last executing test programs:

48.473184928s ago: executing program 2 (id=3427):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

44.185626479s ago: executing program 2 (id=3436):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

42.459042019s ago: executing program 2 (id=3430):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000700)={[{0x2b, 'cpu'}, {0x2d, 'io'}, {0x2b, 'pids'}]}, 0xf)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4200, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x400, 0x3}, {0xc, 0xf60, 0x10000}, {0x6, 0xf, 0xac}]}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @fwd={0x9}, @float={0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/22, 0x7f, 0x16, 0x1, 0x22}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r5, r6, 0x1, 0x5, 0x2}, 0x50)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
write$cgroup_int(r8, &(0x7f0000000580)=0xe605, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

40.161019674s ago: executing program 2 (id=3437):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000700)={[{0x2b, 'cpu'}, {0x2d, 'io'}, {0x2b, 'pids'}]}, 0xf)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4200, 0x0)
ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x400, 0x3}, {0xc, 0xf60, 0x10000}, {0x6, 0xf, 0xac}]}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @fwd={0x9}, @float={0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/22, 0x7f, 0x16, 0x1, 0x22}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r4, r5, 0x1, 0x5, 0x2}, 0x50)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
write$cgroup_int(r7, &(0x7f0000000580)=0xe605, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

38.285575398s ago: executing program 2 (id=3441):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

36.013676091s ago: executing program 2 (id=3450):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000480)="c8bb4e7dbee18bf660ce80ab0800f8aebec87a72c6502ea0357a2853a0b3cf357fc6", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1)

23.856812218s ago: executing program 0 (id=3514):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10)

23.718993391s ago: executing program 0 (id=3517):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10)
sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
r5 = socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x891d, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)

23.301673551s ago: executing program 3 (id=3521):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 2)

23.284148311s ago: executing program 0 (id=3522):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0xfffffffe, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x2f}, 0x20)

23.073117736s ago: executing program 0 (id=3523):
mkdir(0x0, 0xbe9bac6d2d0f4e0b)
socket$kcm(0x10, 0x2, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000280)=r1) (async, rerun: 64)
socket$kcm(0xa, 0x5, 0x0) (rerun: 64)
socket$kcm(0xa, 0x6, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xe70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)

22.968931169s ago: executing program 3 (id=3524):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x2b1ae13e0262073a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x2, 0x9}, 0x2110, 0xffffffffffffffff, 0x0, 0x5, 0x16f, 0xff, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x20000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a077828123d181d"], 0xfe33)

21.619733471s ago: executing program 4 (id=3526):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) (fail_nth: 2)

21.535728613s ago: executing program 3 (id=3527):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r3}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4200, 0x0)
ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x400, 0x3}, {0xc, 0xf60, 0x10000}, {0x6, 0xf, 0xac}]}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @fwd={0x9}, @float={0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/22, 0x7f, 0x16, 0x1, 0x22}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r6, r7, 0x1, 0x5, 0x2}, 0x50)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
write$cgroup_int(r9, &(0x7f0000000580)=0xe605, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

21.453666744s ago: executing program 0 (id=3528):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0))
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

21.453287924s ago: executing program 4 (id=3529):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x405, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000000940)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236808dd10d88c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a914f94ca2935d9f30457a8ffb21aef4a95a155fab70a40b08605690f6333", 0x2, 0x0, 0x1000}, 0x2c)

21.187236441s ago: executing program 4 (id=3532):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627")
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000050000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000003009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xf, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x300f000, 0x0, 0x0, 0x0, 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x541b, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12)

19.771243784s ago: executing program 3 (id=3535):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0xfffffd26)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x401c5820, &(0x7f0000000040)=0xfdfd)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)

19.52002016s ago: executing program 4 (id=3536):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x21, 0x4, 0x6, 0x7, 0x0, 0x8000000000000001, 0x40080, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000040)}, 0x4004, 0xf, 0x5, 0x6, 0x9, 0x5, 0x8, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) (async)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={<r7=>0xffffffffffffffff}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400), &(0x7f0000000440)=[0x0], 0x0, 0x5a, 0x0, 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) (async)
sendmsg$inet(r7, &(0x7f00000007c0)={&(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="834b17351f2eede7e6f543640a30237f6061d9555630c97dad3c7d15e01de95da94342c6e3f7b666f180c47bc3514eaa774f7dca9a726784d4b7f4763e2a0ac60b814930da5f689b6f7c6f0c35318bcda9bf449d4f099984", 0x58}], 0x1, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x35, 0x0, 0x0, [0x2, 0x6, 0x1, 0x101, 0x620, 0x81, 0x7f, 0x1d0a]}, @timestamp_prespec={0x44, 0x4, 0x4b, 0x3, 0x3}, @ssrr={0x89, 0x13, 0x1f, [@local, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @loopback}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @noop, @lsrr={0x83, 0x17, 0x76, [@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2, @remote]}, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x4, [{@remote, 0x7ff}, {@multicast1, 0x4}]}, @rr={0x7, 0xb, 0xa3, [@local, @rand_addr=0x64010101]}, @noop]}}}], 0xf0}, 0x400c850) (async)
socket$kcm(0xa, 0x2, 0x88) (async)
socket$kcm(0x10, 0x3, 0x10) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x100001, 0x6}, 0x104290, 0x0, 0x51, 0xd, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x203}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socket$kcm(0xa, 0x3, 0x73)

19.284232735s ago: executing program 3 (id=3537):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0xfd, 0x0, 0x0, 0x0, 0x3, 0x2b1ae13e0262073a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x2, 0x9}, 0x2110, 0xffffffffffffffff, 0x0, 0x5, 0x16f, 0xff, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x20000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a077828123d181d"], 0xfe33)

18.930526204s ago: executing program 4 (id=3538):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

17.40389489s ago: executing program 1 (id=3540):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair(0x18, 0x0, 0x2, &(0x7f0000000000))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x141021, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x100000, 0x4, 0x0, 0x1, 0x6, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa, 0x3}, 0x116d07, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x405, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000000940)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236808dd10d88c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a914f94ca2935d9f30457a8ffb21aef4a95a155fab70a40b08605690f6333", 0x2, 0x0, 0x1000}, 0x2c)

17.270328073s ago: executing program 1 (id=3541):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x28)

17.226986134s ago: executing program 1 (id=3542):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x405, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000000940)="b9ff030f6044238cb89e14f088a81bff88641100404863330021ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236808dd10d88c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a914f94ca2935d9f30457a8ffb21aef4a95a155fab70a40b08605690f6333", 0x2, 0x0, 0x1000}, 0x2c)

17.137120256s ago: executing program 1 (id=3543):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x2, 0x3, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10022)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161)
sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x0)

16.916333161s ago: executing program 1 (id=3544):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0xb, 0x1, 0x6, &(0x7f00000007c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
r3 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0x2}], 0x20}, 0xfc40)
sendmsg$kcm(r2, &(0x7f0000000180)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030202590400000000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0b", 0x40}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada300c9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2c23620", 0x40}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}], 0x3}, 0x200400c4)
socketpair(0x1, 0x1, 0x0, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r4, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ca00"], 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000080))

15.828594247s ago: executing program 4 (id=3545):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r3}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4200, 0x0)
ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x400, 0x3}, {0xc, 0xf60, 0x10000}, {0x6, 0xf, 0xac}]}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @fwd={0x9}, @float={0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/22, 0x7f, 0x16, 0x1, 0x22}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r6, r7, 0x1, 0x5, 0x2}, 0x50)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
write$cgroup_int(r9, &(0x7f0000000580)=0xe605, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

15.762122469s ago: executing program 3 (id=3546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000640), &(0x7f0000000680)=r4}, 0x20)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

15.717285059s ago: executing program 1 (id=3547):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1861}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10d, 0x3, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x88, 0x64, &(0x7f00000009c0)=r3, 0x4)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9, <r10=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2002)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000280), 0x0}, 0x20)
sendmsg$inet(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc", 0x11}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000140), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4008}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a800350020000140", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x1)
socket$kcm(0x10, 0x400000002, 0x0)

15.641522521s ago: executing program 0 (id=3548):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

578.132116ms ago: executing program 32 (id=3548):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x0, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5ac}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f00000000c0)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd)

431.27333ms ago: executing program 33 (id=3547):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1861}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10d, 0x3, 0x0, 0x0)
recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r4, 0x88, 0x64, &(0x7f00000009c0)=r3, 0x4)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9, <r10=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2002)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000280), 0x0}, 0x20)
sendmsg$inet(r7, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x4000)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="f4000900062b2c25fe80000000000000dc", 0x11}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000140), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4008}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d80000001c0081044e81f782db440000041296a1180002000000000000000e1208000f0100810401a800350020000140", 0x30}], 0x1, 0x0, 0x0, 0x7400}, 0x1)
socket$kcm(0x10, 0x400000002, 0x0)

348.462062ms ago: executing program 34 (id=3546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50)
close(r3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r3}, &(0x7f0000000640), &(0x7f0000000680)=r4}, 0x20)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

0s ago: executing program 35 (id=3545):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x92}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0, 0x0}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r3}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x4200, 0x0)
ioctl$TUNSETPERSIST(r5, 0x400454cb, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@enum64={0x3, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x5, 0x400, 0x3}, {0xc, 0xf60, 0x10000}, {0x6, 0xf, 0xac}]}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @var={0x6, 0x0, 0x0, 0xe, 0x5}, @fwd={0x9}, @float={0x3}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/22, 0x7f, 0x16, 0x1, 0x22}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x1, '\x00', r6, r7, 0x1, 0x5, 0x2}, 0x50)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e01d000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
write$cgroup_int(r9, &(0x7f0000000580)=0xe605, 0x12)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)

kernel console output (not intermixed with test programs):

212': attribute type 29 has an invalid length.
[  475.544894][ T7377] netlink: 'syz.2.1212': attribute type 29 has an invalid length.
[  477.048954][ T7393] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1219'.
[  477.058631][ T7396] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1220'.
[  477.300130][ T7401] device syzkaller0 entered promiscuous mode
[  477.526160][ T7414] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1228'.
[  479.251617][ T7405] device sit0 entered promiscuous mode
[  479.261019][ T7424] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1232'.
[  479.680963][ T7437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1235'.
[  479.705913][ T7451] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.1241'.
[  479.776915][ T7452] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1243'.
[  479.787629][ T7452] device bridge_slave_1 entered promiscuous mode
[  479.977493][ T7460] netlink: 'syz.2.1245': attribute type 3 has an invalid length.
[  480.024702][ T7460] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1245'.
[  480.568764][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  480.604286][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.629943][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  480.638154][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.746584][ T7478] bridge0: port 3(batadv0) entered disabled state
[  480.906188][ T7478] device batadv0 left promiscuous mode
[  480.912369][ T7478] bridge0: port 3(batadv0) entered disabled state
[  480.967138][ T7486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  481.117679][ T7498] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1259'.
[  481.289998][ T7505] netlink: 'syz.4.1261': attribute type 10 has an invalid length.
[  481.298987][ T7505] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  481.323456][ T7505] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  481.341683][ T7507] netlink: 'syz.0.1263': attribute type 3 has an invalid length.
[  481.352380][ T7505] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  481.368272][ T7507] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1263'.
[  481.378262][ T7505] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  481.669484][ T7519] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1269'.
[  481.699496][ T7518] delete_channel: no stack
[  481.763416][ T7517] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1268'.
[  481.895881][ T7528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  482.041066][ T7535] netlink: 'syz.4.1277': attribute type 10 has an invalid length.
[  482.051196][ T7535] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  482.072925][ T7535] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  482.083945][ T7535] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  482.124687][ T7535] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  482.151318][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  482.162383][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.185930][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.197477][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.232303][ T7538] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  482.243838][ T7538] batman_adv: batadv0: Removing interface: virt_wifi0
[  482.287787][ T7543] netlink: 'syz.1.1279': attribute type 3 has an invalid length.
[  482.304860][ T7543] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1279'.
[  482.875318][ T7561] device syzkaller0 entered promiscuous mode
[  482.882143][ T7561] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  483.162382][ T7573] netlink: 'syz.4.1294': attribute type 3 has an invalid length.
[  483.471631][ T7586] device syzkaller0 entered promiscuous mode
[  484.346100][ T7605] netlink: 'syz.1.1305': attribute type 29 has an invalid length.
[  484.919199][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  484.926743][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_0
[  484.934666][ T7597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  484.942078][ T7597] batman_adv: batadv0: Removing interface: batadv_slave_1
[  484.977590][ T7599] syzkaller0: refused to change device tx_queue_len
[  484.987151][ T7605] netlink: 'syz.1.1305': attribute type 29 has an invalid length.
[  485.005247][ T7607] netlink: 'syz.1.1305': attribute type 29 has an invalid length.
[  485.572739][ T7636] device wlan1 entered promiscuous mode
[  485.922017][ T7657] hsr0: VLAN not yet supported
[  486.104748][ T7665] device sit0 entered promiscuous mode
[  486.846322][ T7671] IPv6: Can't replace route, no match found
[  487.323337][ T7693] __nla_validate_parse: 3 callbacks suppressed
[  487.323368][ T7693] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1339'.
[  487.580210][ T7704] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1345'.
[  488.086504][ T7721] netlink: 'syz.0.1354': attribute type 29 has an invalid length.
[  488.113140][ T7721] netlink: 'syz.0.1354': attribute type 29 has an invalid length.
[  488.128330][ T7721] netlink: 'syz.0.1354': attribute type 29 has an invalid length.
[  488.157525][ T7721] netlink: 'syz.0.1354': attribute type 4 has an invalid length.
[  488.183060][ T7721] netlink: 206220 bytes leftover after parsing attributes in process `syz.0.1354'.
[  488.488614][ T7737] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1359'.
[  491.087960][ T7762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  491.095499][ T7762] IPv6: NLM_F_CREATE should be set when creating new route
[  491.103106][ T7762] IPv6: NLM_F_CREATE should be set when creating new route
[  491.110525][ T7762] IPv6: NLM_F_CREATE should be set when creating new route
[  491.451833][ T7785] netlink: 'syz.1.1382': attribute type 10 has an invalid length.
[  491.461915][ T7785] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  491.477835][ T7785] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  491.505503][ T7785] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  491.612314][ T7785] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  491.652855][ T7783] Â: renamed from pim6reg1
[  493.774891][ T7798] netlink: 'syz.2.1388': attribute type 10 has an invalid length.
[  493.821858][ T7798] device team0 left promiscuous mode
[  493.828396][ T7798] device team_slave_1 left promiscuous mode
[  494.158139][ T7821] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1395'.
[  494.296200][ T7821] bridge0: port 3(bond0) entered disabled state
[  494.407814][ T7821] bridge0: port 3(bond0) entered disabled state
[  496.241891][ T7821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.260923][ T7821] device bond_slave_0 left promiscuous mode
[  496.307292][ T7821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  496.329662][ T7821] device bond_slave_1 left promiscuous mode
[  496.367579][ T7821] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  496.387786][ T7821] device batadv_slave_0 left promiscuous mode
[  496.447305][ T7821] bond0 (unregistering): (slave team0): Releasing backup interface
[  496.465948][ T7821] device team0 left promiscuous mode
[  496.471283][ T7821] device team_slave_0 left promiscuous mode
[  496.478037][ T7821] device team_slave_1 left promiscuous mode
[  496.490036][ T7821] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  496.498948][ T7821] device batadv0 left promiscuous mode
[  496.509218][ T7821] bond0 (unregistering): Released all slaves
[  496.517089][ T7823] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1395'.
[  496.570583][ T7823] team0: Port device team_slave_0 removed
[  496.592778][ T7825] netlink: 'syz.4.1396': attribute type 10 has an invalid length.
[  496.600747][ T7825] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  496.614054][ T7825] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  496.624288][ T7825] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  496.636746][ T7825] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  496.707691][ T7847] netlink: 'syz.0.1415': attribute type 10 has an invalid length.
[  496.717192][ T7847] device hsr0 entered promiscuous mode
[  499.164337][ T7880] netlink: 'syz.2.1422': attribute type 10 has an invalid length.
[  499.744866][ T7920] netlink: 'syz.2.1441': attribute type 10 has an invalid length.
[  500.023340][ T7934] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1448'.
[  500.066881][ T7934] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1448'.
[  500.402025][ T7956] netlink: 'syz.1.1459': attribute type 10 has an invalid length.
[  501.086624][ T7997] netlink: 'syz.4.1477': attribute type 10 has an invalid length.
[  501.113725][ T7997] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  501.152670][ T7997] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  501.196235][ T7997] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  501.233836][ T7997] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  501.344535][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  501.350877][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  501.903028][ T8043] netlink: 'syz.1.1498': attribute type 10 has an invalid length.
[  502.160253][ T8039] device syzkaller0 entered promiscuous mode
[  503.863753][ T8056] device syzkaller0 entered promiscuous mode
[  503.884876][ T8053] device syzkaller0 entered promiscuous mode
[  507.373309][ T8121] device syzkaller0 entered promiscuous mode
[  507.425273][ T8121] syzkaller0: tun_net_xmit 1280
[  507.435451][ T8121] syzkaller0: create flow: hash 2869446544 index 1
[  507.601045][ T8119] syzkaller0: delete flow: hash 2869446544 index 1
[  507.706143][ T8142] syz.1.1528[8142] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  507.706240][ T8142] syz.1.1528[8142] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  509.758645][ T8125] device syzkaller0 entered promiscuous mode
[  509.817929][ T8143] device syzkaller0 entered promiscuous mode
[  513.322307][ T8213] device syzkaller0 entered promiscuous mode
[  515.204905][ T8239] device syzkaller0 entered promiscuous mode
[  516.925559][ T8316] tap0: tun_chr_ioctl cmd 2147767521
[  517.078220][ T8320] device syzkaller0 entered promiscuous mode
[  517.242353][ T8331] device syzkaller0 entered promiscuous mode
[  518.622988][ T8330] tap0: tun_chr_ioctl cmd 1074025677
[  518.628502][ T8330] tap0: linktype set to 6
[  518.641596][ T8342] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1592'.
[  522.399339][ T8357] device syzkaller0 entered promiscuous mode
[  523.848665][ T8375] device syzkaller0 entered promiscuous mode
[  523.855537][ T8384] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1606'.
[  523.870593][ T8392] tap0: tun_chr_ioctl cmd 1074025677
[  523.876488][ T8392] tap0: linktype set to 768
[  527.459256][ T8405] device syzkaller0 entered promiscuous mode
[  527.468836][ T8423] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1619'.
[  529.344130][ T8445] syzkaller0: tun_chr_ioctl cmd 2147767520
[  529.356489][ T8463] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1634'.
[  529.382982][ T8466] pimreg1: tun_chr_ioctl cmd 1074025675
[  529.389255][ T8466] pimreg1: persist disabled
[  530.566208][ T8538] syz.0.1669[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  530.566342][ T8538] syz.0.1669[8538] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  531.461647][ T8588] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1696'.
[  532.095698][ T8619] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1711'.
[  532.508858][ T8644] syz.0.1724[8644] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  532.508950][ T8644] syz.0.1724[8644] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  532.675846][ T8655] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1728'.
[  535.063174][ T8692] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1744'.
[  535.130000][ T8686] delete_channel: no stack
[  535.350642][ T8705] netlink: 'syz.3.1753': attribute type 10 has an invalid length.
[  536.199103][ T8723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1762'.
[  536.361528][ T8733] netlink: 'syz.3.1764': attribute type 10 has an invalid length.
[  536.387184][ T8733] team0: Device hsr_slave_0 failed to register rx_handler
[  536.544810][ T8741] netlink: 'syz.3.1768': attribute type 10 has an invalid length.
[  536.707852][ T8748] netlink: 'syz.0.1770': attribute type 3 has an invalid length.
[  536.717666][ T8748] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1770'.
[  539.837595][ T8764] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1776'.
[  540.198672][ T4325] Bluetooth: hci1: ISO packet for unknown connection handle 0
[  540.312386][ T8778] netlink: 'syz.3.1783': attribute type 10 has an invalid length.
[  541.668948][ T8818] netlink: 'syz.4.1800': attribute type 10 has an invalid length.
[  541.686432][ T8820] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1803'.
[  541.712633][ T8818] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  541.725487][ T8820] net_ratelimit: 258 callbacks suppressed
[  541.725559][ T8820] netlink: zone id is out of range
[  541.749304][ T8820] netlink: zone id is out of range
[  541.759780][ T8818] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  541.771240][ T8820] netlink: zone id is out of range
[  541.777023][ T8820] netlink: zone id is out of range
[  541.795085][ T8818] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  541.825850][ T8820] netlink: del zone limit has 4 unknown bytes
[  541.834477][ T8818] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  543.936324][ T8832] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  544.046775][ T8832] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  544.056173][ T8832] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  544.065502][ T8832] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  544.074881][ T8832] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  544.759406][ T8858] netlink: 'syz.0.1818': attribute type 10 has an invalid length.
[  544.885997][ T8866] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1823'.
[  547.240111][ T8886] netlink: 'syz.3.1833': attribute type 16 has an invalid length.
[  547.263650][ T8886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1833'.
[  547.274462][ T8897] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1835'.
[  547.543401][ T8908] device wlan0 entered promiscuous mode
[  547.639534][ T8913] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1844'.
[  547.970172][ T8917] netlink: 'syz.3.1846': attribute type 14 has an invalid length.
[  548.003062][ T8917] netlink: 56815 bytes leftover after parsing attributes in process `syz.3.1846'.
[  551.017626][ T8926] netlink: 'syz.4.1849': attribute type 10 has an invalid length.
[  551.076496][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.114582][ T8926] device bridge_slave_1 left promiscuous mode
[  551.138628][ T8926] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.205063][ T8926] device bridge_slave_1 entered promiscuous mode
[  551.214926][ T8926] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  551.227292][ T8928] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1850'.
[  551.460997][ T4325] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6
[  551.756587][ T8959] netlink: 'syz.1.1861': attribute type 25 has an invalid length.
[  551.773222][ T8959] netlink: 'syz.1.1861': attribute type 25 has an invalid length.
[  553.644249][ T8968] device virt_wifi0 entered promiscuous mode
[  553.764346][ T8976] netlink: 'syz.0.1868': attribute type 16 has an invalid length.
[  553.812903][ T8976] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1868'.
[  556.450533][ T9011] netlink: 'syz.1.1882': attribute type 16 has an invalid length.
[  556.470413][ T9011] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1882'.
[  556.800958][ T9018] device syzkaller0 entered promiscuous mode
[  559.657487][ T9038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1891'.
[  562.110089][ T9058] netlink: 'syz.0.1899': attribute type 12 has an invalid length.
[  562.123828][ T9058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1899'.
[  562.307887][ T9067] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1903'.
[  562.364522][ T9069] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1904'.
[  562.422775][ T9069] net_ratelimit: 3261 callbacks suppressed
[  562.422792][ T9069] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  562.482979][ T9069] netlink: 'syz.3.1904': attribute type 25 has an invalid length.
[  562.491305][ T9069] netlink: 'syz.3.1904': attribute type 10 has an invalid length.
[  562.599602][ T9079] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.1906'.
[  562.610821][ T9079] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  562.789899][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  562.796378][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  564.353512][ T9083] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1909'.
[  564.370435][ T9083] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  564.390207][ T9083] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  564.501146][ T9085] netlink: 'syz.2.1910': attribute type 10 has an invalid length.
[  564.519792][ T9085] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1910'.
[  564.902851][ T9108] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1919'.
[  564.915069][ T9108] bridge_slave_1: default FDB implementation only supports local addresses
[  565.198128][ T9114] netlink: 'syz.4.1923': attribute type 3 has an invalid length.
[  565.238808][ T9114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1923'.
[  565.354252][ T9118] netlink: 'syz.2.1925': attribute type 11 has an invalid length.
[  565.371997][ T9118] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1925'.
[  565.399332][ T9117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  567.567428][ T9121] netlink: 'syz.4.1926': attribute type 3 has an invalid length.
[  567.586194][ T9121] netlink: 'syz.4.1926': attribute type 2 has an invalid length.
[  567.595307][ T9121] netlink: 'syz.4.1926': attribute type 9 has an invalid length.
[  567.613621][ T9121] netlink: 'syz.4.1926': attribute type 10 has an invalid length.
[  567.631820][ T9121] netlink: 'syz.4.1926': attribute type 11 has an invalid length.
[  567.687971][ T9121] netlink: 'syz.4.1926': attribute type 12 has an invalid length.
[  567.708217][ T9121] netlink: 'syz.4.1926': attribute type 13 has an invalid length.
[  567.735542][ T9121] netlink: 'syz.4.1926': attribute type 14 has an invalid length.
[  568.105201][ T9142] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1934'.
[  568.205830][ T9141] delete_channel: no stack
[  568.368090][ T9156] device syzkaller0 entered promiscuous mode
[  572.811991][ T9185] device veth0_vlan left promiscuous mode
[  572.829467][ T9185] device veth0_vlan entered promiscuous mode
[  572.883580][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  572.923367][ T6567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  573.047349][ T9194] netlink: 'syz.1.1953': attribute type 10 has an invalid length.
[  573.082602][ T9196] netlink: 'syz.3.1954': attribute type 10 has an invalid length.
[  573.359814][ T9204] netlink: 'syz.3.1957': attribute type 10 has an invalid length.
[  573.651706][ T9215] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1962'.
[  575.865791][ T9222] device syzkaller0 entered promiscuous mode
[  579.512844][ T9247] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1975'.
[  580.295916][ T9274] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1986'.
[  580.419409][ T9278] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1988'.
[  580.613805][ T9282] device syzkaller0 entered promiscuous mode
[  580.644764][ T9288] netlink: 'syz.1.1992': attribute type 10 has an invalid length.
[  580.668859][ T9288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1992'.
[  580.709963][ T9288] device team0 entered promiscuous mode
[  580.720457][ T9288] device team_slave_1 entered promiscuous mode
[  580.728963][ T9288] 8021q: adding VLAN 0 to HW filter on device team0
[  580.740001][ T9288] bridge0: port 3(team0) entered blocking state
[  580.748354][ T9288] bridge0: port 3(team0) entered disabled state
[  580.758818][ T9288] bridge0: port 3(team0) entered blocking state
[  580.765259][ T9288] bridge0: port 3(team0) entered forwarding state
[  586.136680][ T9307] netlink: 'syz.2.1999': attribute type 21 has an invalid length.
[  586.144839][ T9315] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2003'.
[  586.471196][ T9349] mac80211_hwsim hwsim5 .3ãc¤±: renamed from wlan1
[  586.791179][ T9364] device syzkaller0 entered promiscuous mode
[  586.821374][ T9366] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2025'.
[  589.060345][ T9386] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2034'.
[  589.076525][ T9397] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2039'.
[  593.335845][ T9427] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2051'.
[  594.189533][ T9460] device wlan1 left promiscuous mode
[  594.335571][ T9467] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1
[  594.360485][ T9476] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2073'.
[  596.606903][ T4325] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  596.924377][ T9505] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2086'.
[  599.273798][ T9531] mac80211_hwsim hwsim7 .3ãc¤±: renamed from wlan1
[  599.506485][ T9542] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.2101'.
[  599.529336][ T6559] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00
[  599.529341][ T9545] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  599.555649][ T6559] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  599.751488][ T9560] netlink: 'syz.2.2108': attribute type 10 has an invalid length.
[  599.780107][ T9560] netlink: 'syz.2.2108': attribute type 4 has an invalid length.
[  599.822055][ T9560] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2108'.
[  599.832940][ T9560] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  601.994078][ T9579] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2118'.
[  602.134559][ T9587] device syzkaller0 entered promiscuous mode
[  602.206500][ T9587] IPv6: NLM_F_CREATE should be specified when creating new route
[  605.015608][ T9625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2134'.
[  606.716196][ T9641] netlink: 'syz.3.2140': attribute type 39 has an invalid length.
[  607.592922][ T9641] device hsr_slave_1 left promiscuous mode
[  608.920055][ T9663] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2147'.
[  608.937658][ T4325] Bluetooth: hci2: unexpected event 0x12 length: 151 > 8
[  608.969914][ T9667] netlink: 'syz.0.2148': attribute type 4 has an invalid length.
[  608.987647][ T9667] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2148'.
[  609.032447][ T9667] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  609.289511][ T9679] netlink: 'syz.3.2155': attribute type 10 has an invalid length.
[  609.380731][ T9679] device geneve1 entered promiscuous mode
[  609.404404][ T9679] team0: Port device geneve1 added
[  609.983005][ T9696] netlink: 'syz.3.2162': attribute type 2 has an invalid length.
[  609.998028][ T9696] netlink: 'syz.3.2162': attribute type 1 has an invalid length.
[  611.953107][ T9710] netlink: 'syz.1.2168': attribute type 1 has an invalid length.
[  611.961121][ T9710] netlink: 'syz.1.2168': attribute type 3 has an invalid length.
[  612.012550][ T9710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2168'.
[  612.073303][ T9713] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2169'.
[  612.381834][ T9720] tap0: tun_chr_ioctl cmd 35111
[  612.875959][ T9738] device syzkaller0 entered promiscuous mode
[  615.082378][ T4325] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6
[  616.339761][ T9752] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2183'.
[  616.356484][ T9755] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2185'.
[  616.662693][ T9778] netlink: 'syz.4.2194': attribute type 39 has an invalid length.
[  618.703052][ T9778] device hsr_slave_1 left promiscuous mode
[  618.755741][ T4325] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6
[  618.766145][ T9796] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2199'.
[  619.110891][ T9804] device veth1_macvtap left promiscuous mode
[  619.121632][ T9804] device macsec0 entered promiscuous mode
[  621.701173][ T9840] device syzkaller0 entered promiscuous mode
[  621.769006][ T9842] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2212'.
[  623.517651][ T9869] device syzkaller0 entered promiscuous mode
[  624.229420][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  624.235810][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  627.272364][ T9893] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2230'.
[  629.874374][ T9947] device syzkaller0 entered promiscuous mode
[  632.087304][ T9971] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2259'.
[  636.542639][ T9985] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2267'.
[  636.564130][ T9988] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2267'.
[  636.590401][ T9990] netlink: 'syz.4.2267': attribute type 10 has an invalid length.
[  636.616908][ T9990] device vxcan1 entered promiscuous mode
[  636.640570][ T9990] team0: Device vxcan1 is of different type
[  637.062049][T10016] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2280'.
[  637.116458][T10018] netlink: 'syz.2.2281': attribute type 39 has an invalid length.
[  637.329789][T10025] netlink: 'syz.1.2282': attribute type 39 has an invalid length.
[  637.459343][T10031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2285'.
[  637.483641][T10035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2287'.
[  637.495615][T10035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2287'.
[  637.551201][T10035] netlink: 'syz.3.2287': attribute type 10 has an invalid length.
[  637.759017][T10039] netlink: 'syz.0.2289': attribute type 39 has an invalid length.
[  637.933755][T10044] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2289'.
[  637.947204][T10053] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2294'.
[  638.212366][T10061] netlink: 'syz.0.2296': attribute type 11 has an invalid length.
[  638.263647][T10061] netlink: 'syz.0.2296': attribute type 11 has an invalid length.
[  638.305731][T10061] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2296'.
[  638.562841][T10055] netlink: 'syz.2.2293': attribute type 10 has an invalid length.
[  638.698624][T10075] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2302'.
[  638.741123][T10075] netlink: 'syz.2.2302': attribute type 10 has an invalid length.
[  638.800945][T10075] team0: Device vxcan1 is of different type
[  638.843333][T10082] netlink: 'syz.3.2303': attribute type 39 has an invalid length.
[  639.594826][T10105] netlink: 'syz.3.2316': attribute type 21 has an invalid length.
[  640.098475][T10130] netlink: 'syz.0.2327': attribute type 39 has an invalid length.
[  640.696609][T10154] device syzkaller0 entered promiscuous mode
[  642.894977][T10173] __nla_validate_parse: 5 callbacks suppressed
[  642.894990][T10173] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2345'.
[  643.111218][T10228] validate_nla: 2 callbacks suppressed
[  643.111235][T10228] netlink: 'syz.3.2352': attribute type 1 has an invalid length.
[  643.141934][T10228] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2352'.
[  643.435810][T10244] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2359'.
[  644.314958][T10261] netlink: 'syz.4.2362': attribute type 27 has an invalid length.
[  644.434126][T10266] netlink: 'syz.2.2365': attribute type 39 has an invalid length.
[  644.671958][T10271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2365'.
[  644.687234][T10280] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2371'.
[  645.630621][T10313] syz.2.2381[10313] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  645.630748][T10313] syz.2.2381[10313] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  645.744656][T10317] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2384'.
[  646.034506][ T4325] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5
[  646.828841][T10332] netlink: 'syz.0.2387': attribute type 10 has an invalid length.
[  646.944947][T10362] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2399'.
[  647.039842][T10366] netlink: 'syz.0.2401': attribute type 21 has an invalid length.
[  647.075089][T10366] IPv6: NLM_F_CREATE should be specified when creating new route
[  647.236600][T10375] device bridge_slave_1 left promiscuous mode
[  647.253361][T10375] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.262157][T10375] device bridge_slave_0 left promiscuous mode
[  647.304936][T10375] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.430528][T10375] device bridge0 left promiscuous mode
[  647.455939][T10375] team0: Port device bridge0 removed
[  647.683026][T10399] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2413'.
[  647.911206][T10407] netlink: 'syz.2.2416': attribute type 6 has an invalid length.
[  647.954924][T10407] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2416'.
[  648.004126][T10405] netlink: 'syz.3.2414': attribute type 10 has an invalid length.
[  648.067211][T10405] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  651.318865][T10436] device syzkaller0 entered promiscuous mode
[  651.339335][T10441] netlink: 'syz.2.2424': attribute type 11 has an invalid length.
[  651.414255][T10441] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2424'.
[  652.096113][T10438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  653.558624][T10444] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2425'.
[  654.247392][T10477] netlink: 'syz.3.2437': attribute type 39 has an invalid length.
[  654.279580][T10477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2437'.
[  654.306628][T10484] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2440'.
[  654.521199][T10487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2441'.
[  655.533425][T10521] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2453'.
[  655.575075][T10524] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2457'.
[  655.819843][T10536] bridge0: port 3(team0) entered disabled state
[  655.864979][T10536] device bridge_slave_1 left promiscuous mode
[  655.876871][T10536] bridge0: port 2(bridge_slave_1) entered disabled state
[  655.899010][T10536] device bridge_slave_0 left promiscuous mode
[  655.913304][T10536] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.526438][T10568] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2471'.
[  656.938072][T10584] netlink: 'syz.1.2479': attribute type 10 has an invalid length.
[  656.956736][T10584] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2479'.
[  657.114828][T10588] netlink: 'syz.3.2480': attribute type 29 has an invalid length.
[  657.145591][T10588] netlink: 'syz.3.2480': attribute type 29 has an invalid length.
[  657.217838][T10588] netlink: 'syz.3.2480': attribute type 10 has an invalid length.
[  657.242643][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2480'.
[  657.253550][T10588] device ipvlan1 entered promiscuous mode
[  657.263578][T10588] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  657.646584][T10599] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2485'.
[  657.686703][T10601] bridge0: port 4(bond0) entered disabled state
[  657.699528][T10601] bridge0: port 3(team0) entered disabled state
[  657.716731][T10601] device bridge_slave_0 left promiscuous mode
[  657.730221][T10601] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.961304][T10614] device syzkaller0 entered promiscuous mode
[  658.001145][T10619] device syzkaller0 entered promiscuous mode
[  658.849340][ T4325] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3
[  659.975263][T10637] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2499'.
[  660.836231][T10683] device syzkaller0 entered promiscuous mode
[  662.663237][T10691] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2518'.
[  666.337252][T10706] netlink: 'syz.1.2525': attribute type 6 has an invalid length.
[  666.345931][T10706] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2525'.
[  666.357012][T10708] netlink: 'syz.0.2526': attribute type 10 has an invalid length.
[  666.370146][T10708] device geneve0 entered promiscuous mode
[  666.527259][T10732] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2531'.
[  669.018565][T10768] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2547'.
[  669.100769][T10767] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2545'.
[  669.340095][T10783] netlink: 'syz.0.2553': attribute type 10 has an invalid length.
[  669.393626][T10783] netlink: 'syz.0.2553': attribute type 4 has an invalid length.
[  669.405784][T10783] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2553'.
[  669.441940][T10783] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  672.257526][T10805] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2561'.
[  672.692302][T10825] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2569'.
[  672.744008][T10828] netlink: 'syz.4.2572': attribute type 29 has an invalid length.
[  672.783191][T10828] netlink: 'syz.4.2572': attribute type 29 has an invalid length.
[  672.855076][T10828] netlink: 'syz.4.2572': attribute type 10 has an invalid length.
[  672.885982][T10828] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2572'.
[  672.914726][T10828] device ipvlan1 entered promiscuous mode
[  672.958824][T10828] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  673.055340][T10839] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2575'.
[  673.209764][T10836] device syzkaller0 entered promiscuous mode
[  675.284937][ T4325] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15
[  675.762264][T10881] netlink: 'syz.1.2591': attribute type 9 has an invalid length.
[  675.770904][T10881] netlink: 119264 bytes leftover after parsing attributes in process `syz.1.2591'.
[  676.777990][T10873] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2587'.
[  679.164558][T10923] device syzkaller0 entered promiscuous mode
[  679.378591][T10935] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2614'.
[  679.746501][T10947] netlink: 'syz.1.2618': attribute type 4 has an invalid length.
[  679.763659][T10947] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2618'.
[  683.166896][T10962] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2622'.
[  683.192624][T10969] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2626'.
[  683.318202][ T4325] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10
[  683.364826][T10979] netlink: 'syz.1.2629': attribute type 10 has an invalid length.
[  683.389140][T10979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2629'.
[  683.399072][T10979] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  683.439950][T10976] device sit0 left promiscuous mode
[  683.611412][T10985] device sit0 entered promiscuous mode
[  685.343212][ T4330] Bluetooth: hci1: command 0x0409 tx timeout
[  685.664188][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  685.670532][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  685.771208][T11006] device syzkaller0 entered promiscuous mode
[  685.783565][T11011] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2641'.
[  689.342339][T11014] netlink: 'syz.0.2642': attribute type 10 has an invalid length.
[  689.350380][T11014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2642'.
[  689.359781][T11014] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  689.381114][T11037] netlink: 'syz.2.2651': attribute type 13 has an invalid length.
[  689.402541][T11037] netlink: 'syz.2.2651': attribute type 4 has an invalid length.
[  689.410311][T11037] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2651'.
[  689.460981][T11037] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  689.574511][T11044] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2654'.
[  690.139255][T11070] netlink: 'syz.2.2662': attribute type 10 has an invalid length.
[  690.241962][T11068] device syzkaller0 entered promiscuous mode
[  692.380773][ T4325] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18
[  693.838123][T11083] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2669'.
[  694.011599][T11122] : port 1(ip6gretap0) entered blocking state
[  694.019900][T11122] : port 1(ip6gretap0) entered disabled state
[  694.040579][T11122] device ip6gretap0 entered promiscuous mode
[  694.061643][T11122] device ip6gretap0 left promiscuous mode
[  694.079757][T11122] : port 1(ip6gretap0) entered disabled state
[  694.462657][ T4330] Bluetooth: hci1: command 0x2016 tx timeout
[  696.046069][T11125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2685'.
[  696.459050][T11148] device syzkaller0 entered promiscuous mode
[  696.471901][T11150] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2692'.
[  700.345776][T11193] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2706'.
[  701.227939][T11229] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2719'.
[  701.358317][T11231] device syzkaller0 entered promiscuous mode
[  703.238311][T11263] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2733'.
[  703.914839][T11298] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2746'.
[  703.974725][T11300] netlink: 'syz.0.2747': attribute type 10 has an invalid length.
[  704.126812][T11306] device syzkaller0 entered promiscuous mode
[  704.500183][T11322] syz.4.2756[11322] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  704.500279][T11322] syz.4.2756[11322] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  704.544558][ T4325] Bluetooth: hci4: ISO packet for unknown connection handle 0
[  705.143942][T11346] netlink: 'syz.2.2766': attribute type 2 has an invalid length.
[  705.152022][T11346] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2766'.
[  706.099266][T11328] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2759'.
[  706.291785][T11361] netlink: 'syz.0.2772': attribute type 29 has an invalid length.
[  706.324844][T11361] netlink: 'syz.0.2772': attribute type 29 has an invalid length.
[  706.335231][T11361] netlink: 'syz.0.2772': attribute type 29 has an invalid length.
[  708.477472][T11387] netlink: 64535 bytes leftover after parsing attributes in process `syz.4.2781'.
[  708.537223][T11393] device syzkaller0 entered promiscuous mode
[  710.483193][T11430] tap0: tun_chr_ioctl cmd 1074025677
[  710.488714][T11430] tap0: linktype set to 776
[  710.553961][T11414] device syzkaller0 entered promiscuous mode
[  710.571354][T11444] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2799'.
[  712.712994][T11475] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2811'.
[  712.781699][T11478] device syzkaller0 entered promiscuous mode
[  714.502173][T11485] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2813'.
[  715.171316][T11518] device syzkaller0 entered promiscuous mode
[  718.302151][T11538] netlink: 'syz.1.2825': attribute type 10 has an invalid length.
[  718.311197][T11538] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2825'.
[  718.321178][T11538] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  718.328372][T11538] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  718.355203][T11538] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  718.364275][T11546] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2833'.
[  718.467421][T11553] device syzkaller0 entered promiscuous mode
[  720.386905][T11587] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2849'.
[  720.435729][T11585] device syzkaller0 entered promiscuous mode
[  721.385389][T11610] delete_channel: no stack
[  721.497394][T11616] delete_channel: no stack
[  722.447668][T11605] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2853'.
[  722.458253][T11612] netlink: 'syz.3.2855': attribute type 39 has an invalid length.
[  722.795583][T11632] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2865'.
[  722.921789][T11635] device syzkaller0 entered promiscuous mode
[  723.585307][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  723.615957][ T4330] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  723.632295][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  723.641848][ T4330] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  723.649495][ T4330] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  723.656917][ T4330] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  724.995281][T11649] device syzkaller0 entered promiscuous mode
[  725.014627][T11667] netlink: 'syz.1.2878': attribute type 27 has an invalid length.
[  725.194335][ T4330] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  725.744367][ T4330] Bluetooth: hci1: command 0x0409 tx timeout
[  726.876680][ T5035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  726.980668][T11680] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.2883'.
[  727.025730][ T5035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.145829][ T5035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.297038][ T5035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.330554][T11654] chnl_net:caif_netlink_parms(): no params data found
[  727.397644][T11690] device syzkaller0 entered promiscuous mode
[  727.827451][ T4330] Bluetooth: hci1: command 0x041b tx timeout
[  729.446697][T11654] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.454161][T11654] bridge0: port 1(bridge_slave_0) entered disabled state
[  729.462149][T11654] device bridge_slave_0 entered promiscuous mode
[  729.478974][T11708] netlink: 'syz.4.2889': attribute type 10 has an invalid length.
[  729.490718][T11708] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2889'.
[  729.513344][T11708] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  729.544319][T11654] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.551452][T11654] bridge0: port 2(bridge_slave_1) entered disabled state
[  729.593970][T11654] device bridge_slave_1 entered promiscuous mode
[  729.903494][ T4330] Bluetooth: hci1: command 0x040f tx timeout
[  731.993924][ T4330] Bluetooth: hci1: command 0x0419 tx timeout
[  732.749076][T11654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  732.854703][T11654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  732.901247][T11654] team0: Port device team_slave_0 added
[  732.995149][T11654] team0: Port device team_slave_1 added
[  733.105287][T11654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  733.112282][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.191935][T11654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  733.280503][T11654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  733.292788][T11654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  733.372487][T11654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  733.579196][T11654] device hsr_slave_0 entered promiscuous mode
[  733.606297][T11654] device hsr_slave_1 entered promiscuous mode
[  733.634162][T11654] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  733.641779][T11654] Cannot create hsr debugfs directory
[  733.798351][T11759] device syzkaller0 entered promiscuous mode
[  733.864832][T11780] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  735.927787][T11803] netlink: 'syz.1.2917': attribute type 27 has an invalid length.
[  736.039671][T11809] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2919'.
[  736.327728][T11829] netlink: 'syz.4.2927': attribute type 3 has an invalid length.
[  736.348426][ T5035] device hsr_slave_0 left promiscuous mode
[  736.363479][ T5035] device hsr_slave_1 left promiscuous mode
[  736.375614][T11829] netlink: 'syz.4.2927': attribute type 1 has an invalid length.
[  736.404165][ T5035] device veth1_macvtap left promiscuous mode
[  736.423258][ T5035] device veth0_macvtap left promiscuous mode
[  736.670989][ T5035] device geneve1 left promiscuous mode
[  736.706152][ T5035] team0 (unregistering): Port device geneve1 removed
[  737.547957][ T5035] device team_slave_1 left promiscuous mode
[  737.566682][ T5035] team0 (unregistering): Port device team_slave_1 removed
[  737.684618][ T5035] device team_slave_0 left promiscuous mode
[  737.702577][ T5035] team0 (unregistering): Port device team_slave_0 removed
[  738.032185][T11844] device syzkaller0 entered promiscuous mode
[  741.445827][T11904] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2946'.
[  741.455756][T11914] netlink: 'syz.4.2951': attribute type 10 has an invalid length.
[  742.108245][T11948] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2965'.
[  742.168076][T11654] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  742.210525][T11654] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  742.295991][T11654] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  742.335331][T11654] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  742.568500][T11654] 8021q: adding VLAN 0 to HW filter on device bond0
[  742.625740][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  742.640921][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  742.678358][T11654] 8021q: adding VLAN 0 to HW filter on device team0
[  742.701308][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  742.733607][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  742.759942][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.767133][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  742.833634][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  742.854183][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  742.894278][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  742.932834][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.940128][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  742.982995][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  743.022827][T11987] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2977'.
[  743.054853][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  743.074563][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  743.113223][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  743.153343][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  743.214091][T11654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  743.238771][T11654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  743.273593][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  743.295050][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  743.308786][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  743.328044][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  743.349301][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  743.369249][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  743.405670][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  744.122670][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  744.130177][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  744.185234][T11654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  744.255688][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  744.280820][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  744.343180][T12044] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2993'.
[  744.390868][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  744.414990][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  744.449375][T11654] device veth0_vlan entered promiscuous mode
[  744.465485][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  744.483291][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  744.599506][T11654] device veth1_vlan entered promiscuous mode
[  744.629102][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  744.683579][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  744.713504][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  744.737233][T11654] device veth0_macvtap entered promiscuous mode
[  744.775982][T11654] device veth1_macvtap entered promiscuous mode
[  744.825605][T11654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  744.836507][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  744.858699][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  744.883154][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  744.892153][ T6578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  744.905286][T11654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  744.916644][T11654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  744.928950][T11654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  744.949418][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  744.966756][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  745.017643][T11654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  745.038351][T11654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  745.068986][T11654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  745.078217][T11654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  745.223386][ T5035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.255310][ T5035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.310941][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  745.340642][ T4721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.368770][ T4721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.409749][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  745.930414][T12103] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3012'.
[  746.587057][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  746.596527][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  746.608266][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  746.635117][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  746.647935][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  746.657196][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  746.766588][ T6559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  746.784155][T12134] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3027'.
[  746.885262][ T6559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.066436][ T6559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.105177][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  747.111548][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  747.218704][ T6559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.528989][T12167] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3038'.
[  747.741841][T12127] chnl_net:caif_netlink_parms(): no params data found
[  748.231079][T12200] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3050'.
[  748.407911][T12127] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.434771][T12127] bridge0: port 1(bridge_slave_0) entered disabled state
[  748.453157][T12127] device bridge_slave_0 entered promiscuous mode
[  748.531666][T12127] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.539155][T12127] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.567552][T12127] device bridge_slave_1 entered promiscuous mode
[  748.702554][ T4325] Bluetooth: hci2: command 0x0409 tx timeout
[  748.712856][T12127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  748.729122][T12127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  749.038639][T12127] team0: Port device team_slave_0 added
[  749.095202][T12238] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3064'.
[  749.168499][T12127] team0: Port device team_slave_1 added
[  749.304836][T12127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  749.335460][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  749.393612][T12127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  749.425614][T12252] netlink: 'syz.2.3070': attribute type 10 has an invalid length.
[  749.464789][T12252] team0: Port device dummy0 added
[  749.487093][ T4325] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  749.573133][T12127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  749.617117][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  749.702545][T12127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  749.970977][T12280] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3080'.
[  750.279100][T12127] device hsr_slave_0 entered promiscuous mode
[  750.337142][T12127] device hsr_slave_1 entered promiscuous mode
[  750.352233][T12127] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  750.373697][T12127] Cannot create hsr debugfs directory
[  750.426632][ T6559] device hsr_slave_0 left promiscuous mode
[  750.498931][ T6559] device veth0_macvtap left promiscuous mode
[  750.523903][ T6559] device veth1_vlan left promiscuous mode
[  750.530101][ T6559] device veth0_vlan left promiscuous mode
[  750.782496][ T4325] Bluetooth: hci2: command 0x041b tx timeout
[  751.033326][ T6559] device geneve1 left promiscuous mode
[  751.063333][ T6559] team0 (unregistering): Port device geneve1 removed
[  752.658268][ T6559] device team_slave_1 left promiscuous mode
[  752.670314][ T6559] team0 (unregistering): Port device team_slave_1 removed
[  752.862667][ T4325] Bluetooth: hci2: command 0x040f tx timeout
[  753.195015][T12318] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3094'.
[  753.214227][T12370] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3114'.
[  753.228300][T12399] tap0: tun_chr_ioctl cmd 1074025677
[  753.236077][T12399] tap0: linktype set to 775
[  753.867891][T12427] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3134'.
[  753.961095][ T4325] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  754.326213][T12127] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  754.359684][T12127] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  754.381468][T12127] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  754.407460][T12127] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  754.614393][T12127] 8021q: adding VLAN 0 to HW filter on device bond0
[  754.668807][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  754.679194][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  754.704468][T12127] 8021q: adding VLAN 0 to HW filter on device team0
[  754.724991][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  754.738115][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  754.753170][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.760341][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state
[  754.812082][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  754.835271][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  754.856059][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  754.872226][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.879445][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state
[  754.892963][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  754.925989][T12462] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3145'.
[  754.944081][ T4325] Bluetooth: hci2: command 0x0419 tx timeout
[  754.954949][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  755.036631][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  755.055671][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  755.083666][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  755.108599][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  755.128781][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  755.181059][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  755.207216][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  755.241447][T12127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  755.305090][T12127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  755.312370][ T4325] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  755.316709][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  755.344884][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  755.835571][T12495] netlink: 'syz.4.3159': attribute type 2 has an invalid length.
[  755.861408][T12495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3159'.
[  755.901341][T12498] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3160'.
[  756.140189][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  756.178568][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  756.212968][T12127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  756.280703][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  756.300366][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  756.355977][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  756.377035][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  756.417950][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  756.472761][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  756.492734][T12127] device veth0_vlan entered promiscuous mode
[  756.543676][T12127] device veth1_vlan entered promiscuous mode
[  756.635527][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  756.677048][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  756.716861][T12127] device veth0_macvtap entered promiscuous mode
[  756.756486][T12127] device veth1_macvtap entered promiscuous mode
[  756.813602][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  756.855940][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  756.886637][T12127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  756.920359][T12532] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3172'.
[  756.956113][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  756.981039][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  757.023652][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  757.063334][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  757.077980][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  757.100306][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.137405][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  757.175319][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  757.200626][T12127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  757.233662][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  757.253610][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  757.290695][T12127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  757.322477][T12127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  757.331229][T12127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  757.394893][T12127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  759.315461][T12570] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3189'.
[  759.499442][T12585] netlink: 'syz.0.3195': attribute type 4 has an invalid length.
[  759.516253][T12585] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3195'.
[  759.607102][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.627872][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.642766][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  759.681128][ T6555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  759.690898][ T6555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  759.705961][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  759.787446][T12590] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3197'.
[  760.883646][ T4330] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  760.894313][ T4330] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  760.907024][ T4330] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  760.915269][ T4330] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  760.923170][ T4330] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  760.933144][ T4330] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  761.178659][T12616] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3205'.
[  763.032559][ T4330] Bluetooth: hci4: command 0x0409 tx timeout
[  764.310149][T12631] netlink: 'syz.1.3210': attribute type 4 has an invalid length.
[  764.332798][T12631] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3210'.
[  764.388721][T12609] device syzkaller0 entered promiscuous mode
[  765.102665][ T4330] Bluetooth: hci4: command 0x041b tx timeout
[  765.512372][ T4330] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  767.182488][ T4330] Bluetooth: hci4: command 0x040f tx timeout
[  768.879199][T12647] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3216'.
[  768.926794][ T6555] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.019297][ T6555] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  769.262593][ T4330] Bluetooth: hci4: command 0x0419 tx timeout
[  769.435360][T12607] chnl_net:caif_netlink_parms(): no params data found
[  769.674882][T12607] bridge0: port 1(bridge_slave_0) entered blocking state
[  769.682215][T12607] bridge0: port 1(bridge_slave_0) entered disabled state
[  769.691448][T12607] device bridge_slave_0 entered promiscuous mode
[  769.700521][T12607] bridge0: port 2(bridge_slave_1) entered blocking state
[  769.708224][T12607] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.716642][T12607] device bridge_slave_1 entered promiscuous mode
[  769.728685][T12678] netlink: 'syz.3.3227': attribute type 4 has an invalid length.
[  769.746462][T12607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  769.758417][T12607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  769.773987][T12678] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3227'.
[  769.805340][T12607] team0: Port device team_slave_0 added
[  769.821998][T12607] team0: Port device team_slave_1 added
[  769.857363][T12607] batman_adv: batadv0: Adding interface: batadv_slave_0
[  769.876593][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  769.925687][T12607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  771.444104][T12607] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.500749][T12607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.559685][T12607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  771.597958][ T6555] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.680403][ T6555] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.845352][T12607] device hsr_slave_0 entered promiscuous mode
[  773.876653][T12607] device hsr_slave_1 entered promiscuous mode
[  773.893079][T12607] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  773.900724][T12607] Cannot create hsr debugfs directory
[  773.925671][T12703] netlink: 'syz.1.3234': attribute type 10 has an invalid length.
[  774.016042][T12699] device syzkaller0 entered promiscuous mode
[  774.207693][T12718] netlink: 'syz.1.3239': attribute type 4 has an invalid length.
[  774.216217][T12718] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3239'.
[  777.215104][T12744] netlink: 'syz.1.3251': attribute type 4 has an invalid length.
[  777.228052][T12744] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3251'.
[  782.453117][T12741] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3249'.
[  782.468519][T12750] netlink: 'syz.0.3252': attribute type 10 has an invalid length.
[  782.497591][T12750] device hsr0 entered promiscuous mode
[  782.540879][T12750] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  782.577131][T12750] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  782.593052][T12750] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  782.605664][T12750] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  783.547890][T12784] netlink: 'syz.2.3262': attribute type 4 has an invalid length.
[  783.642848][T12784] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3262'.
[  784.244674][T12607] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  784.445527][T12607] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  784.690647][T12607] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  784.715337][T12816] netlink: 'syz.2.3269': attribute type 10 has an invalid length.
[  784.743742][T12607] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  785.158895][T12819] device syzkaller0 entered promiscuous mode
[  785.189200][T12607] 8021q: adding VLAN 0 to HW filter on device bond0
[  785.386841][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  785.397506][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  785.591343][T12848] netlink: 'syz.2.3279': attribute type 4 has an invalid length.
[  785.607296][T12848] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3279'.
[  788.579782][T12607] 8021q: adding VLAN 0 to HW filter on device team0
[  788.636344][ T6555] device hsr_slave_0 left promiscuous mode
[  788.696011][ T6555] device veth1_macvtap left promiscuous mode
[  788.702101][ T6555] device veth0_macvtap left promiscuous mode
[  788.726711][T12888] netlink: 'syz.1.3292': attribute type 4 has an invalid length.
[  788.743158][ T6555] device veth1_vlan left promiscuous mode
[  788.749024][ T6555] device veth0_vlan left promiscuous mode
[  788.766778][T12888] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3292'.
[  789.402331][ T6555] device team_slave_1 left promiscuous mode
[  789.418054][ T6555] team0 (unregistering): Port device team_slave_1 removed
[  789.501482][ T6555] device team_slave_0 left promiscuous mode
[  789.516680][ T6555] team0 (unregistering): Port device team_slave_0 removed
[  789.576618][ T6555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  789.585762][ T6555] device bond_slave_1 left promiscuous mode
[  789.759059][ T6555] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  791.037016][ T4325] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  791.171826][ T6555] bond0 (unregistering): Released all slaves
[  791.226307][T12927] netlink: 'syz.1.3306': attribute type 4 has an invalid length.
[  791.250611][T12927] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3306'.
[  791.321372][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  791.338940][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  791.348556][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.355731][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state
[  791.367335][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  791.402796][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  791.418808][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.426045][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state
[  791.476566][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  791.513714][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  791.536420][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  791.548880][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  791.568878][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  791.601845][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  791.625363][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  791.639259][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  791.648456][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  791.661773][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  791.714073][T12934] device syzkaller0 entered promiscuous mode
[  791.746052][T12607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  791.764830][T12607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  791.790337][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  791.803897][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  794.892758][T12967] : port 1(ip6gretap0) entered blocking state
[  794.907712][T12967] : port 1(ip6gretap0) entered disabled state
[  794.915878][T12967] device ip6gretap0 entered promiscuous mode
[  794.964670][T12607] 8021q: adding VLAN 0 to HW filter on device batadv0
[  794.971750][ T6573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  795.009365][ T6573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  795.138735][T12980] netlink: 'syz.1.3319': attribute type 4 has an invalid length.
[  795.184266][T12980] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3319'.
[  795.622902][ T4325] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  795.837439][T12998] device syzkaller0 entered promiscuous mode
[  798.178785][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  798.188157][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  798.211323][T12607] device veth0_vlan entered promiscuous mode
[  798.236922][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  798.258074][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  798.294039][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  798.321775][ T6565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  798.342791][T12607] device veth1_vlan entered promiscuous mode
[  798.368513][T13019] netlink: 'syz.3.3333': attribute type 4 has an invalid length.
[  798.404849][T13019] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3333'.
[  798.428628][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  798.452113][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  798.470427][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  798.481123][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  798.504511][T12607] device veth0_macvtap entered promiscuous mode
[  798.621626][T13027] : port 1(ip6gretap0) entered blocking state
[  798.642909][T13027] : port 1(ip6gretap0) entered disabled state
[  798.694410][T13027] device ip6gretap0 entered promiscuous mode
[  798.770889][T12607] device veth1_macvtap entered promiscuous mode
[  798.862118][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  798.913881][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.953995][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  798.972436][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  798.984075][T12607] batman_adv: batadv0: Interface activated: batadv_slave_0
[  799.005720][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  799.030514][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  799.065774][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  799.091881][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  799.113114][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  799.140692][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.166138][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  799.198549][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.211245][T12607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  799.226258][T12607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  799.241972][T12607] batman_adv: batadv0: Interface activated: batadv_slave_1
[  799.253199][T12607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  799.262115][T12607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  799.271895][T12607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  799.281414][T12607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  799.302138][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  799.311624][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  799.471165][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.503026][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.556735][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  799.634878][ T5035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.653601][ T5035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.703265][ T5035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  801.818104][T13057] device syzkaller0 entered promiscuous mode
[  802.430496][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  802.440245][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  802.455829][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  802.476431][ T4330] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  802.487688][ T4330] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  802.501802][ T4330] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  804.200025][T13083] device ip6gretap0 left promiscuous mode
[  804.207440][T13083] : port 1(ip6gretap0) entered disabled state
[  804.488003][ T6573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.542739][ T4325] Bluetooth: hci0: command 0x0409 tx timeout
[  805.061650][ T6573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.623363][ T4325] Bluetooth: hci0: command 0x041b tx timeout
[  807.064705][T13076] chnl_net:caif_netlink_parms(): no params data found
[  807.186878][ T6573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.349554][ T6573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.583463][T13076] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.590676][T13076] bridge0: port 1(bridge_slave_0) entered disabled state
[  807.667473][T13076] device bridge_slave_0 entered promiscuous mode
[  807.745594][T13076] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.772546][T13076] bridge0: port 2(bridge_slave_1) entered disabled state
[  807.790897][T13076] device bridge_slave_1 entered promiscuous mode
[  807.938752][T13076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  807.965431][T13076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  808.211933][T13076] team0: Port device team_slave_0 added
[  808.248515][T13076] team0: Port device team_slave_1 added
[  808.391798][T13076] batman_adv: batadv0: Adding interface: batadv_slave_0
[  808.423312][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  808.507059][T13076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  808.555126][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  808.561513][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  808.636244][T13076] batman_adv: batadv0: Adding interface: batadv_slave_1
[  808.648365][T13076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  808.682326][T13076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  808.703158][ T4325] Bluetooth: hci0: command 0x040f tx timeout
[  808.831658][T13076] device hsr_slave_0 entered promiscuous mode
[  808.867314][T13076] device hsr_slave_1 entered promiscuous mode
[  810.142800][ T6573] device hsr_slave_0 left promiscuous mode
[  810.171410][ T6573] device hsr_slave_1 left promiscuous mode
[  810.220402][ T6573] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  810.247356][ T6573] batman_adv: batadv0: Removing interface: batadv_slave_1
[  810.273706][ T6573] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  810.291501][ T6573] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  810.309703][ T6573] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  810.332705][ T6573] batman_adv: batadv0: Removing interface: virt_wifi0
[  810.367644][ T6573] device veth1_macvtap left promiscuous mode
[  810.375220][ T6573] device veth0_macvtap left promiscuous mode
[  810.381704][ T6573] device veth0_vlan left promiscuous mode
[  810.783580][ T4325] Bluetooth: hci0: command 0x0419 tx timeout
[  810.936606][ T6573] device team_slave_1 left promiscuous mode
[  810.945839][ T6573] team0 (unregistering): Port device team_slave_1 removed
[  811.234466][T13203] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3384'.
[  811.409493][T13076] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  811.459319][T13076] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  811.668762][T13211] device syzkaller0 entered promiscuous mode
[  811.687049][T13076] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  811.739175][T13076] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  814.014205][T13258] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3399'.
[  814.070615][T13076] 8021q: adding VLAN 0 to HW filter on device bond0
[  814.118839][T13076] 8021q: adding VLAN 0 to HW filter on device team0
[  814.130656][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  814.157415][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  814.184298][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  814.203960][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  814.213263][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state
[  814.220407][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state
[  814.244826][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  814.264459][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  814.316255][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state
[  814.323495][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state
[  814.340124][ T4325] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  814.403277][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  814.459642][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  814.494197][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  814.513651][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  814.535903][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  814.551611][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  814.570334][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  814.600772][T13076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  814.621503][T13076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  814.650243][T13273] device ip6gretap0 left promiscuous mode
[  814.670562][T13273] : port 1(ip6gretap0) entered disabled state
[  814.886357][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  814.901067][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  814.924571][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  814.952139][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  814.970024][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  814.992006][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  815.111175][ T4325] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  815.718507][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  815.776635][ T4721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  815.847757][T13076] 8021q: adding VLAN 0 to HW filter on device batadv0
[  816.041168][T13296] device syzkaller0 entered promiscuous mode
[  816.086253][ T6573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  816.107621][ T6573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  816.478859][ T4325] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  819.438338][T13302] device syzkaller0 entered promiscuous mode
[  819.552536][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  819.561172][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  819.576026][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  819.594197][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  819.617161][T13076] device veth0_vlan entered promiscuous mode
[  820.237768][ T4325] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  820.363913][T13333] FAULT_INJECTION: forcing a failure.
[  820.363913][T13333] name failslab, interval 1, probability 0, space 0, times 1
[  820.384764][T13333] CPU: 0 PID: 13333 Comm: syz.4.3421 Not tainted syzkaller #0
[  820.392259][T13333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  820.402331][T13333] Call Trace:
[  820.405610][T13333]  <TASK>
[  820.408538][T13333]  dump_stack_lvl+0x188/0x24e
[  820.413357][T13333]  ? show_regs_print_info+0x12/0x12
[  820.418551][T13333]  ? load_image+0x410/0x410
[  820.423064][T13333]  ? __might_sleep+0xd0/0xd0
[  820.427702][T13333]  ? __lock_acquire+0x7c40/0x7c40
[  820.432730][T13333]  should_fail_ex+0x390/0x4c0
[  820.437478][T13333]  should_failslab+0x5/0x20
[  820.442039][T13333]  slab_pre_alloc_hook+0x59/0x300
[  820.447067][T13333]  ? __lock_acquire+0x138a/0x7c40
[  820.452102][T13333]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  820.457872][T13333]  __kmem_cache_alloc_node+0x4f/0x270
[  820.463243][T13333]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  820.468951][T13333]  __kmalloc+0xa3/0x240
[  820.473107][T13333]  tomoyo_realpath_from_path+0xe2/0x5c0
[  820.478653][T13333]  ? tomoyo_domain+0xd2/0x120
[  820.483323][T13333]  ? tomoyo_path_number_perm+0x205/0x650
[  820.488948][T13333]  tomoyo_path_number_perm+0x22f/0x650
[  820.494405][T13333]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  820.499858][T13333]  ? ksys_write+0x1ce/0x260
[  820.504446][T13333]  ? common_file_perm+0x171/0x1c0
[  820.509525][T13333]  ? __fget_files+0x28/0x460
[  820.514132][T13333]  security_file_ioctl+0x6c/0xa0
[  820.519099][T13333]  __se_sys_ioctl+0x48/0x170
[  820.523726][T13333]  do_syscall_64+0x4c/0xa0
[  820.528137][T13333]  ? clear_bhb_loop+0x60/0xb0
[  820.532866][T13333]  ? clear_bhb_loop+0x60/0xb0
[  820.537537][T13333]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  820.543446][T13333] RIP: 0033:0x7fe6c4d9e0d9
[  820.547857][T13333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.567459][T13333] RSP: 002b:00007fe6c5c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  820.575961][T13333] RAX: ffffffffffffffda RBX: 00007fe6c5025fa0 RCX: 00007fe6c4d9e0d9
[  820.583941][T13333] RDX: 0000200000000000 RSI: 0000000000008b32 RDI: 0000000000000003
[  820.591902][T13333] RBP: 00007fe6c5c98090 R08: 0000000000000000 R09: 0000000000000000
[  820.599864][T13333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  820.607826][T13333] R13: 00007fe6c5026038 R14: 00007fe6c5025fa0 R15: 00007ffe058cdec8
[  820.615801][T13333]  </TASK>
[  820.652613][T13333] ERROR: Out of memory at tomoyo_realpath_from_path.
[  821.940394][T13076] device veth1_vlan entered promiscuous mode
[  821.961872][T13321] device syzkaller0 entered promiscuous mode
[  823.715960][T13336] device syzkaller0 entered promiscuous mode
[  825.330784][T13076] device veth0_macvtap entered promiscuous mode
[  825.372780][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  825.397428][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  825.443282][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  825.468194][T13076] device veth1_macvtap entered promiscuous mode
[  825.528253][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.598321][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.645591][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.747682][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.816265][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  825.867673][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  825.915535][T13076] batman_adv: batadv0: Interface activated: batadv_slave_0
[  825.940227][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  825.966135][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  826.005285][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.047823][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.106711][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.152227][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.190784][T13076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  826.250353][T13076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  826.344077][T13076] batman_adv: batadv0: Interface activated: batadv_slave_1
[  826.351563][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  826.372322][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  826.395785][T13076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  826.412205][T13076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  826.431808][T13076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  826.441624][T13076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  828.100518][T13379] device syzkaller0 entered promiscuous mode
[  829.668943][T13392] device syzkaller0 entered promiscuous mode
[  830.243622][ T4325] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  831.844991][ T6555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.875499][ T6555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.902505][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  831.943192][ T6555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  831.951136][ T6555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  831.967546][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  831.978806][T13429] FAULT_INJECTION: forcing a failure.
[  831.978806][T13429] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  832.024866][T13429] CPU: 0 PID: 13429 Comm: syz.2.3450 Not tainted syzkaller #0
[  832.032382][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  832.042457][T13429] Call Trace:
[  832.045751][T13429]  <TASK>
[  832.048691][T13429]  dump_stack_lvl+0x188/0x24e
[  832.053388][T13429]  ? show_regs_print_info+0x12/0x12
[  832.058614][T13429]  ? load_image+0x410/0x410
[  832.063136][T13429]  ? __lock_acquire+0x7c40/0x7c40
[  832.064500][T13431] netlink: 'syz.1.3346': attribute type 4 has an invalid length.
[  832.068169][T13429]  should_fail_ex+0x390/0x4c0
[  832.068202][T13429]  _copy_from_user+0x2c/0x170
[  832.085302][T13429]  __sys_bpf+0x2ea/0x780
[  832.089638][T13429]  ? bpf_link_show_fdinfo+0x380/0x380
[  832.092722][T13431] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3346'.
[  832.095024][T13429]  ? lock_chain_count+0x20/0x20
[  832.095059][T13429]  __x64_sys_bpf+0x78/0x90
[  832.113600][T13429]  do_syscall_64+0x4c/0xa0
[  832.118037][T13429]  ? clear_bhb_loop+0x60/0xb0
[  832.122730][T13429]  ? clear_bhb_loop+0x60/0xb0
[  832.127414][T13429]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  832.133302][T13429] RIP: 0033:0x7f7cceb9e0d9
[  832.137710][T13429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  832.157328][T13429] RSP: 002b:00007f7cccdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  832.165735][T13429] RAX: ffffffffffffffda RBX: 00007f7ccee25fa0 RCX: 00007f7cceb9e0d9
[  832.173697][T13429] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a
[  832.181659][T13429] RBP: 00007f7cccdf6090 R08: 0000000000000000 R09: 0000000000000000
[  832.189619][T13429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  832.197577][T13429] R13: 00007f7ccee26038 R14: 00007f7ccee25fa0 R15: 00007ffe90cfaf78
[  832.205549][T13429]  </TASK>
[  832.929640][T13450] FAULT_INJECTION: forcing a failure.
[  832.929640][T13450] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  832.953609][T13450] CPU: 0 PID: 13450 Comm: syz.4.3458 Not tainted syzkaller #0
[  832.961109][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  832.971178][T13450] Call Trace:
[  832.974470][T13450]  <TASK>
[  832.977406][T13450]  dump_stack_lvl+0x188/0x24e
[  832.982102][T13450]  ? show_regs_print_info+0x12/0x12
[  832.987317][T13450]  ? load_image+0x410/0x410
[  832.991837][T13450]  ? __lock_acquire+0x7c40/0x7c40
[  832.996884][T13450]  should_fail_ex+0x390/0x4c0
[  833.001593][T13450]  _copy_from_user+0x2c/0x170
[  833.006284][T13450]  __sys_bpf+0x2ea/0x780
[  833.010551][T13450]  ? bpf_link_show_fdinfo+0x380/0x380
[  833.015959][T13450]  ? lock_chain_count+0x20/0x20
[  833.020834][T13450]  __x64_sys_bpf+0x78/0x90
[  833.025271][T13450]  do_syscall_64+0x4c/0xa0
[  833.029699][T13450]  ? clear_bhb_loop+0x60/0xb0
[  833.034392][T13450]  ? clear_bhb_loop+0x60/0xb0
[  833.039084][T13450]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  833.044998][T13450] RIP: 0033:0x7fe6c4d9e0d9
[  833.049425][T13450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  833.069053][T13450] RSP: 002b:00007fe6c5c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  833.077491][T13450] RAX: ffffffffffffffda RBX: 00007fe6c5025fa0 RCX: 00007fe6c4d9e0d9
[  833.085466][T13450] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000a
[  833.093432][T13450] RBP: 00007fe6c5c98090 R08: 0000000000000000 R09: 0000000000000000
[  833.101406][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  833.109375][T13450] R13: 00007fe6c5026038 R14: 00007fe6c5025fa0 R15: 00007ffe058cdec8
[  833.117356][T13450]  </TASK>
[  833.279662][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  833.312204][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  833.321492][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  833.330838][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  833.339275][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  833.349315][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  833.375944][T13461] device syzkaller0 entered promiscuous mode
[  833.700514][T13472] netlink: 'syz.1.3464': attribute type 4 has an invalid length.
[  833.712221][T13472] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3464'.
[  833.945894][T13478] FAULT_INJECTION: forcing a failure.
[  833.945894][T13478] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  833.959875][T13478] CPU: 1 PID: 13478 Comm: syz.1.3466 Not tainted syzkaller #0
[  833.967373][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  833.977444][T13478] Call Trace:
[  833.980737][T13478]  <TASK>
[  833.983669][T13478]  dump_stack_lvl+0x188/0x24e
[  833.988379][T13478]  ? show_regs_print_info+0x12/0x12
[  833.993577][T13478]  ? load_image+0x410/0x410
[  833.998115][T13478]  ? __lock_acquire+0x7c40/0x7c40
[  834.003144][T13478]  should_fail_ex+0x390/0x4c0
[  834.007839][T13478]  _copy_from_user+0x2c/0x170
[  834.012514][T13478]  ___sys_sendmsg+0x1c3/0x360
[  834.017319][T13478]  ? __sys_sendmsg+0x2a0/0x2a0
[  834.022101][T13478]  ? __lock_acquire+0x7c40/0x7c40
[  834.027126][T13478]  __se_sys_sendmsg+0x1c3/0x2b0
[  834.031970][T13478]  ? __x64_sys_sendmsg+0x80/0x80
[  834.036909][T13478]  ? lockdep_hardirqs_on+0x94/0x140
[  834.042107][T13478]  do_syscall_64+0x4c/0xa0
[  834.046541][T13478]  ? clear_bhb_loop+0x60/0xb0
[  834.051217][T13478]  ? clear_bhb_loop+0x60/0xb0
[  834.055890][T13478]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  834.061781][T13478] RIP: 0033:0x7fde9ad9e0d9
[  834.066192][T13478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.085792][T13478] RSP: 002b:00007fde9bce8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  834.094198][T13478] RAX: ffffffffffffffda RBX: 00007fde9b025fa0 RCX: 00007fde9ad9e0d9
[  834.102159][T13478] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  834.110120][T13478] RBP: 00007fde9bce8090 R08: 0000000000000000 R09: 0000000000000000
[  834.118084][T13478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  834.126044][T13478] R13: 00007fde9b026038 R14: 00007fde9b025fa0 R15: 00007ffd1ea913d8
[  834.134016][T13478]  </TASK>
[  834.220430][T13480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3467'.
[  835.350415][ T6557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.383004][T13456] device syzkaller0 entered promiscuous mode
[  835.433170][ T4330] Bluetooth: hci3: command 0x0409 tx timeout
[  835.452076][T13480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3467'.
[  835.539785][ T6557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.049678][ T6557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.218845][ T6557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.261474][T13499] netlink: 'syz.4.3474': attribute type 4 has an invalid length.
[  837.325401][ T4330] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[  837.334921][T13499] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3474'.
[  837.502517][ T4330] Bluetooth: hci3: command 0x041b tx timeout
[  837.644894][T13460] chnl_net:caif_netlink_parms(): no params data found
[  838.010688][T13460] bridge0: port 1(bridge_slave_0) entered blocking state
[  838.032457][T13460] bridge0: port 1(bridge_slave_0) entered disabled state
[  838.067826][T13460] device bridge_slave_0 entered promiscuous mode
[  838.182657][T13460] bridge0: port 2(bridge_slave_1) entered blocking state
[  838.189802][T13460] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.191194][T13541] FAULT_INJECTION: forcing a failure.
[  838.191194][T13541] name failslab, interval 1, probability 0, space 0, times 0
[  838.227544][T13460] device bridge_slave_1 entered promiscuous mode
[  838.260633][T13541] CPU: 0 PID: 13541 Comm: syz.0.3485 Not tainted syzkaller #0
[  838.268148][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  838.278267][T13541] Call Trace:
[  838.281564][T13541]  <TASK>
[  838.284512][T13541]  dump_stack_lvl+0x188/0x24e
[  838.289218][T13541]  ? show_regs_print_info+0x12/0x12
[  838.294444][T13541]  ? load_image+0x410/0x410
[  838.298977][T13541]  ? __might_sleep+0xd0/0xd0
[  838.303594][T13541]  ? __lock_acquire+0x7c40/0x7c40
[  838.308648][T13541]  should_fail_ex+0x390/0x4c0
[  838.313359][T13541]  should_failslab+0x5/0x20
[  838.317983][T13541]  slab_pre_alloc_hook+0x59/0x300
[  838.323047][T13541]  kmem_cache_alloc_node+0x5a/0x310
[  838.328278][T13541]  ? __alloc_skb+0xf9/0x7d0
[  838.332825][T13541]  __alloc_skb+0xf9/0x7d0
[  838.337190][T13541]  alloc_skb_with_frags+0xa7/0x710
[  838.342368][T13541]  sock_alloc_send_pskb+0x87f/0x9a0
[  838.347616][T13541]  ? sock_kzfree_s+0x50/0x50
[  838.352256][T13541]  tun_get_user+0x800/0x3c20
[  838.357059][T13541]  ? rcu_read_unlock+0xa0/0xa0
[  838.361856][T13541]  ? tun_get+0x1c/0x2e0
[  838.366042][T13541]  ? __lock_acquire+0x7c40/0x7c40
[  838.371097][T13541]  ? tun_get+0x1c/0x2e0
[  838.375281][T13541]  tun_chr_write_iter+0x112/0x1f0
[  838.380331][T13541]  vfs_write+0x482/0x9a0
[  838.384607][T13541]  ? file_end_write+0x250/0x250
[  838.389489][T13541]  ? __fget_files+0x3fc/0x460
[  838.394198][T13541]  ? __fdget_pos+0x1d4/0x360
[  838.398817][T13541]  ? ksys_write+0x70/0x260
[  838.403263][T13541]  ksys_write+0x14d/0x260
[  838.407622][T13541]  ? __ia32_sys_read+0x80/0x80
[  838.412428][T13541]  ? lockdep_hardirqs_on+0x94/0x140
[  838.417642][T13541]  do_syscall_64+0x4c/0xa0
[  838.422074][T13541]  ? clear_bhb_loop+0x60/0xb0
[  838.426756][T13541]  ? clear_bhb_loop+0x60/0xb0
[  838.431431][T13541]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  838.437318][T13541] RIP: 0033:0x7ff81199e0d9
[  838.441728][T13541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.461329][T13541] RSP: 002b:00007ff8128f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  838.469751][T13541] RAX: ffffffffffffffda RBX: 00007ff811c25fa0 RCX: 00007ff81199e0d9
[  838.477721][T13541] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8
[  838.485693][T13541] RBP: 00007ff8128f0090 R08: 0000000000000000 R09: 0000000000000000
[  838.493656][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  838.501635][T13541] R13: 00007ff811c26038 R14: 00007ff811c25fa0 R15: 00007ffcdff558a8
[  838.509667][T13541]  </TASK>
[  838.731996][T13537] device syzkaller0 entered promiscuous mode
[  838.769207][T13460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  838.816666][T13560] netlink: 'syz.0.3491': attribute type 4 has an invalid length.
[  838.831161][T13460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  838.844702][T13560] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3491'.
[  839.582812][ T4330] Bluetooth: hci3: command 0x040f tx timeout
[  840.056611][T13564] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3492'.
[  841.662765][ T4330] Bluetooth: hci3: command 0x0419 tx timeout
[  841.768806][T13558] netlink: 'syz.4.3489': attribute type 10 has an invalid length.
[  841.777399][T13558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3489'.
[  841.788346][T13558] device dummy0 entered promiscuous mode
[  841.794730][T13558] bridge0: port 3(dummy0) entered blocking state
[  841.801139][T13558] bridge0: port 3(dummy0) entered disabled state
[  841.809093][T13558] bridge0: port 3(dummy0) entered blocking state
[  841.815567][T13558] bridge0: port 3(dummy0) entered forwarding state
[  841.833560][T13569] netlink: 'syz.3.3492': attribute type 2 has an invalid length.
[  841.841338][T13569] netlink: 'syz.3.3492': attribute type 8 has an invalid length.
[  841.862533][T13569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3492'.
[  841.890542][T13460] team0: Port device team_slave_0 added
[  841.933590][T13460] team0: Port device team_slave_1 added
[  841.990507][T13579] FAULT_INJECTION: forcing a failure.
[  841.990507][T13579] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  842.021453][T13579] CPU: 1 PID: 13579 Comm: syz.1.3495 Not tainted syzkaller #0
[  842.028970][T13579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  842.039039][T13579] Call Trace:
[  842.042321][T13579]  <TASK>
[  842.045256][T13579]  dump_stack_lvl+0x188/0x24e
[  842.049947][T13579]  ? show_regs_print_info+0x12/0x12
[  842.055144][T13579]  ? load_image+0x410/0x410
[  842.059642][T13579]  ? __lock_acquire+0x7c40/0x7c40
[  842.064664][T13579]  ? snprintf+0xe5/0x140
[  842.068934][T13579]  should_fail_ex+0x390/0x4c0
[  842.073610][T13579]  _copy_to_user+0x2c/0x130
[  842.078197][T13579]  simple_read_from_buffer+0xe3/0x150
[  842.083635][T13579]  proc_fail_nth_read+0x1a6/0x220
[  842.088669][T13579]  ? proc_fault_inject_write+0x310/0x310
[  842.094305][T13579]  ? fsnotify_perm+0x248/0x550
[  842.099061][T13579]  ? proc_fault_inject_write+0x310/0x310
[  842.104688][T13579]  vfs_read+0x2db/0x960
[  842.108844][T13579]  ? kernel_read+0x1e0/0x1e0
[  842.113430][T13579]  ? __fget_files+0x28/0x460
[  842.118014][T13579]  ? __fget_files+0x3fc/0x460
[  842.122690][T13579]  ? __fdget_pos+0x2ae/0x360
[  842.127444][T13579]  ? ksys_read+0x70/0x260
[  842.131777][T13579]  ksys_read+0x14d/0x260
[  842.136016][T13579]  ? vfs_write+0x9a0/0x9a0
[  842.140429][T13579]  ? lockdep_hardirqs_on+0x94/0x140
[  842.145619][T13579]  do_syscall_64+0x4c/0xa0
[  842.150031][T13579]  ? clear_bhb_loop+0x60/0xb0
[  842.154700][T13579]  ? clear_bhb_loop+0x60/0xb0
[  842.159371][T13579]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  842.165258][T13579] RIP: 0033:0x7fde9ad5e90e
[  842.169665][T13579] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  842.189260][T13579] RSP: 002b:00007fde9bce7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  842.197664][T13579] RAX: ffffffffffffffda RBX: 00007fde9bce86c0 RCX: 00007fde9ad5e90e
[  842.205625][T13579] RDX: 000000000000000f RSI: 00007fde9bce80a0 RDI: 0000000000000004
[  842.213584][T13579] RBP: 00007fde9bce8090 R08: 0000000000000000 R09: 0000000000000000
[  842.221544][T13579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  842.229504][T13579] R13: 00007fde9b026038 R14: 00007fde9b025fa0 R15: 00007ffd1ea913d8
[  842.237498][T13579]  </TASK>
[  842.271888][T13460] batman_adv: batadv0: Adding interface: batadv_slave_0
[  842.289921][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.378092][T13460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  842.466280][T13460] batman_adv: batadv0: Adding interface: batadv_slave_1
[  842.479718][T13460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  842.555845][T13599] netlink: 'syz.0.3502': attribute type 4 has an invalid length.
[  842.590368][T13460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  842.601319][T13599] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3502'.
[  842.878948][T13615] netlink: 'syz.4.3505': attribute type 2 has an invalid length.
[  842.933600][T13612] netlink: 'syz.4.3505': attribute type 2 has an invalid length.
[  842.963458][T13612] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3505'.
[  843.060468][T13460] device hsr_slave_0 entered promiscuous mode
[  843.096211][T13460] device hsr_slave_1 entered promiscuous mode
[  843.109866][T13460] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  843.124885][T13460] Cannot create hsr debugfs directory
[  843.130668][T13612] netlink: 'syz.4.3505': attribute type 22 has an invalid length.
[  843.151572][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3505'.
[  843.325303][T13607] device syzkaller0 entered promiscuous mode
[  843.384605][T13633] FAULT_INJECTION: forcing a failure.
[  843.384605][T13633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  843.428611][T13633] CPU: 1 PID: 13633 Comm: syz.0.3509 Not tainted syzkaller #0
[  843.436125][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  843.446200][T13633] Call Trace:
[  843.449500][T13633]  <TASK>
[  843.452443][T13633]  dump_stack_lvl+0x188/0x24e
[  843.457163][T13633]  ? show_regs_print_info+0x12/0x12
[  843.462380][T13633]  ? load_image+0x410/0x410
[  843.466904][T13633]  ? __lock_acquire+0x7c40/0x7c40
[  843.471950][T13633]  ? __bpf_prog_test_run_raw_tp+0x2a6/0x430
[  843.478030][T13633]  should_fail_ex+0x390/0x4c0
[  843.482730][T13633]  _copy_to_user+0x2c/0x130
[  843.487254][T13633]  bpf_prog_test_run_raw_tp+0x4de/0x680
[  843.492823][T13633]  ? trace_bpf_test_finish+0x220/0x220
[  843.498307][T13633]  ? trace_bpf_test_finish+0x220/0x220
[  843.503780][T13633]  bpf_prog_test_run+0x31c/0x390
[  843.508749][T13633]  __sys_bpf+0x62b/0x780
[  843.513023][T13633]  ? bpf_link_show_fdinfo+0x380/0x380
[  843.518418][T13633]  ? lock_chain_count+0x20/0x20
[  843.523283][T13633]  __x64_sys_bpf+0x78/0x90
[  843.527794][T13633]  do_syscall_64+0x4c/0xa0
[  843.532210][T13633]  ? clear_bhb_loop+0x60/0xb0
[  843.536883][T13633]  ? clear_bhb_loop+0x60/0xb0
[  843.541553][T13633]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  843.547438][T13633] RIP: 0033:0x7ff81199e0d9
[  843.551849][T13633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  843.571455][T13633] RSP: 002b:00007ff8128f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  843.579862][T13633] RAX: ffffffffffffffda RBX: 00007ff811c25fa0 RCX: 00007ff81199e0d9
[  843.587826][T13633] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 000000000000000a
[  843.595791][T13633] RBP: 00007ff8128f0090 R08: 0000000000000000 R09: 0000000000000000
[  843.603750][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  843.611712][T13633] R13: 00007ff811c26038 R14: 00007ff811c25fa0 R15: 00007ffcdff558a8
[  843.619689][T13633]  </TASK>
[  844.011265][T13640] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3511'.
[  844.305009][T13654] netlink: 'syz.0.3517': attribute type 4 has an invalid length.
[  844.322516][T13654] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3517'.
[  844.666300][T13664] FAULT_INJECTION: forcing a failure.
[  844.666300][T13664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  844.679636][T13664] CPU: 1 PID: 13664 Comm: syz.3.3521 Not tainted syzkaller #0
[  844.687129][T13664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  844.697247][T13664] Call Trace:
[  844.700546][T13664]  <TASK>
[  844.703490][T13664]  dump_stack_lvl+0x188/0x24e
[  844.708197][T13664]  ? show_regs_print_info+0x12/0x12
[  844.713427][T13664]  ? load_image+0x410/0x410
[  844.717956][T13664]  ? __lock_acquire+0x7c40/0x7c40
[  844.723011][T13664]  should_fail_ex+0x390/0x4c0
[  844.727712][T13664]  _copy_from_user+0x2c/0x170
[  844.732407][T13664]  iovec_from_user+0x143/0x360
[  844.737263][T13664]  __import_iovec+0x6c/0x510
[  844.741887][T13664]  import_iovec+0x6f/0xa0
[  844.746250][T13664]  ___sys_sendmsg+0x252/0x360
[  844.751021][T13664]  ? __sys_sendmsg+0x2a0/0x2a0
[  844.755827][T13664]  ? __lock_acquire+0x7c40/0x7c40
[  844.760883][T13664]  __se_sys_sendmsg+0x1c3/0x2b0
[  844.765756][T13664]  ? __x64_sys_sendmsg+0x80/0x80
[  844.770729][T13664]  ? lockdep_hardirqs_on+0x94/0x140
[  844.775947][T13664]  do_syscall_64+0x4c/0xa0
[  844.780385][T13664]  ? clear_bhb_loop+0x60/0xb0
[  844.785085][T13664]  ? clear_bhb_loop+0x60/0xb0
[  844.789786][T13664]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  844.795697][T13664] RIP: 0033:0x7fcb0779e0d9
[  844.800131][T13664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  844.819751][T13664] RSP: 002b:00007fcb085fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  844.828250][T13664] RAX: ffffffffffffffda RBX: 00007fcb07a25fa0 RCX: 00007fcb0779e0d9
[  844.836224][T13664] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  844.844187][T13664] RBP: 00007fcb085fa090 R08: 0000000000000000 R09: 0000000000000000
[  844.852152][T13664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  844.860123][T13664] R13: 00007fcb07a26038 R14: 00007fcb07a25fa0 R15: 00007ffe36d20bf8
[  844.868098][T13664]  </TASK>
[  844.898007][T13669] netlink: 'syz.0.3523': attribute type 2 has an invalid length.
[  846.224784][T13659] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.3519'.
[  846.305703][T13669] device 0 entered promiscuous mode
[  846.436099][ T6557] device hsr_slave_0 left promiscuous mode
[  846.472655][ T4330] Bluetooth: hci1: command 0x0406 tx timeout
[  846.479367][ T6557] device hsr_slave_1 left promiscuous mode
[  846.534835][ T6557] device veth1_macvtap left promiscuous mode
[  846.540891][ T6557] device veth0_macvtap left promiscuous mode
[  846.771160][T13691] netlink: 'syz.1.3531': attribute type 4 has an invalid length.
[  846.787049][T13691] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3531'.
[  846.999815][ T4325] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4
[  847.657305][ T6557] team0 (unregistering): Port device team_slave_1 removed
[  848.052155][ T6557] team0 (unregistering): Port device dummy0 removed
[  848.223806][T13682] device syzkaller0 entered promiscuous mode
[  848.380793][T13703] device syzkaller0 entered promiscuous mode
[  852.351923][T13743] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  852.481794][T13741] device syzkaller0 entered promiscuous mode
[  868.882751][T13774] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  868.892476][T13774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  868.984260][T13775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  868.994534][T13775] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  869.003564][T13775] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  869.011942][T13775] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  869.021321][T13775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  869.032619][T13775] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  869.040182][T13775] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  869.048645][T13775] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  869.056663][T13775] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  869.065948][T13775] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  869.075946][T13775] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  869.083768][T13775] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  869.093576][T13775] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  869.103023][T13775] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  869.110751][T13775] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  869.120221][T13775] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  869.129192][T13775] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  869.136702][T13775] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  869.144745][T13775] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  869.152056][T13775] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  869.160427][T13775] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  869.169038][T13775] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  871.222717][T13775] Bluetooth: hci8: command 0x0409 tx timeout
[  871.229147][T13775] Bluetooth: hci5: command 0x0409 tx timeout
[  871.235417][T13778] Bluetooth: hci7: command 0x0409 tx timeout
[  871.273201][T13775] Bluetooth: hci6: command 0x0409 tx timeout
[  872.072551][T13775] Bluetooth: hci2: command 0x0406 tx timeout
[  873.272659][T13775] Bluetooth: hci5: command 0x041b tx timeout
[  873.278722][T13775] Bluetooth: hci8: command 0x041b tx timeout
[  873.284891][T13778] Bluetooth: hci7: command 0x041b tx timeout
[  873.372574][T13775] Bluetooth: hci6: command 0x041b tx timeout
[  875.372592][T13775] Bluetooth: hci8: command 0x040f tx timeout
[  875.378686][T13775] Bluetooth: hci5: command 0x040f tx timeout
[  875.384765][T13778] Bluetooth: hci7: command 0x040f tx timeout
[  875.422566][T13775] Bluetooth: hci6: command 0x040f tx timeout
[  877.422612][T13775] Bluetooth: hci5: command 0x0419 tx timeout
[  877.428673][T13775] Bluetooth: hci8: command 0x0419 tx timeout
[  877.434749][T13778] Bluetooth: hci7: command 0x0419 tx timeout
[  877.522570][T13775] Bluetooth: hci6: command 0x0419 tx timeout
[  887.422589][ T4329] Bluetooth: hci4: command 0x0406 tx timeout
[  893.183425][T13775] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  893.193089][T13775] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  893.201073][T13775] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  893.210078][T13775] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  893.217859][T13775] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  893.232784][T13775] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  895.275192][ T4329] Bluetooth: hci9: command 0x0409 tx timeout
[  897.372569][ T4329] Bluetooth: hci9: command 0x041b tx timeout
[  899.422639][ T4329] Bluetooth: hci9: command 0x040f tx timeout
[  901.522584][ T4329] Bluetooth: hci9: command 0x0419 tx timeout
[  929.354771][T13778] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  929.364009][T13778] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  929.371929][T13778] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  929.393992][T13778] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  929.401807][T13778] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  929.409642][T13778] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  929.453372][T13775] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  929.463102][T13775] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  929.471358][T13775] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  929.489837][T13775] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  929.497716][T13775] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  929.505531][T13775] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  929.683696][T13775] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  929.693411][T13775] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  929.701622][T13775] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  929.710293][T13775] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  929.718198][T13775] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  929.726266][T13775] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  930.060254][T13775] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  930.069450][T13775] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  930.087741][T13775] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  930.096948][T13775] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  930.105181][T13775] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  930.112885][T13775] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  931.424260][ T4329] Bluetooth: hci11: command 0x0409 tx timeout
[  931.522655][ T4329] Bluetooth: hci10: command 0x0409 tx timeout
[  931.772594][ T4329] Bluetooth: hci12: command 0x0409 tx timeout
[  932.172761][ T4329] Bluetooth: hci13: command 0x0409 tx timeout
[  933.522646][ T4329] Bluetooth: hci11: command 0x041b tx timeout
[  933.622609][ T4329] Bluetooth: hci10: command 0x041b tx timeout
[  933.822603][ T4329] Bluetooth: hci12: command 0x041b tx timeout
[  934.222590][ T4329] Bluetooth: hci13: command 0x041b tx timeout
[  935.622609][ T4329] Bluetooth: hci11: command 0x040f tx timeout
[  935.672547][ T4329] Bluetooth: hci10: command 0x040f tx timeout
[  935.922685][ T4329] Bluetooth: hci12: command 0x040f tx timeout
[  936.322650][ T4329] Bluetooth: hci13: command 0x040f tx timeout
[  937.672552][ T4329] Bluetooth: hci11: command 0x0419 tx timeout
[  937.772588][ T4329] Bluetooth: hci10: command 0x0419 tx timeout
[  938.022694][ T4329] Bluetooth: hci12: command 0x0419 tx timeout
[  938.422528][ T4329] Bluetooth: hci13: command 0x0419 tx timeout
[  953.333166][T13775] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  953.343111][T13775] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  953.351050][T13775] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  953.359637][T13775] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  953.367471][T13775] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  953.382471][T13775] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  955.422821][ T4329] Bluetooth: hci14: command 0x0409 tx timeout
[  957.472327][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  957.479307][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P13742
[  957.487130][    C1] 	(detected by 1, t=10502 jiffies, g=75981, q=4566 ncpus=2)
[  957.494510][    C1] task:syz.1.3547      state:R  running task     stack:26288 pid:13742 ppid:13076  flags:0x0000400c
[  957.506172][    C1] Call Trace:
[  957.509458][    C1]  <TASK>
[  957.512401][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  957.518427][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  957.523217][    C1]  ? trace_call_bpf+0x5d6/0x6b0
[  957.528079][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  957.532858][    C1]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  957.538777][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  957.545985][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  957.551981][    C1]  ? lock_chain_count+0x20/0x20
[  957.556853][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  957.561970][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  957.567090][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  957.572216][    C1]  ? rcu_read_unlock_special+0x7f/0x510
[  957.577834][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  957.582775][    C1]  ? __rwlock_init+0x140/0x140
[  957.587538][    C1]  ? read_lock_is_recursive+0x10/0x10
[  957.592914][    C1]  ? __debug_object_init+0xed/0x440
[  957.598180][    C1]  ? __rcu_read_unlock+0x78/0xd0
[  957.603120][    C1]  ? rcu_read_unlock+0x85/0xa0
[  957.607894][    C1]  ? dput+0x37/0x1d0
[  957.611800][    C1]  ? dput+0xe2/0x1d0
[  957.615703][    C1]  ? __fput+0x597/0x8b0
[  957.619867][    C1]  ? task_work_run+0x1d0/0x260
[  957.624731][    C1]  ? task_work_cancel+0x220/0x220
[  957.629758][    C1]  ? __close_range+0x20c/0x770
[  957.634533][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[  957.640051][    C1]  ? exit_to_user_mode_loop+0xe6/0x110
[  957.645516][    C1]  ? exit_to_user_mode_prepare+0xee/0x180
[  957.651264][    C1]  ? syscall_exit_to_user_mode+0x16/0x40
[  957.656920][    C1]  ? do_syscall_64+0x58/0xa0
[  957.661525][    C1]  ? clear_bhb_loop+0x60/0xb0
[  957.666219][    C1]  ? clear_bhb_loop+0x60/0xb0
[  957.670907][    C1]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  957.676995][    C1]  </TASK>
[  957.680015][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g75981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  957.692336][    C1] rcu: 	Possible timer handling issue on cpu=0 timer-softirq=63015
[  957.700219][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g75981 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0
[  957.711586][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  957.721549][    C1] rcu: RCU grace-period kthread stack dump:
[  957.727434][    C1] task:rcu_preempt     state:I stack:26384 pid:16    ppid:2      flags:0x00004000
[  957.736645][    C1] Call Trace:
[  957.739924][    C1]  <TASK>
[  957.742859][    C1]  __schedule+0x107f/0x4030
[  957.747379][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  957.752584][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  957.758476][    C1]  ? _raw_spin_unlock+0x40/0x40
[  957.763336][    C1]  ? __sched_text_start+0x8/0x8
[  957.768208][    C1]  schedule+0xb9/0x180
[  957.772290][    C1]  schedule_timeout+0x184/0x2d0
[  957.777143][    C1]  ? console_conditional_schedule+0x40/0x40
[  957.783038][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  957.789028][    C1]  ? update_process_times+0x1b0/0x1b0
[  957.794483][    C1]  ? prepare_to_swait_event+0x340/0x360
[  957.800077][    C1]  rcu_gp_fqs_loop+0x303/0x1350
[  957.804929][    C1]  ? perf_trace_preemptirq_template+0x268/0x320
[  957.811181][    C1]  ? rcu_gp_kthread+0x3b0/0x3b0
[  957.816031][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  957.822016][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  957.827048][    C1]  ? rcu_gp_init+0x14f0/0x14f0
[  957.831818][    C1]  ? rcu_gp_cleanup+0xade/0xc30
[  957.836670][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  957.841868][    C1]  ? _raw_spin_unlock_irq+0x1f/0x40
[  957.847066][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  957.852264][    C1]  rcu_gp_kthread+0x99/0x3b0
[  957.856857][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  957.861967][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  957.867867][    C1]  ? __kthread_parkme+0x71/0x1c0
[  957.872814][    C1]  ? __kthread_parkme+0x15b/0x1c0
[  957.877851][    C1]  kthread+0x29d/0x330
[  957.881920][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  957.887032][    C1]  ? kthread_blkcg+0xd0/0xd0
[  957.891626][    C1]  ret_from_fork+0x1f/0x30
[  957.896081][    C1]  </TASK>
[  957.899099][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  957.905422][    C1] Sending NMI from CPU 1 to CPUs 0:
[  957.910625][    C0] NMI backtrace for cpu 0
[  957.910634][    C0] CPU: 0 PID: 13742 Comm: syz.1.3547 Not tainted syzkaller #0
[  957.910647][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  957.910656][    C0] RIP: 0010:__lock_acquire+0x245/0x7c40
[  957.910679][    C0] Code: 84 3d 01 00 00 4b 8d 1c b6 41 83 fe 30 49 b8 00 00 00 00 00 fc ff df 0f 87 11 65 00 00 48 8b 44 24 20 4c 8d b4 d8 d8 0a 00 00 <4c> 89 f0 48 c1 e8 03 42 0f b6 04 00 84 c0 0f 85 7f 65 00 00 48 8b
[  957.910691][    C0] RSP: 0018:ffffc900042073a0 EFLAGS: 00000083
[  957.910704][    C0] RAX: ffff8880326f8000 RBX: 000000000000000f RCX: ffffffff96c17103
[  957.910714][    C0] RDX: 0000000000000016 RSI: 0000000000000000 RDI: ffffffff8cb2dc20
[  957.910723][    C0] RBP: ffffc900042075d0 R08: dffffc0000000000 R09: 0000000000000001
[  957.910733][    C0] R10: dffffc0000000000 R11: fffffbfff1c4215e R12: 0000000000000000
[  957.910743][    C0] R13: ffffffff8cb2dc20 R14: ffff8880326f8b50 R15: 0000000000000016
[  957.910753][    C0] FS:  00005555783ae500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  957.910767][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  957.910777][    C0] CR2: 00007ffcbacfbfd0 CR3: 0000000070e63000 CR4: 00000000003506f0
[  957.910790][    C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  957.910799][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  957.910808][    C0] Call Trace:
[  957.910814][    C0]  <TASK>
[  957.910826][    C0]  ? mark_lock+0x94/0x320
[  957.910846][    C0]  ? verify_lock_unused+0x140/0x140
[  957.910864][    C0]  ? __lock_acquire+0x1465/0x7c40
[  957.910886][    C0]  ? mark_lock+0x94/0x320
[  957.910905][    C0]  ? __lock_acquire+0x138a/0x7c40
[  957.910926][    C0]  lock_acquire+0x1bb/0x4a0
[  957.910944][    C0]  ? __virt_addr_valid+0x188/0x540
[  957.910985][    C0]  ? read_lock_is_recursive+0x10/0x10
[  957.911004][    C0]  ? verify_lock_unused+0x140/0x140
[  957.911022][    C0]  ? llist_add_batch+0x12b/0x180
[  957.911044][    C0]  ? find_next_clump8+0x1a0/0x1a0
[  957.911064][    C0]  ? __virt_addr_valid+0x188/0x540
[  957.911082][    C0]  __virt_addr_valid+0x1a5/0x540
[  957.911100][    C0]  ? __virt_addr_valid+0x188/0x540
[  957.911119][    C0]  kasan_addr_to_slab+0x9/0xc0
[  957.911139][    C0]  __kasan_record_aux_stack+0xf/0xc0
[  957.911198][    C0]  irq_work_queue_on+0x10f/0x260
[  957.911221][    C0]  rcu_read_unlock_special+0x3c9/0x510
[  957.911242][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[  957.911260][    C0]  __rcu_read_unlock+0x78/0xd0
[  957.911273][    C0]  ? trace_call_bpf+0xbf/0x6b0
[  957.911292][    C0]  trace_call_bpf+0x5bb/0x6b0
[  957.911310][    C0]  ? trace_call_bpf+0xbf/0x6b0
[  957.911330][    C0]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  957.911349][    C0]  ? trace_call_bpf+0xbf/0x6b0
[  957.911367][    C0]  ? trace_call_bpf+0x5d6/0x6b0
[  957.911385][    C0]  ? trace_call_bpf+0xbf/0x6b0
[  957.911404][    C0]  perf_trace_run_bpf_submit+0x79/0x1c0
[  957.911427][    C0]  perf_trace_preemptirq_template+0x268/0x320
[  957.911447][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  957.911466][    C0]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  957.911485][    C0]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  957.911505][    C0]  ? lock_chain_count+0x20/0x20
[  957.911524][    C0]  ? asm_sysvec_irq_work+0x16/0x20
[  957.911542][    C0]  trace_irq_enable_rcuidle+0xd3/0x140
[  957.911562][    C0]  trace_hardirqs_on+0x24/0x40
[  957.911578][    C0]  asm_sysvec_irq_work+0x16/0x20
[  957.911596][    C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  957.911611][    C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 a2 7c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  957.911623][    C0] RSP: 0018:ffffc90004207c20 EFLAGS: 00000206
[  957.911635][    C0] RAX: e54b794220775600 RBX: 1ffff92000840f8c RCX: e54b794220775600
[  957.911645][    C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf5de0
[  957.911655][    C0] RBP: ffffc90004207d18 R08: ffffffff90b1024f R09: 1ffffffff2162049
[  957.911666][    C0] R10: dffffc0000000000 R11: fffffbfff216204a R12: 0000000000000246
[  957.911675][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffffff8cb33198
[  957.911694][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[  957.911707][    C0]  ? __rwlock_init+0x140/0x140
[  957.911719][    C0]  ? read_lock_is_recursive+0x10/0x10
[  957.911737][    C0]  ? __debug_object_init+0xed/0x440
[  957.911761][    C0]  __rcu_read_unlock+0x78/0xd0
[  957.911775][    C0]  rcu_read_unlock+0x85/0xa0
[  957.911794][    C0]  ? dput+0x37/0x1d0
[  957.911812][    C0]  dput+0xe2/0x1d0
[  957.911831][    C0]  __fput+0x597/0x8b0
[  957.911847][    C0]  task_work_run+0x1d0/0x260
[  957.911867][    C0]  ? task_work_cancel+0x220/0x220
[  957.911884][    C0]  ? __close_range+0x20c/0x770
[  957.911905][    C0]  ? exit_to_user_mode_loop+0x3b/0x110
[  957.911926][    C0]  exit_to_user_mode_loop+0xe6/0x110
[  957.911946][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  957.911966][    C0]  syscall_exit_to_user_mode+0x16/0x40
[  957.911980][    C0]  do_syscall_64+0x58/0xa0
[  957.911999][    C0]  ? clear_bhb_loop+0x60/0xb0
[  957.912016][    C0]  ? clear_bhb_loop+0x60/0xb0
[  957.912034][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  957.912052][    C0] RIP: 0033:0x7fde9ad9e0d9
[  957.912064][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  957.912075][    C0] RSP: 002b:00007ffd1ea91538 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  957.912088][    C0] RAX: 0000000000000000 RBX: 00007ffd1ea91620 RCX: 00007fde9ad9e0d9
[  957.912098][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  957.912106][    C0] RBP: 00000000000d012d R08: 0000000000000001 R09: 0000000000000000
[  957.912114][    C0] R10: 0000001b2c220000 R11: 0000000000000246 R12: 00007ffd1ea91660
[  957.912124][    C0] R13: 00007fde9b025fac R14: 00000000000d0203 R15: 00007fde9b025fa0
[  957.912139][    C0]  </TASK>
[  958.037228][ T4329] Bluetooth: hci14: command 0x041b tx timeout
[  960.572638][ T4329] Bluetooth: hci14: command 0x040f tx timeout
[  962.622631][ T4329] Bluetooth: hci14: command 0x0419 tx timeout