052'.
[  480.811809][T12443] netlink: 'syz.1.2052': attribute type 10 has an invalid length.
[  481.415392][T12456] netlink: 'syz.0.2056': attribute type 1 has an invalid length.
[  481.423962][T12456] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2056'.
[  481.908374][T12469] tap0: tun_chr_ioctl cmd 1074025677
[  481.916134][T12469] tap0: linktype set to 778
[  481.964574][T12466] netlink: 'syz.1.2060': attribute type 3 has an invalid length.
[  482.000102][T12466] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2060'.
[  482.055983][T12475] netlink: 'syz.2.2063': attribute type 16 has an invalid length.
[  482.068141][T12475] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2063'.
[  482.095088][T12475] netlink: 'syz.2.2063': attribute type 10 has an invalid length.
[  482.120360][T12473] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2062'.
[  482.171189][T12473] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2062'.
[  483.374576][T12498] tap0: tun_chr_ioctl cmd 1074025677
[  483.380395][T12498] tap0: linktype set to 778
[  483.722150][T12508] tap0: tun_chr_ioctl cmd 1074025677
[  483.729234][T12508] tap0: linktype set to 778
[  483.784022][T12508] netlink: 'syz.2.2072': attribute type 3 has an invalid length.
[  483.797285][T12508] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2072'.
[  484.393646][T12524] netlink: 'syz.1.2077': attribute type 16 has an invalid length.
[  484.428878][T12524] netlink: 'syz.1.2077': attribute type 10 has an invalid length.
[  485.195810][T12540] tap0: tun_chr_ioctl cmd 1074025677
[  485.203703][T12540] tap0: linktype set to 778
[  485.737553][T12543] __nla_validate_parse: 4 callbacks suppressed
[  485.737596][T12543] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2084'.
[  485.764800][T12545] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2084'.
[  486.176336][T12560] validate_nla: 1 callbacks suppressed
[  486.176405][T12560] netlink: 'syz.1.2089': attribute type 16 has an invalid length.
[  486.192530][T12560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2089'.
[  486.254067][T12560] netlink: 'syz.1.2089': attribute type 10 has an invalid length.
[  486.273913][T12558] tap0: tun_chr_ioctl cmd 1074025677
[  486.286417][T12558] tap0: linktype set to 778
[  487.527925][T12583] tap0: tun_chr_ioctl cmd 1074025677
[  487.564046][T12583] tap0: linktype set to 778
[  487.686730][T12586] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2097'.
[  487.730871][T12586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2097'.
[  487.949153][T12595] netlink: 'syz.0.2100': attribute type 16 has an invalid length.
[  487.969228][T12595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2100'.
[  488.027733][T12598] netlink: 'syz.0.2100': attribute type 10 has an invalid length.
[  489.537231][T12618] tap0: tun_chr_ioctl cmd 1074025677
[  489.581247][T12618] tap0: linktype set to 778
[  489.769110][T12624] tap0: tun_chr_ioctl cmd 1074025677
[  489.789211][T12624] tap0: linktype set to 778
[  489.840104][T12626] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2109'.
[  489.872653][T12626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2109'.
[  489.984249][T12630] netlink: 'syz.3.2110': attribute type 16 has an invalid length.
[  490.007825][T12630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2110'.
[  490.030983][T12630] netlink: 'syz.3.2110': attribute type 10 has an invalid length.
[  490.534415][T12655] netlink: 'syz.3.2119': attribute type 9 has an invalid length.
[  490.559479][T12655] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2119'.
[  491.933814][T12662] tap0: tun_chr_ioctl cmd 1074025677
[  491.948448][T12662] tap0: linktype set to 778
[  491.987382][T12666] tap0: tun_chr_ioctl cmd 1074025677
[  491.995242][T12666] tap0: linktype set to 778
[  492.015437][T12672] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2124'.
[  492.027360][T12672] bridge_slave_1: entered promiscuous mode
[  492.035162][T12673] netlink: 'syz.0.2124': attribute type 10 has an invalid length.
[  492.096551][T12673] team0 (unregistering): Port device team_slave_1 removed
[  492.115149][T12673] team0 (unregistering): Port device wlan1 removed
[  492.126055][T12673] team0 (unregistering): Port device macvlan0 removed
[  492.188174][T12664] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2122'.
[  492.229393][T12664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2122'.
[  492.627831][T12689] netlink: 'syz.0.2130': attribute type 16 has an invalid length.
[  492.647030][T12689] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2130'.
[  492.666684][T12689] netlink: 'syz.0.2130': attribute type 10 has an invalid length.
[  493.778807][T12703] tap0: tun_chr_ioctl cmd 1074025677
[  493.812903][T12703] tap0: linktype set to 778
[  493.818901][T12711] tap0: tun_chr_ioctl cmd 1074025677
[  493.828361][T12711] tap0: linktype set to 778
[  493.838047][T12707] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2137'.
[  493.861710][T12712] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2137'.
[  494.058886][T12722] netlink: 'syz.3.2141': attribute type 16 has an invalid length.
[  494.069218][T12722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2141'.
[  494.096960][T12722] netlink: 'syz.3.2141': attribute type 10 has an invalid length.
[  494.147866][T12718] netlink: 703 bytes leftover after parsing attributes in process `syz.0.2140'.
[  495.088128][T12742] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2148'.
[  495.183339][T12742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2148'.
[  495.471801][T12746] tap0: tun_chr_ioctl cmd 1074025677
[  495.478854][T12746] tap0: linktype set to 778
[  495.763283][T12755] tap0: tun_chr_ioctl cmd 1074025677
[  495.782222][T12760] netlink: 'syz.2.2155': attribute type 16 has an invalid length.
[  495.798990][T12755] tap0: linktype set to 778
[  495.830095][T12760] netlink: 'syz.2.2155': attribute type 10 has an invalid length.
[  497.144613][T12782] __nla_validate_parse: 3 callbacks suppressed
[  497.144632][T12782] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2163'.
[  497.411585][T12791] tap0: tun_chr_ioctl cmd 1074025677
[  497.426926][T12791] tap0: linktype set to 778
[  497.685040][T12799] netlink: 'syz.2.2168': attribute type 16 has an invalid length.
[  497.704177][T12799] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2168'.
[  502.060413][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  502.066835][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  515.019517][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  515.040012][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  515.048738][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  515.061409][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  515.077169][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  515.085010][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  515.330977][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  515.350591][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  515.359030][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  515.369197][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  515.379378][   T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  515.389912][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  515.991225][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  516.006083][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  516.015334][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  516.026418][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  516.035790][   T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  516.044003][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  516.178956][ T5783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  516.188834][ T5783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  516.198218][ T5783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  516.207193][ T5783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  516.216220][ T5783] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  516.225761][ T5783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  516.596339][T12820] chnl_net:caif_netlink_parms(): no params data found
[  517.014328][T12824] chnl_net:caif_netlink_parms(): no params data found
[  517.164295][ T5783] Bluetooth: hci4: command tx timeout
[  517.189087][T12820] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.205820][T12820] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.381561][T12820] bridge_slave_0: entered allmulticast mode
[  517.389993][T12820] bridge_slave_0: entered promiscuous mode
[  517.402535][T12820] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.429986][T12820] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.439027][T12820] bridge_slave_1: entered allmulticast mode
[  517.451514][T12820] bridge_slave_1: entered promiscuous mode
[  517.509373][ T5783] Bluetooth: hci5: command tx timeout
[  517.691287][T12820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.774050][T12820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.038561][T12820] team0: Port device team_slave_0 added
[  518.119781][ T5783] Bluetooth: hci6: command tx timeout
[  518.157570][T12830] chnl_net:caif_netlink_parms(): no params data found
[  518.189413][T12820] team0: Port device team_slave_1 added
[  518.213599][T12827] chnl_net:caif_netlink_parms(): no params data found
[  518.235718][T12824] bridge0: port 1(bridge_slave_0) entered blocking state
[  518.250364][T12824] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.268006][T12824] bridge_slave_0: entered allmulticast mode
[  518.278599][T12824] bridge_slave_0: entered promiscuous mode
[  518.285270][ T5783] Bluetooth: hci7: command tx timeout
[  518.395447][T12824] bridge0: port 2(bridge_slave_1) entered blocking state
[  518.411089][T12824] bridge0: port 2(bridge_slave_1) entered disabled state
[  518.418696][T12824] bridge_slave_1: entered allmulticast mode
[  518.447147][T12824] bridge_slave_1: entered promiscuous mode
[  518.653411][T12820] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.669969][T12820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.713793][T12820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.242207][ T5783] Bluetooth: hci4: command tx timeout
[  519.564258][ T5783] Bluetooth: hci5: command tx timeout
[  520.199992][ T5783] Bluetooth: hci6: command tx timeout
[  520.359907][ T5783] Bluetooth: hci7: command tx timeout
[  521.319948][ T5783] Bluetooth: hci4: command tx timeout
[  521.645412][ T5783] Bluetooth: hci5: command tx timeout
[  522.280397][ T5783] Bluetooth: hci6: command tx timeout
[  522.440085][ T5783] Bluetooth: hci7: command tx timeout
[  523.400060][ T5783] Bluetooth: hci4: command tx timeout
[  523.723496][ T5783] Bluetooth: hci5: command tx timeout
[  524.360820][ T5783] Bluetooth: hci6: command tx timeout
[  524.519971][ T5783] Bluetooth: hci7: command tx timeout
[  573.279694][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  573.286191][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  575.330215][   T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  575.339784][   T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  575.348190][   T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  575.357471][   T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  575.366836][   T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  575.374719][   T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  575.468876][ T5783] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  575.478684][ T5783] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  575.487754][ T5783] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  575.497465][ T5783] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  575.505780][ T5783] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  575.514469][ T5783] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  576.761342][   T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  576.771699][   T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  576.780592][   T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  576.791980][   T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  576.801245][   T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  576.809333][   T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  576.916891][ T5783] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  576.928668][ T5783] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  576.938424][ T5783] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  576.952211][ T5783] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  576.967953][ T5783] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  576.977431][ T5783] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  577.400133][ T5783] Bluetooth: hci8: command tx timeout
[  577.579690][ T5783] Bluetooth: hci9: command tx timeout
[  578.850839][   T51] Bluetooth: hci10: command tx timeout
[  579.080029][   T51] Bluetooth: hci11: command tx timeout
[  579.479874][   T51] Bluetooth: hci8: command tx timeout
[  579.639933][   T51] Bluetooth: hci9: command tx timeout
[  580.919911][   T51] Bluetooth: hci10: command tx timeout
[  581.160531][   T51] Bluetooth: hci11: command tx timeout
[  581.569879][   T51] Bluetooth: hci8: command tx timeout
[  581.739585][   T51] Bluetooth: hci9: command tx timeout
[  583.000346][   T51] Bluetooth: hci10: command tx timeout
[  583.250553][   T51] Bluetooth: hci11: command tx timeout
[  583.639860][   T51] Bluetooth: hci8: command tx timeout
[  583.818720][   T51] Bluetooth: hci9: command tx timeout
[  585.079853][   T51] Bluetooth: hci10: command tx timeout
[  585.319915][   T51] Bluetooth: hci11: command tx timeout
[  636.446178][ T5783] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  636.457043][ T5783] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  636.466161][ T5783] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  636.474798][ T5783] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  636.483517][ T5783] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  636.491596][ T5783] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  636.600970][   T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  636.615934][   T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  636.624456][   T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  636.633067][   T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  636.643364][   T51] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  636.652938][   T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  636.779524][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  636.786366][    C0] rcu: 	0-....: (9616 ticks this GP) idle=2114/1/0x4000000000000000 softirq=48500/48508 fqs=4765
[  636.798406][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  636.805051][    C0] rcu: 	 number:  1673449         19            0
[  636.811530][    C0] rcu: 	cputime:    26488      26001           57   ==> 52490(ms)
[  636.819580][    C0] rcu: 	(t=10500 jiffies g=64333 q=3657 ncpus=2)
[  636.825982][    C0] CPU: 0 PID: 12782 Comm: syz.1.2163 Not tainted syzkaller #0
[  636.833494][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  636.844038][    C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x1f/0x90
[  636.851917][    C0] Code: 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 65 48 8b 15 30 cf 7c 7e 65 8b 0d 31 cf 7c 7e 81 e1 00 01 ff 00 74 11 <81> f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 8a f8 15 00
[  636.871683][    C0] RSP: 0018:ffffc90000007538 EFLAGS: 00000206
[  636.879154][    C0] RAX: ffffffff813b2298 RBX: ffffc900000075b0 RCX: 0000000000000100
[  636.887287][    C0] RDX: ffff8880608c3c00 RSI: 0000000000000001 RDI: 0000000000000000
[  636.895300][    C0] RBP: 0000000000000001 R08: ffff8880608c3c00 R09: 0000000000000003
[  636.903393][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff81766947
[  636.911512][    C0] R13: 00000000000002c0 R14: dffffc0000000000 R15: 1ffff92000000eb6
[  636.919649][    C0] FS:  00007fea806046c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  636.929090][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  636.940518][    C0] CR2: 0000560fe67bcd08 CR3: 0000000030cae000 CR4: 00000000003506f0
[  636.948651][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[  636.956683][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  636.964718][    C0] Call Trace:
[  636.968126][    C0]  <IRQ>
[  636.971015][    C0]  unwind_get_return_address+0x68/0xc0
[  636.977281][    C0]  ? stack_trace_save+0x100/0x100
[  636.982403][    C0]  arch_stack_walk+0x11d/0x190
[  636.987236][    C0]  ? handle_softirqs+0x27d/0x820
[  636.992247][    C0]  stack_trace_save+0xaa/0x100
[  636.997061][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  637.002311][    C0]  ? stack_trace_save+0xaa/0x100
[  637.007336][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  637.012517][    C0]  kasan_set_track+0x4e/0x70
[  637.017247][    C0]  ? kasan_set_track+0x4e/0x70
[  637.022052][    C0]  ? __kasan_slab_alloc+0x6c/0x80
[  637.027137][    C0]  ? slab_post_alloc_hook+0x6a/0x4d0
[  637.032756][    C0]  ? kmem_cache_alloc_node+0x1af/0x310
[  637.038439][    C0]  ? kmalloc_reserve+0x95/0x240
[  637.043462][    C0]  ? __alloc_skb+0x138/0x2c0
[  637.048089][    C0]  ? aoecmd_cfg+0x2c5/0xa50
[  637.052726][    C0]  ? call_timer_fn+0x189/0x540
[  637.057530][    C0]  ? __run_timers+0x570/0x810
[  637.062561][    C0]  ? run_timer_softirq+0x67/0xf0
[  637.067583][    C0]  __kasan_slab_alloc+0x6c/0x80
[  637.072483][    C0]  slab_post_alloc_hook+0x6a/0x4d0
[  637.077731][    C0]  kmem_cache_alloc_node+0x1af/0x310
[  637.083065][    C0]  ? kmalloc_reserve+0x95/0x240
[  637.087964][    C0]  kmalloc_reserve+0x95/0x240
[  637.092688][    C0]  __alloc_skb+0x138/0x2c0
[  637.097142][    C0]  aoecmd_cfg+0x2c5/0xa50
[  637.101527][    C0]  ? aoecmd_cfg+0x10e/0xa50
[  637.106098][    C0]  ? ktcomplete+0x2a0/0x2a0
[  637.110754][    C0]  call_timer_fn+0x189/0x540
[  637.115380][    C0]  ? skbfree+0x340/0x340
[  637.119716][    C0]  ? call_timer_fn+0xd2/0x540
[  637.124446][    C0]  ? __run_timers+0x810/0x810
[  637.129179][    C0]  ? skbfree+0x340/0x340
[  637.133568][    C0]  __run_timers+0x570/0x810
[  637.138132][    C0]  ? detach_timer+0x2b0/0x2b0
[  637.142856][    C0]  run_timer_softirq+0x67/0xf0
[  637.147741][    C0]  handle_softirqs+0x27d/0x820
[  637.152534][    C0]  ? read_tsc+0x9/0x20
[  637.156651][    C0]  ? ktime_get+0x24b/0x280
[  637.161138][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  637.166024][    C0]  ? do_softirq+0x1a0/0x1a0
[  637.170563][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  637.175805][    C0]  __irq_exit_rcu+0xd3/0x190
[  637.180463][    C0]  ? irq_exit_rcu+0x20/0x20
[  637.185010][    C0]  irq_exit_rcu+0x9/0x20
[  637.189283][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  637.195056][    C0]  </IRQ>
[  637.198024][    C0]  <TASK>
[  637.200998][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  637.207149][    C0] RIP: 0010:finish_task_switch+0x267/0x8f0
[  637.212995][    C0] Code: 26 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 3b 30 09 e8 7e 0b 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[  637.232652][    C0] RSP: 0018:ffffc90010247760 EFLAGS: 00000286
[  637.238784][    C0] RAX: 2d2f6182d84ca800 RBX: 0000000000000000 RCX: 2d2f6182d84ca800
[  637.246793][    C0] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0
[  637.254802][    C0] RBP: ffffc900102477b0 R08: ffffffff911bc5ff R09: 1ffffffff22378bf
[  637.262984][    C0] R10: dffffc0000000000 R11: fffffbfff22378c0 R12: ffff8880608c3c00
[  637.270989][    C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48
[  637.279025][    C0]  __schedule+0x15b6/0x4660
[  637.283684][    C0]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  637.290924][    C0]  ? lock_chain_count+0x20/0x20
[  637.295840][    C0]  ? asan.module_dtor+0x20/0x20
[  637.300741][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  637.306946][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  637.312225][    C0]  ? preempt_schedule+0xc0/0xd0
[  637.317124][    C0]  preempt_schedule_common+0x82/0xc0
[  637.322450][    C0]  preempt_schedule+0xc0/0xd0
[  637.327255][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  637.332925][    C0]  ? event_function+0x300/0x300
[  637.338125][    C0]  ? smp_call_function_single+0x5a0/0x5a0
[  637.344003][    C0]  preempt_schedule_thunk+0x1a/0x30
[  637.349318][    C0]  ? smp_call_function_single+0x488/0x5a0
[  637.355081][    C0]  smp_call_function_single+0x48d/0x5a0
[  637.360669][    C0]  ? event_function+0x300/0x300
[  637.365560][    C0]  ? flush_smp_call_function_queue+0x250/0x250
[  637.371859][    C0]  ? event_function+0x300/0x300
[  637.376762][    C0]  perf_install_in_context+0x5bb/0x920
[  637.382278][    C0]  ? exclusive_event_installable+0x2c0/0x2c0
[  637.388326][    C0]  ? add_event_to_ctx+0x1170/0x1170
[  637.393568][    C0]  ? perf_event__header_size+0x3d/0x220
[  637.399154][    C0]  ? perf_event__header_size+0x165/0x220
[  637.405105][    C0]  __se_sys_perf_event_open+0x1841/0x1c60
[  637.410873][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  637.416638][    C0]  ? lock_chain_count+0x20/0x20
[  637.421557][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  637.426791][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  637.432489][    C0]  do_syscall_64+0x55/0xb0
[  637.436940][    C0]  ? clear_bhb_loop+0x40/0x90
[  637.441641][    C0]  ? clear_bhb_loop+0x40/0x90
[  637.446530][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  637.452469][    C0] RIP: 0033:0x7fea7f79ce59
[  637.457009][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  637.476940][    C0] RSP: 002b:00007fea80604028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  637.485749][    C0] RAX: ffffffffffffffda RBX: 00007fea7fa15fa0 RCX: 00007fea7f79ce59
[  637.494476][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  637.502864][    C0] RBP: 00007fea7f832e6f R08: 0000000000000002 R09: 0000000000000000
[  637.511331][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  637.519734][    C0] R13: 00007fea7fa16038 R14: 00007fea7fa15fa0 R15: 00007ffe45ec8988
[  637.527781][    C0]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  638.341736][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  638.348140][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  638.863167][T12879] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  638.873631][T12879] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  638.885571][T12879] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  638.894446][T12879] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  638.903783][T12879] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  638.911827][T12879] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  638.922734][T12879] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  638.930962][T12879] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  638.938489][T12879] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  638.946782][T12879] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  638.957523][ T5783] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  638.966631][ T5783] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  639.017983][T12879] Bluetooth: hci12: command tx timeout
[  639.025021][T12879] Bluetooth: hci13: command tx timeout
[  640.519834][ T5783] Bluetooth: hci4: command 0x0406 tx timeout
[  641.088531][T12879] Bluetooth: hci12: command tx timeout
[  641.094840][ T5783] Bluetooth: hci13: command tx timeout
[  641.136651][T12879] Bluetooth: hci15: command tx timeout
[  641.143895][ T5783] Bluetooth: hci14: command tx timeout
[  642.372059][T12885] Bluetooth: hci5: command 0x0406 tx timeout
[  642.378294][T12885] Bluetooth: hci6: command 0x0406 tx timeout
[  642.386007][T12884] Bluetooth: hci7: command 0x0406 tx timeout
[  643.159901][T12884] Bluetooth: hci15: command tx timeout
[  643.165495][T12884] Bluetooth: hci13: command tx timeout
[  643.175481][ T5783] Bluetooth: hci12: command tx timeout
[  643.183089][T12885] Bluetooth: hci14: command tx timeout
[  645.240033][T12879] Bluetooth: hci14: command tx timeout
[  645.245648][T12879] Bluetooth: hci12: command tx timeout
[  645.251640][T12884] Bluetooth: hci15: command tx timeout
[  645.259680][T12886] Bluetooth: hci13: command tx timeout