last executing test programs:

2m28.740707259s ago: executing program 0 (id=3339):
r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r1, &(0x7f0000001a40)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xb3, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000640)=[{0x10, 0x29, 0x5}], 0x10}, 0x4000)
sendmsg$sock(r1, 0x0, 0x800)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000080)=r2, 0x4)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m28.587595293s ago: executing program 0 (id=3342):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_config_ext={0xff, 0x9}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='GPL\x00'}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x1f, 0x0, &(0x7f0000000640)="b9fe03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)

2m28.268850141s ago: executing program 0 (id=3345):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0xe, 0x1ef7}, 0x1080aa, 0x4, 0x98, 0x9, 0x8, 0x32f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x100024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000e6ffffff00000000000000000000001c000000000000000000124d38b905eb02000000e96f5b30"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xa, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4c9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe3, &(0x7f0000000240)=""/227}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)=@nfc_llcp={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, "9d467b1f4cfd8c642c13334c2a9f91732d13e85b10bdb7e8d20dd064e66a4278b3c76f275da083e92b3fdaae3b991ffc48ca221108c4d3aa523010eab68d95", 0xffffffffffffffff}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x0, 0xfffffffd}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xccd6}, 0x94) (async)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
r3 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32)
r4 = socket$kcm(0x11, 0x2, 0x0) (rerun: 32)
setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0xf, 0x7, "5999b10cf64f438f15eb90c444e46a3b0fb96d377989f7cab6620e7a70be95a441a47e46c3d59f5d88c599ff6cb13319998a7be473e123661ed7f70ce298ee", 0xc}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000600)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee162fd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b0000000000000057", 0x4c}], 0x1}, 0x0)
sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x3, {0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="533b68be9fa913c4c74da153b558e6bbe2d1270e995324837cccfd73855a5512cd6831bb7417f77daa7ca39d08c9fd151c5cd45fc9a3f0baa4316602246d83474875539f76715e5d19c4021696586f6c6da7d269e965474a9bbf4bea1d5eb249259778533afaa995c0e824094e786e21297b32d2e883d3ce894010ffb546d016b035a0c3fad368b3cea53cb3514b43c3596afb9ccf017dcc93962bca35f751ad2ac444c255e358f5247f425199df11ea4c66948cc4dbf030810b107822540741f72cb7a111e87e1deb788a52", 0xcc}], 0x1}, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x7}, 0x10122)

2m27.601349746s ago: executing program 0 (id=3352):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001805000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009d000000850000000600"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0)

2m26.444353004s ago: executing program 0 (id=3358):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b2000000000000000002000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000017ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000030000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m26.297039418s ago: executing program 0 (id=3360):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1", 0xcf}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800008b04583d4801000000000000004826d1cc6aa56669"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r8, &(0x7f0000000080), 0x12)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f00000001c0), 0x12)

2m11.244274648s ago: executing program 32 (id=3360):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1", 0xcf}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800008b04583d4801000000000000004826d1cc6aa56669"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r7 = openat$cgroup_type(r6, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)
r8 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r8, &(0x7f0000000080), 0x12)
r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f00000001c0), 0x12)

4.776266486s ago: executing program 3 (id=4186):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x700}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r2, 0x11}, 0xa)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r2, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000380), 0x8, 0x52, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r4 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r4, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x4000040)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8)

4.453575304s ago: executing program 3 (id=4187):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a0000000000007910480000000000610424000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))

3.596227894s ago: executing program 3 (id=4189):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
close(0x4)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

3.148272225s ago: executing program 2 (id=4195):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10001, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x8, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0xb81, 0x0)
close(r1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x9, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffff}]})
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0x40107446, &(0x7f0000000100))
ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180))
close(0x3)

2.216495507s ago: executing program 2 (id=4199):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x3, 0x5, 0x6, 0x0, 0x6, 0x1, 0x1f, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4ae8, 0x1, @perf_config_ext={0x8, 0xff}, 0x8, 0x742, 0x240, 0x9, 0x2ca, 0x1, 0x0, 0x0, 0x7, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0x2)
r2 = perf_event_open(0x0, 0x0, 0x6, r1, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_msg, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r6 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r4, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x2, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0x6, 0x55b}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9e0}}, 0x0, 0x31f, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x132c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x99}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x101c0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r4, 0x7, '\x00', r7, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10, <r11=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
close(r11)
socketpair(0x5, 0x4, 0x5fd, &(0x7f0000000140))
recvmsg$kcm(r6, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x1e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x8, 0x1, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0]}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r9, r1, 0x0, 0x4, &(0x7f0000000400)='!%$\x00'}, 0x30)

1.836231067s ago: executing program 1 (id=4202):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})

1.753486929s ago: executing program 1 (id=4204):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x21)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000400", @ANYRES32=0x1, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000d2e9388bc315a8f3aa2e3982f3e9bd87eabd0888939d24425fd856973736d0c7e0d65573f1b53a8f1a8715c8b68468ffa07d3bf9c79f6026bba5485126214234fc5672c475331f86e5fa602e0ae332c7d4410db6d76eb8299eef8c527ac4"], 0x50)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000003700)=""/4064, 0xfe0}, {&(0x7f0000000440)=""/171, 0xab}], 0x3}, 0x0)

1.659673811s ago: executing program 1 (id=4205):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000040)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', r0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffbe)

1.570692083s ago: executing program 1 (id=4206):
r0 = socket$kcm(0x1e, 0x1, 0x0)
r1 = socket$kcm(0x29, 0x7, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x84, &(0x7f0000000000), 0x90)
socket$kcm(0x1e, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
socketpair(0x22, 0x2, 0x10, &(0x7f0000000000))
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r6 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r4})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ddaccee5c4f3b3983792a3a40900000000000000060000801859000003000000000000000000000018000000000000800000000007000000"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x7c, &(0x7f0000000040)=""/124, 0x41000, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000f40)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0xc, 0x4, 0xfffffff9}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000fc0)=[{0x4, 0x4, 0xe, 0xc}, {0x4, 0x2, 0xd, 0x4}, {0x2, 0x3, 0x8, 0x6}, {0x2, 0x3, 0xf, 0x7}], 0x10, 0x8000}, 0x94)
close(r6)

1.496447054s ago: executing program 1 (id=4207):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2819b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x828, 0x96, 0x0, 0x4, 0x10000, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0x5}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x732ef712, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x3ff, 0x8, 0x40, 0x42, 0x1}, 0x4f)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309})
ioctl$TUNGETSNDBUF(r0, 0x400454dc, &(0x7f0000001700))

1.28458285s ago: executing program 4 (id=4208):
perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90196, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40600, 0x0)
recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x58}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x12)

1.119333674s ago: executing program 2 (id=4209):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x3f}, 0x94) (async, rerun: 32)
socket$kcm(0xa, 0x3, 0x3a) (async, rerun: 32)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x6508, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x4}, 0x50) (async)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000800000000800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300"/28], 0x50) (async, rerun: 32)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, <r3=>0xffffffffffffffff}, 0x4) (rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x8, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x43e800, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x7, 0x1, 0x6, 0x6, 0xfffffffffffffffc}]}, &(0x7f0000000300)='syzkaller\x00', 0x401, 0xa5, &(0x7f00000007c0)=""/165, 0x41100, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, r3, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x2, 0x3, 0xa, 0x2}, {0x5, 0x4, 0x3, 0xc}, {0x1, 0x5, 0xf, 0x9}, {0x2, 0xfffffffe, 0x4, 0x1}, {0x5, 0x5, 0x84, 0x1}], 0x10, 0x5}, 0x94) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 32)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, 0x0})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async)
r5 = socket$kcm(0x2, 0x1, 0x84) (async)
r6 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x209, 0x40, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xd3, &(0x7f0000000680)=""/211, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r7) (async, rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 32)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) (async, rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (rerun: 64)
setsockopt$sock_attach_bpf(r5, 0x84, 0xd, &(0x7f0000000000), 0x4) (async)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r9, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) (async)
r10 = socket$kcm(0x10, 0x2, 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)={r4, r5}) (async, rerun: 64)
sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e021fffffff000000000f00000017d3a705251e6182949a369f3d3b48dfd8cd3f9367c1fa51f60a64c9f4d4938037e786a6d0bdd7000000000000eaffffffb3d59256a5a2fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (rerun: 64)
close(r10) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000600000000400005000000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

908.307109ms ago: executing program 3 (id=4210):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r2, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1, <r4=>0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r0}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0xe, 0x5, 0x6, 0x8}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f0000000500)='syzkaller\x00', 0x6, 0x24, &(0x7f0000000540)=""/36, 0x40f00, 0x25, '\x00', r3, 0xf0a3800173d4f79e, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xc5d0, 0xffffffffffffffff, 0x6, &(0x7f00000008c0)=[r4], &(0x7f0000000900)=[{0x1, 0x3, 0xd, 0xc}, {0x3, 0x5, 0xb, 0xb}, {0x3, 0x3, 0x8, 0x6}, {0x2, 0x3, 0x6, 0xc}, {0x4, 0x4, 0x8, 0xb}, {0x4, 0x1, 0x2, 0x2}], 0x10, 0x40}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS    \x00'}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r5, 0x0, &(0x7f0000000580)=""/157}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x9}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x31, &(0x7f0000000640)=r6, 0x4)
r7 = socket$kcm(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'nr0\x00', 0x100})
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0)

906.675389ms ago: executing program 2 (id=4211):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x6)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000200)={0x1, 0x0, [0x0]})
ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0xb, 0xb5, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

838.674991ms ago: executing program 4 (id=4212):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40002}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

512.194338ms ago: executing program 4 (id=4213):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x1002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x28}, 0xfffffffffffffd64}, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00')
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x7, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x3076, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)

483.817109ms ago: executing program 2 (id=4214):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x0, 0x0})

407.078391ms ago: executing program 3 (id=4215):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000e09d62e5a12a76600"/21, @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
close(0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = socket$kcm(0xa, 0x3, 0x3a) (async)
close(r0)
sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000001"], 0x18}, 0x8080) (async, rerun: 32)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xf7)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="050000800500000000000000d1ac3705771b1370", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r5) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r7, 0x29, 0x4, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="58e80510803d2a75dd905768fb874432e0f26c018683cf56c869647d265f4d7da3e32b089b247c2c43253b6989c88ff32567e865c993f6e5adebe5b931e3515c4cd61b7c2fc218ca457b2eff43827d98ad10db4ca0394d657a24c6d8b5d2e34d6dd33aa055b5bdbb3fdd1b980be0929b84014d780920684c92a772d670601651b54dc6c09aac22dc35a67daf3d78ea727f7c9f71d3003767ebea245e8045e682b5448cf5e2596c7a914b2874ff31f4744131594944c7c0370d16a3e7748e553c3b8e074be039117d0a012a1eee25e7ddb8ac4839df63fbf22b4277235f0fd208ac6456f094b8bf", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) (async, rerun: 32)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xec2}], 0x1}, 0x0) (async, rerun: 32)
r10 = openat$cgroup_pressure(r1, &(0x7f00000004c0)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r10, &(0x7f0000000780)={'some', 0x20, 0xe, 0x20, 0xfff}, 0x2f)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

340.340002ms ago: executing program 4 (id=4216):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x11, &(0x7f0000000000)=r4, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r5)
socket$kcm(0x11, 0xa, 0x300)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0xb5, 0x0, 0x0, 0x8000000000000001, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004, 0x0, @perf_config_ext={0x7, 0x2}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x81, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$TUNGETVNETLE(r5, 0x8955, &(0x7f0000000040))
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth0_to_team\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x0, 0x80}, {0x40, 0x0, 0x0, 0x3}, {0x6, 0xc, 0x0, 0x100b100}]})

323.249423ms ago: executing program 2 (id=4217):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000008a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
r0 = socket$kcm(0xa, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x3)

292.390153ms ago: executing program 1 (id=4218):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x3)
close(0x4)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
close(0x4)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)

140.200427ms ago: executing program 4 (id=4219):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000500)=""/130, 0x82, <r2=>0x0, &(0x7f00000005c0)=""/201, 0xc9}}, 0x10)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x16, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x8}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @generic={0xff, 0x0, 0x0, 0x6, 0x200}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2800000, 0x0, 0x0, 0x0, 0x437}]}, &(0x7f0000000380)='GPL\x00', 0x8001, 0x9d, &(0x7f00000003c0)=""/157, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x26, r1, 0x8, &(0x7f00000004c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r2, r0, 0x1, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, r3], &(0x7f0000000800)=[{0x0, 0x5, 0x8, 0xb}]}, 0x94)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'net'}, {0x2d, 'rdma'}, {0x77, 'hugetlb'}, {0x2b, 'memory'}, {0x2b, 'net_prio'}, {0x2b, 'memory'}, {0x2b, 'cpuacct'}]}, 0x37)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4009044)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000280)=r7)

139.842547ms ago: executing program 3 (id=4220):
perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90196, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1051, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40600, 0x0)
recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x58}, 0x0)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x12)

0s ago: executing program 4 (id=4221):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00$\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64239, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x3, @perf_config_ext={0x8, 0x7ff}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000000000200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0xa, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$sock(0xffffffffffffffff, &(0x7f00000023c0)={&(0x7f00000006c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x3, 0x4, {0xa, 0x4e21, 0x4, @remote, 0x9}}}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000000740)="b5767af6a80f29300a10baa84f795b844f898d4415d69f33ab1717e58631226b5bf276b931336ea23c3a6f23f4bd130ad94ee0a1f790c1131a7a4d85514ca4cd62f09f27e728f0e8c48b21d5727d0c39ab918824df4a01a9888c777cf328e1782dc41a46ad8b", 0x66}, {&(0x7f00000007c0)="165c52fe5119d843355d48bbdcc2339ced224b1f5a1846a5d4467a1b8189c1886c331fa23b79fe7fe8530438a4fa83b719c774ac39bda50e737121314e3c0eeef25b6c27", 0x44}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="1b8bf0273fcd1689e4797be8e098a6bbb339baa2953163d16137f81f4779c5de823ab21718c5d5b34f7115a66df95457e9baf891b4bea71a127f70374bde17d2abf0243c2a5db3f56aca990380fb756316d78de3cdfd20ef00ef5baef26fa774c9f3e71239d816d6b1c8111279526f5e68766a9e0c861f016cbb97e36d3b09b45647cffdd685e24055a67fc7ca21284b870118c0ada5f0377038fcde63a49eb30fbed518c759b22e44af87b44262fdabc1cbd2dd9ec5", 0xb6}, {&(0x7f0000002100)="c6df81ab3f6934fbd41b164e4cae142bdcdf28bea551309635f3001be10905d2b98562b42f0a00ea775ec83fff52e4d97cde4becc1b97c055727c0f3019176154c59441125a24369004b1c293fd63baf3b102e23e4698b50416aede52b719a7b7c91c9f30a39523508973afa182132f14951f77dd9a7731107d2658992570c9ad4ca2dba9edfcf72618fee2b8b69b6fde728cae8261f82a9847c93f021eac865bc89acf991966d33af66a272d84ca3a94f05263066eb1f", 0xb7}, {&(0x7f00000021c0)="fec2e70ab83282e531c6690245d29d596964658c9a0d7afd9a2a5a35011881d8ed9e40241dc936dbe9f8f37f17ac2677a13a14ded6303cab9dc1fc4176f14cc32bf548e968683a9d9c647512f62734ca69641c6b918658b18aeec0abe033fb48351eb940d58de3a16216ed0e4f998dc17321d5fb5854150e75bc31e823a84b12d33155bc8525960f2dfff95c9bb2e6e5f4daffc9b3e30277c8ba2817d4e4574cfb34fe8b77d494895a77c37883d512dd37477db80387662a1aa6c16f8e4538d09af7bdf0d203ca20b5ee05586b92", 0xce}], 0x6, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xeb}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}, 0x40040)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000580)={'a', ' *:* ', 'w\x00'}, 0x8)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x306)
socketpair(0x1b, 0x4, 0xb, &(0x7f0000000400))
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={&(0x7f0000000280)="a17f6f0d137bd97b629af046a29ae88cc2b0ae2ac0e30285ff33cd529f98dc334dcb45114cd1a76b1870354bbfdaa85048823bcce20aa2d51347951f73ebf5a5c7fead7d3ad760e49e4bfcb5ed6a", &(0x7f0000000300)=""/139, &(0x7f00000004c0)="757766675560692d32924a13b7e1d1727661874a0e1b0e91d9d844879a621ec2fd0b9bf9d3cd5214ae2388d27be333f32b024e183cd6b58527880126f71fa2351b95d278be90fae8dd7ed5c431828dd944e3f513336c5173547f3ac931ec5bba36c6ca0eb66e84d059420ae33fb27bedf3c1c9a16d760e3c11b60b305e36d6a2617dccbfdf6385387049cad21df72c4106a942bb1594c6e2ba061fd3d9750377d539f8f32ec5cb0a4199945c2e877a8909ba138b5b", &(0x7f0000000580), 0x3, r0, 0x4}, 0x38)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90724fc60040011000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

0: Interface deactivated: batadv_slave_1
[  539.258417][ T7035] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.292254][ T7035] bridge_slave_1: left allmulticast mode
[  539.310287][ T7035] bridge_slave_1: left promiscuous mode
[  539.344928][ T7035] bridge0: port 2(bridge_slave_1) entered disabled state
[  539.467966][   T51] Bluetooth: hci0: command tx timeout
[  539.596466][T13667] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2506'.
[  540.413797][T13664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  540.564846][T13470] 8021q: adding VLAN 0 to HW filter on device team0
[  540.636435][T13671] netlink: 'syz.2.2505': attribute type 9 has an invalid length.
[  540.645905][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.653240][ T7055] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.660948][T13671] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2505'.
[  540.771860][ T7057] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.779104][ T7057] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.051613][T13470] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  541.249368][T13693] netlink: 763 bytes leftover after parsing attributes in process `syz.0.2511'.
[  541.298269][T13693] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.306275][T13693] bridge0: entered allmulticast mode
[  541.359635][T13698] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.366935][T13698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.424992][T13698] bridge0: entered promiscuous mode
[  541.641168][T13712] netlink: 'syz.0.2514': attribute type 10 has an invalid length.
[  541.678462][T13712] team0: Port device geneve1 added
[  541.812581][T13470] 8021q: adding VLAN 0 to HW filter on device batadv0
[  542.012611][T13716] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2515'.
[  542.044557][T13716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  542.148597][   T51] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[  542.171854][T13470] veth0_vlan: entered promiscuous mode
[  542.261028][T13470] veth1_vlan: entered promiscuous mode
[  542.492548][T13470] veth0_macvtap: entered promiscuous mode
[  542.529794][T13470] veth1_macvtap: entered promiscuous mode
[  542.575292][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.594271][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.606185][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.627303][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.655512][T13470] batman_adv: batadv0: Interface activated: batadv_slave_0
[  542.680576][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.716078][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.734478][T13470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.764178][T13470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.801817][T13470] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.830248][T13470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.849486][T13470] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.870537][T13470] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.907733][T13470] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.222644][ T7057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.234998][ T7057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.353756][ T7055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.363356][ T7055] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.486689][T13742] netlink: 'syz.2.2518': attribute type 3 has an invalid length.
[  544.704044][T13747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  544.711660][T13747] IPv6: NLM_F_CREATE should be set when creating new route
[  544.719319][T13747] IPv6: NLM_F_CREATE should be set when creating new route
[  544.726857][T13747] IPv6: NLM_F_CREATE should be set when creating new route
[  544.970920][T13753] netlink: 'syz.3.2520': attribute type 9 has an invalid length.
[  545.028323][T13753] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2520'.
[  545.365595][T13762] netlink: 'syz.0.2524': attribute type 11 has an invalid length.
[  545.447820][T13762] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2524'.
[  545.921069][T13762] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  545.937733][T13762] CPU: 0 PID: 13762 Comm: syz.0.2524 Not tainted syzkaller #0
[  545.945288][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  545.955404][T13762] Call Trace:
[  545.958752][T13762]  <TASK>
[  545.961745][T13762]  dump_stack_lvl+0x18c/0x250
[  545.966519][T13762]  ? show_regs_print_info+0x20/0x20
[  545.971797][T13762]  ? load_image+0x420/0x420
[  545.976436][T13762]  sysfs_warn_dup+0x8e/0xa0
[  545.981048][T13762]  sysfs_do_create_link_sd+0xc0/0x110
[  545.986480][T13762]  device_add_class_symlinks+0x1cf/0x240
[  545.992223][T13762]  device_add+0x4f9/0xc40
[  545.996632][T13762]  wiphy_register+0x1d99/0x2ac0
[  546.001710][T13762]  ? cfg80211_event_work+0x40/0x40
[  546.006976][T13762]  ? minstrel_ht_alloc+0x88a/0x990
[  546.012250][T13762]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  546.018464][T13762]  ieee80211_register_hw+0x2dd8/0x3b30
[  546.024079][T13762]  ? ieee80211_register_hw+0xfb1/0x3b30
[  546.029711][T13762]  ? ieee80211_tasklet_handler+0x20/0x20
[  546.035492][T13762]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  546.041524][T13762]  ? __debug_object_init+0xec/0x450
[  546.046787][T13762]  ? __asan_memset+0x22/0x40
[  546.051438][T13762]  ? __hrtimer_init+0x189/0x270
[  546.056369][T13762]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  546.062229][T13762]  ? mac80211_hwsim_free+0x220/0x220
[  546.067572][T13762]  ? rcu_is_watching+0x15/0xb0
[  546.072407][T13762]  ? kstrndup+0xbd/0x140
[  546.076738][T13762]  hwsim_new_radio_nl+0xdad/0x1a70
[  546.081927][T13762]  ? __nla_validate+0x50/0x50
[  546.086701][T13762]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  546.093144][T13762]  ? __nla_parse+0x40/0x50
[  546.097632][T13762]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  546.104020][T13762]  genl_family_rcv_msg_doit+0x21a/0x310
[  546.109641][T13762]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  546.115610][T13762]  ? bpf_lsm_capable+0x9/0x10
[  546.120332][T13762]  ? security_capable+0x89/0xb0
[  546.125252][T13762]  genl_rcv_msg+0x611/0x7a0
[  546.129931][T13762]  ? genl_bind+0x360/0x360
[  546.134406][T13762]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  546.140781][T13762]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  546.147406][T13762]  ? ref_tracker_free+0x686/0x830
[  546.152515][T13762]  netlink_rcv_skb+0x235/0x4c0
[  546.157328][T13762]  ? genl_bind+0x360/0x360
[  546.161810][T13762]  ? netlink_ack+0x1160/0x1160
[  546.166659][T13762]  ? __lock_acquire+0x7d80/0x7d80
[  546.171756][T13762]  ? down_read+0x1ac/0x2e0
[  546.176240][T13762]  genl_rcv+0x28/0x40
[  546.180268][T13762]  netlink_unicast+0x7b1/0x930
[  546.185107][T13762]  netlink_sendmsg+0x8d0/0xbf0
[  546.189933][T13762]  ? netlink_getsockopt+0x590/0x590
[  546.195189][T13762]  ? apparmor_socket_sendmsg+0x8e/0x330
[  546.200787][T13762]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  546.206117][T13762]  ? security_socket_sendmsg+0x80/0xa0
[  546.211624][T13762]  ? netlink_getsockopt+0x590/0x590
[  546.216877][T13762]  ____sys_sendmsg+0x61b/0x980
[  546.221722][T13762]  ? __asan_memset+0x22/0x40
[  546.226372][T13762]  ? __sys_sendmsg_sock+0x30/0x30
[  546.231433][T13762]  ? __import_iovec+0x5f2/0x850
[  546.236365][T13762]  ? import_iovec+0x73/0xa0
[  546.240928][T13762]  ___sys_sendmsg+0x2a6/0x360
[  546.245654][T13762]  ? __sys_sendmsg+0x2b0/0x2b0
[  546.250670][T13762]  __se_sys_sendmsg+0x1d0/0x2c0
[  546.255563][T13762]  ? perf_trace_preemptirq_template+0x269/0x330
[  546.261893][T13762]  ? __x64_sys_sendmsg+0x80/0x80
[  546.266937][T13762]  ? lockdep_hardirqs_on+0x98/0x150
[  546.272233][T13762]  do_syscall_64+0x55/0xb0
[  546.276697][T13762]  ? clear_bhb_loop+0x40/0x90
[  546.281434][T13762]  ? clear_bhb_loop+0x40/0x90
[  546.286166][T13762]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  546.292132][T13762] RIP: 0033:0x7f8c4f99e0d9
[  546.296597][T13762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.316252][T13762] RSP: 002b:00007f8c5090b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  546.324732][T13762] RAX: ffffffffffffffda RBX: 00007f8c4fc26090 RCX: 00007f8c4f99e0d9
[  546.332747][T13762] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  546.340758][T13762] RBP: 00007f8c4fa35024 R08: 0000000000000000 R09: 0000000000000000
[  546.348770][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  546.356782][T13762] R13: 00007f8c4fc26128 R14: 00007f8c4fc26090 R15: 00007fff9314d818
[  546.364838][T13762]  </TASK>
[  546.581109][T13759] netlink: 'syz.0.2524': attribute type 11 has an invalid length.
[  546.608064][T13759] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2524'.
[  546.670517][T13759] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  546.718319][T13759] CPU: 1 PID: 13759 Comm: syz.0.2524 Not tainted syzkaller #0
[  546.725964][T13759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  546.736076][T13759] Call Trace:
[  546.739401][T13759]  <TASK>
[  546.742380][T13759]  dump_stack_lvl+0x18c/0x250
[  546.747110][T13759]  ? show_regs_print_info+0x20/0x20
[  546.752365][T13759]  ? load_image+0x420/0x420
[  546.756942][T13759]  sysfs_warn_dup+0x8e/0xa0
[  546.761504][T13759]  sysfs_do_create_link_sd+0xc0/0x110
[  546.766929][T13759]  device_add_class_symlinks+0x1cf/0x240
[  546.772656][T13759]  device_add+0x4f9/0xc40
[  546.777058][T13759]  wiphy_register+0x1d99/0x2ac0
[  546.781962][T13759]  ? cfg80211_event_work+0x40/0x40
[  546.787115][T13759]  ? minstrel_ht_alloc+0x88a/0x990
[  546.792302][T13759]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  546.798419][T13759]  ieee80211_register_hw+0x2dd8/0x3b30
[  546.803922][T13759]  ? ieee80211_register_hw+0xfb1/0x3b30
[  546.809509][T13759]  ? ieee80211_tasklet_handler+0x20/0x20
[  546.815175][T13759]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  546.821118][T13759]  ? __debug_object_init+0xec/0x450
[  546.826377][T13759]  ? __asan_memset+0x22/0x40
[  546.831027][T13759]  ? __hrtimer_init+0x189/0x270
[  546.835931][T13759]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  546.841718][T13759]  ? mac80211_hwsim_free+0x220/0x220
[  546.847067][T13759]  ? rcu_is_watching+0x15/0xb0
[  546.851871][T13759]  ? kstrndup+0xbd/0x140
[  546.856169][T13759]  hwsim_new_radio_nl+0xdad/0x1a70
[  546.861329][T13759]  ? __nla_validate+0x50/0x50
[  546.866067][T13759]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  546.872472][T13759]  ? __nla_parse+0x40/0x50
[  546.876950][T13759]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  546.883339][T13759]  genl_family_rcv_msg_doit+0x21a/0x310
[  546.888929][T13759]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  546.894862][T13759]  ? bpf_lsm_capable+0x9/0x10
[  546.899596][T13759]  ? security_capable+0x89/0xb0
[  546.904488][T13759]  genl_rcv_msg+0x611/0x7a0
[  546.909043][T13759]  ? genl_bind+0x360/0x360
[  546.913494][T13759]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  546.919856][T13759]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  546.926481][T13759]  ? ref_tracker_free+0x686/0x830
[  546.931555][T13759]  netlink_rcv_skb+0x235/0x4c0
[  546.936374][T13759]  ? genl_bind+0x360/0x360
[  546.940836][T13759]  ? netlink_ack+0x1160/0x1160
[  546.945649][T13759]  ? __lock_acquire+0x7d80/0x7d80
[  546.950721][T13759]  ? down_read+0x1ac/0x2e0
[  546.955173][T13759]  genl_rcv+0x28/0x40
[  546.959197][T13759]  netlink_unicast+0x7b1/0x930
[  546.964042][T13759]  netlink_sendmsg+0x8d0/0xbf0
[  546.968858][T13759]  ? netlink_getsockopt+0x590/0x590
[  546.974099][T13759]  ? apparmor_socket_sendmsg+0x8e/0x330
[  546.979682][T13759]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  546.985014][T13759]  ? security_socket_sendmsg+0x80/0xa0
[  546.990498][T13759]  ? netlink_getsockopt+0x590/0x590
[  546.995727][T13759]  ____sys_sendmsg+0x61b/0x980
[  547.000531][T13759]  ? __asan_memset+0x22/0x40
[  547.005155][T13759]  ? __sys_sendmsg_sock+0x30/0x30
[  547.010206][T13759]  ? __import_iovec+0x5f2/0x850
[  547.015126][T13759]  ? import_iovec+0x73/0xa0
[  547.019706][T13759]  ___sys_sendmsg+0x2a6/0x360
[  547.024428][T13759]  ? __sys_sendmsg+0x2b0/0x2b0
[  547.029278][T13759]  __se_sys_sendmsg+0x1d0/0x2c0
[  547.034170][T13759]  ? __x64_sys_sendmsg+0x80/0x80
[  547.039164][T13759]  ? lockdep_hardirqs_on+0x98/0x150
[  547.044440][T13759]  do_syscall_64+0x55/0xb0
[  547.048887][T13759]  ? clear_bhb_loop+0x40/0x90
[  547.053596][T13759]  ? clear_bhb_loop+0x40/0x90
[  547.058308][T13759]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  547.064235][T13759] RIP: 0033:0x7f8c4f99e0d9
[  547.068697][T13759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  547.088342][T13759] RSP: 002b:00007f8c5092c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  547.096797][T13759] RAX: ffffffffffffffda RBX: 00007f8c4fc25fa0 RCX: 00007f8c4f99e0d9
[  547.104810][T13759] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  547.112814][T13759] RBP: 00007f8c4fa35024 R08: 0000000000000000 R09: 0000000000000000
[  547.120827][T13759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  547.128849][T13759] R13: 00007f8c4fc26038 R14: 00007f8c4fc25fa0 R15: 00007fff9314d818
[  547.136878][T13759]  </TASK>
[  547.538432][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  547.547861][T13782] delete_channel: no stack
[  547.552638][T13782] delete_channel: no stack
[  547.553966][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  547.578804][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  547.608323][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  547.616683][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  547.624703][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  547.729153][ T5770] bond0: (slave syz_tun): Releasing backup interface
[  547.802277][T13784] netlink: 'syz.1.2531': attribute type 17 has an invalid length.
[  547.811516][T13784] netlink: 'syz.1.2531': attribute type 16 has an invalid length.
[  547.830203][T13784] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2531'.
[  547.998672][ T7035] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.148428][ T7035] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.360804][ T7035] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.425558][T13788] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2533'.
[  548.481807][T13789] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.489632][T13789] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.551999][T13789] bridge0: entered allmulticast mode
[  548.659259][ T7035] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.700548][T13788] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.707820][T13788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  548.715360][T13788] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.722616][T13788] bridge0: port 1(bridge_slave_0) entered forwarding state
[  548.732047][T13788] bridge0: entered promiscuous mode
[  548.817883][T13797] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  549.434055][T13779] chnl_net:caif_netlink_parms(): no params data found
[  549.717716][ T5780] Bluetooth: hci3: command tx timeout
[  549.767117][T13813] netlink: 'syz.3.2538': attribute type 10 has an invalid length.
[  550.185290][T13813] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  550.599745][T13813] syz.3.2538 (13813) used greatest stack depth: 18888 bytes left
[  551.105064][T13831] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  551.792808][ T5780] Bluetooth: hci3: command tx timeout
[  551.915547][T13831] netlink: 'syz.0.2543': attribute type 9 has an invalid length.
[  552.017202][T13831] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2543'.
[  553.907160][ T5780] Bluetooth: hci3: command tx timeout
[  554.217554][T13837] netlink: 'syz.3.2544': attribute type 10 has an invalid length.
[  554.444272][T13837] team0: Port device geneve1 added
[  554.816203][T13779] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.837762][T13779] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.861944][T13779] bridge_slave_0: entered allmulticast mode
[  554.883652][T13779] bridge_slave_0: entered promiscuous mode
[  554.922497][T13779] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.966237][T13779] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.980470][T13779] bridge_slave_1: entered allmulticast mode
[  554.990354][T13779] bridge_slave_1: entered promiscuous mode
[  555.085791][T13851] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2545'.
[  555.111543][T13851] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  555.494305][T13779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.543607][T13779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.837086][T13779] team0: Port device team_slave_0 added
[  555.859027][T13779] team0: Port device team_slave_1 added
[  555.949931][ T5780] Bluetooth: hci3: command tx timeout
[  556.030488][T13779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  556.065431][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.138729][T13779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  556.250962][T13779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  556.267487][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  556.324807][T13779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  556.438565][T13779] hsr_slave_0: entered promiscuous mode
[  556.456072][T13779] hsr_slave_1: entered promiscuous mode
[  556.466893][T13779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  556.477263][T13779] Cannot create hsr debugfs directory
[  559.352181][T13912] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2553'.
[  559.476578][T13912] team0: Port device team_slave_0 removed
[  559.528101][T13912] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  559.943547][T13922] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2557'.
[  560.085640][T13779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  560.105423][T13779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  560.152472][T13779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  560.176212][T13779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  560.742898][T13779] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.954692][T13779] 8021q: adding VLAN 0 to HW filter on device team0
[  560.995348][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.002599][ T7032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  561.079558][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.086849][ T7032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.579753][ T7035] bond0: (slave ..ãc¤±): Releasing backup interface
[  561.987380][ T7035] hsr_slave_0: left promiscuous mode
[  562.001087][ T7035] hsr_slave_1: left promiscuous mode
[  562.014674][T13960] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.2559'.
[  562.043428][ T7035] veth1_macvtap: left promiscuous mode
[  562.444722][ T5780] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6
[  562.992001][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  563.007960][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  563.103132][ T7035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.168043][ T7035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.417108][ T7035] bond0 (unregistering): Released all slaves
[  563.489514][T13967] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2564'.
[  563.541976][T13779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  563.707808][ T5780] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6
[  563.741131][T13779] veth0_vlan: entered promiscuous mode
[  563.769816][T13779] veth1_vlan: entered promiscuous mode
[  563.923076][T13779] veth0_macvtap: entered promiscuous mode
[  564.004539][T13779] veth1_macvtap: entered promiscuous mode
[  564.091764][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  564.147103][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.164847][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  564.176904][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.188878][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  564.199949][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.223259][T13779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.263384][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  564.297586][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.337744][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  564.367517][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.397583][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  564.434266][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.459939][T13779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  564.507390][T13779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  564.539378][T13779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  564.565172][T13779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  564.600128][T13779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.278745][T14023] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  565.331191][ T7059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.347735][ T7059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.445570][ T5780] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6
[  565.478555][ T7035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.517497][ T7035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.695594][T14035] netlink: 'syz.1.2574': attribute type 9 has an invalid length.
[  565.708322][T14035] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2574'.
[  565.988448][ T5780] Bluetooth: hci4: unexpected event 0x14 length: 15 > 6
[  566.332543][T14046] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2527'.
[  566.444975][T14046] openvswitch: netlink: Flow key attribute not present in set flow.
[  568.126353][T14077] netlink: 'syz.1.2583': attribute type 1 has an invalid length.
[  568.159880][T14077] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.2583'.
[  568.179185][T14081] netlink: 'syz.3.2584': attribute type 10 has an invalid length.
[  568.214577][T14081] veth1_vlan: entered allmulticast mode
[  568.253579][T14081] team0: Device veth1_vlan failed to register rx_handler
[  568.317530][T14077] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2583'.
[  568.952248][T14098] netlink: 'syz.2.2593': attribute type 9 has an invalid length.
[  568.967865][T14102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  569.015414][T14098] netlink: 'syz.2.2593': attribute type 23 has an invalid length.
[  569.023484][T14098] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.2593'.
[  569.214023][T14107] netlink: 'syz.0.2592': attribute type 9 has an invalid length.
[  569.257712][T14107] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2592'.
[  569.793671][T14117] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2598'.
[  569.847061][T14119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  570.041848][T14119] netlink: 'syz.3.2599': attribute type 9 has an invalid length.
[  570.061064][T14119] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2599'.
[  570.482130][T14133] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.489964][T14133] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.503912][T14133] bridge0: entered allmulticast mode
[  571.670692][T14147] netlink: 'syz.1.2609': attribute type 2 has an invalid length.
[  571.721015][T14147] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2609'.
[  572.637603][T14174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  572.840679][T14174] netlink: 'syz.0.2618': attribute type 9 has an invalid length.
[  572.849153][T14174] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2618'.
[  573.122539][T14191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  573.264305][T14195] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2625'.
[  573.503015][T14201] netlink: 'syz.3.2623': attribute type 9 has an invalid length.
[  573.537614][T14201] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2623'.
[  574.192147][T14218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.199735][T14218] IPv6: NLM_F_CREATE should be set when creating new route
[  574.207323][T14218] IPv6: NLM_F_CREATE should be set when creating new route
[  574.214809][T14218] IPv6: NLM_F_CREATE should be set when creating new route
[  574.254366][T14220] netlink: 'syz.2.2632': attribute type 9 has an invalid length.
[  574.272727][T14220] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2632'.
[  575.171400][T14225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2633'.
[  575.627898][T14231] netlink: 'syz.2.2635': attribute type 21 has an invalid length.
[  575.662556][T14232] netlink: set zone limit has 8 unknown bytes
[  575.671973][T14231] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2635'.
[  576.375214][T14243] delete_channel: no stack
[  578.369455][T14303] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2659'.
[  578.403477][T14303] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2659'.
[  579.732937][T14324] netlink: 'syz.0.2668': attribute type 1 has an invalid length.
[  579.781455][T14328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  579.806523][T14324] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2668'.
[  579.835853][T14328] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.988708][T14328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  579.996332][T14328] batman_adv: batadv0: Removing interface: batadv_slave_1
[  580.291445][T14335] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2670'.
[  580.682020][T14344] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2675'.
[  580.749600][T14344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  580.948718][T14353] delete_channel: no stack
[  580.968094][T14353] delete_channel: no stack
[  581.835686][T14380] netlink: 'syz.2.2686': attribute type 2 has an invalid length.
[  581.876313][T14380] netlink: 'syz.2.2686': attribute type 11 has an invalid length.
[  581.896316][T14380] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2686'.
[  582.095025][T14387] netlink: 'syz.3.2688': attribute type 29 has an invalid length.
[  582.131650][T14387] netlink: 'syz.3.2688': attribute type 29 has an invalid length.
[  582.159140][T14390] netlink: 'syz.3.2688': attribute type 29 has an invalid length.
[  582.268442][T14387] netlink: 'syz.3.2688': attribute type 29 has an invalid length.
[  582.410723][T14390] netlink: 'syz.3.2688': attribute type 29 has an invalid length.
[  584.080362][T14432] can: request_module (can-proto-4) failed.
[  585.111633][T14457] netlink: 'syz.0.2710': attribute type 10 has an invalid length.
[  587.751864][T14464] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2712'.
[  588.767164][T14511] netlink: 'syz.1.2724': attribute type 10 has an invalid length.
[  591.121391][T14511] team0: Port device geneve1 added
[  591.188031][T14523] netlink: 'syz.3.2726': attribute type 12 has an invalid length.
[  591.217501][T14523] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2726'.
[  591.227114][T14525] netlink: 'syz.3.2726': attribute type 12 has an invalid length.
[  591.248018][T14525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2726'.
[  591.405517][T14537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  591.491397][T14539] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2728'.
[  591.618227][T14539] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2728'.
[  591.683195][T14539] tipc: Started in network mode
[  591.730441][T14539] tipc: Node identity b, cluster identity 73
[  591.736530][T14539] tipc: Node number set to 11
[  591.928515][T14542] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  591.936367][T14543] netlink: 'syz.3.2730': attribute type 9 has an invalid length.
[  591.947632][T14543] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2730'.
[  592.161014][T14545] netlink: 'syz.0.2731': attribute type 9 has an invalid length.
[  592.195092][T14545] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2731'.
[  592.471941][T14550] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2733'.
[  592.778250][T14558] netlink: 'syz.1.2736': attribute type 10 has an invalid length.
[  594.808501][T14565] macsec0: entered allmulticast mode
[  594.813922][T14565] veth1_macvtap: entered allmulticast mode
[  594.835803][T14569] veth1_macvtap: left allmulticast mode
[  594.857502][T14569] veth1_macvtap: left promiscuous mode
[  594.863200][T14569] macsec0: left allmulticast mode
[  595.311820][T14572] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2740'.
[  595.342878][T14572] hsr_slave_0: left promiscuous mode
[  595.369152][T14572] hsr_slave_1: left promiscuous mode
[  595.759045][T14578] syzkaller0: entered promiscuous mode
[  595.764832][T14578] syzkaller0: entered allmulticast mode
[  596.593526][T14588] netlink: 'syz.2.2746': attribute type 2 has an invalid length.
[  596.602267][T14588] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2746'.
[  597.948301][T14596] netlink: 'syz.2.2750': attribute type 10 has an invalid length.
[  598.059802][T14596] team0: Port device geneve1 added
[  601.312630][T14642] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2761'.
[  601.337847][T14634] netlink: 'syz.3.2762': attribute type 21 has an invalid length.
[  601.346353][T14634] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2762'.
[  601.402014][T14634] virt_wifi0: entered promiscuous mode
[  601.412832][T14634] virt_wifi0: entered allmulticast mode
[  604.234525][T14652] netlink: 'syz.1.2766': attribute type 10 has an invalid length.
[  605.437524][T14661] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2767'.
[  605.461990][T14661] hsr_slave_0: left promiscuous mode
[  605.469680][T14661] hsr_slave_1: left promiscuous mode
[  605.847009][T14673] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2774'.
[  606.339439][T14684] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2777'.
[  609.433340][T14705] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2784'.
[  609.457759][T14705] netlink: 'syz.0.2784': attribute type 2 has an invalid length.
[  609.500934][T14705] netlink: 'syz.0.2784': attribute type 29 has an invalid length.
[  609.550286][T14705] netlink: 'syz.0.2784': attribute type 29 has an invalid length.
[  609.588246][T14707] netlink: 'syz.0.2784': attribute type 29 has an invalid length.
[  609.617931][T14705] netlink: 'syz.0.2784': attribute type 29 has an invalid length.
[  609.903753][T14721] netlink: 'syz.1.2791': attribute type 10 has an invalid length.
[  609.944071][T14719] netlink: 'syz.0.2790': attribute type 1 has an invalid length.
[  609.969012][T14719] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.2790'.
[  610.506382][T14735] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2793'.
[  610.697114][T14734] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2794'.
[  611.149634][ T5785] Bluetooth: hci4: command 0x0406 tx timeout
[  613.399346][T14734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.414722][T14734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.469439][T14734] bond0 (unregistering): Released all slaves
[  613.764732][T14745] netlink: 'syz.0.2796': attribute type 3 has an invalid length.
[  613.810804][T14745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2796'.
[  614.251867][ T5780] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[  615.064863][T14792] netlink: 'syz.0.2813': attribute type 10 has an invalid length.
[  615.407587][ T5780] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  616.359806][T14820] netlink: 'syz.0.2820': attribute type 21 has an invalid length.
[  616.380173][T14820] netlink: 'syz.0.2820': attribute type 10 has an invalid length.
[  616.388856][T14820] netlink: 'syz.0.2820': attribute type 12 has an invalid length.
[  616.402537][T14820] netlink: 'syz.0.2820': attribute type 13 has an invalid length.
[  616.421259][T14820] netlink: 'syz.0.2820': attribute type 14 has an invalid length.
[  616.437785][T14820] netlink: 'syz.0.2820': attribute type 15 has an invalid length.
[  616.448218][T14820] netlink: 'syz.0.2820': attribute type 16 has an invalid length.
[  616.460314][T14820] netlink: 'syz.0.2820': attribute type 19 has an invalid length.
[  616.471047][T14820] netlink: 'syz.0.2820': attribute type 21 has an invalid length.
[  616.479114][T14820] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.2820'.
[  616.516183][T14824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2822'.
[  616.785086][ T5780] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  621.273871][T14907] validate_nla: 2 callbacks suppressed
[  621.273888][T14907] netlink: 'syz.1.2835': attribute type 10 has an invalid length.
[  621.326721][T14908] netlink: 'syz.3.2834': attribute type 9 has an invalid length.
[  621.367510][T14908] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2834'.
[  622.394831][T14919] syzkaller0: tun_chr_ioctl cmd 2147767506
[  622.590344][T14925] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.2842'.
[  622.626511][T14925] bridge: RTM_NEWNEIGH with invalid ether address
[  622.850199][T14932] netlink: 'syz.2.2844': attribute type 9 has an invalid length.
[  622.858684][T14932] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2844'.
[  623.581217][T14936] netlink: 'syz.1.2845': attribute type 10 has an invalid length.
[  624.084516][T14950] netlink: 'syz.2.2850': attribute type 29 has an invalid length.
[  624.419794][T14950] netlink: 'syz.2.2850': attribute type 29 has an invalid length.
[  624.438402][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  624.444845][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  624.478027][T14954] netlink: 'syz.2.2850': attribute type 4 has an invalid length.
[  624.485828][T14954] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2850'.
[  624.533444][T14951] netlink: 'syz.2.2850': attribute type 29 has an invalid length.
[  624.554496][T14952] netlink: 'syz.2.2850': attribute type 29 has an invalid length.
[  624.691385][T14953] netlink: 'syz.2.2850': attribute type 29 has an invalid length.
[  625.035455][T14967] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2854'.
[  625.825701][T14991] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2863'.
[  625.862992][T14991] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2863'.
[  626.504142][T15009] Ÿë
: port 1(hsr_slave_0) entered blocking state
[  626.514231][T15009] Ÿë
: port 1(hsr_slave_0) entered disabled state
[  626.521238][T15009] hsr_slave_0: entered allmulticast mode
[  626.537531][T15009] hsr_slave_0: entered promiscuous mode
[  626.654568][T15016] FAULT_INJECTION: forcing a failure.
[  626.654568][T15016] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  626.672571][T15016] CPU: 0 PID: 15016 Comm: syz.3.2871 Not tainted syzkaller #0
[  626.680088][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  626.690172][T15016] Call Trace:
[  626.693499][T15016]  <TASK>
[  626.696491][T15016]  dump_stack_lvl+0x18c/0x250
[  626.701239][T15016]  ? show_regs_print_info+0x20/0x20
[  626.706488][T15016]  ? load_image+0x420/0x420
[  626.711047][T15016]  ? __might_fault+0xaa/0x120
[  626.715771][T15016]  ? __lock_acquire+0x7d80/0x7d80
[  626.720866][T15016]  should_fail_ex+0x394/0x4c0
[  626.725652][T15016]  _copy_from_user+0x2f/0xe0
[  626.730296][T15016]  sk_setsockopt+0x2b9/0x2b20
[  626.735034][T15016]  ? sockopt_capable+0x60/0x60
[  626.739855][T15016]  ? aa_sk_perm+0x83c/0x970
[  626.744431][T15016]  ? __fget_files+0x28/0x460
[  626.749152][T15016]  ? aa_af_perm+0x330/0x330
[  626.753816][T15016]  ? __fget_files+0x28/0x460
[  626.758449][T15016]  ? aa_sock_opt_perm+0x74/0x100
[  626.763430][T15016]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  626.769022][T15016]  ? security_socket_setsockopt+0x7e/0xa0
[  626.774777][T15016]  do_sock_setsockopt+0x11b/0x1a0
[  626.779842][T15016]  __x64_sys_setsockopt+0x182/0x200
[  626.785096][T15016]  do_syscall_64+0x55/0xb0
[  626.789559][T15016]  ? clear_bhb_loop+0x40/0x90
[  626.794271][T15016]  ? clear_bhb_loop+0x40/0x90
[  626.798992][T15016]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  626.804925][T15016] RIP: 0033:0x7f0226b9e0d9
[  626.809391][T15016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  626.829032][T15016] RSP: 002b:00007f0227b0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  626.837489][T15016] RAX: ffffffffffffffda RBX: 00007f0226e25fa0 RCX: 00007f0226b9e0d9
[  626.845498][T15016] RDX: 0000000000000049 RSI: 0000000000000001 RDI: 0000000000000005
[  626.853589][T15016] RBP: 00007f0227b0d090 R08: 0000000000000004 R09: 0000000000000000
[  626.861595][T15016] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001
[  626.869631][T15016] R13: 00007f0226e26038 R14: 00007f0226e25fa0 R15: 00007ffdd2199d38
[  626.877650][T15016]  </TASK>
[  626.982312][T15023] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2877'.
[  627.019020][T15023] openvswitch: netlink: Message has 20476 unknown bytes.
[  627.110789][ T5780] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  627.573213][T15042] validate_nla: 3 callbacks suppressed
[  627.573224][T15042] netlink: 'syz.1.2880': attribute type 10 has an invalid length.
[  628.135000][T15051] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2881'.
[  628.166644][T15050] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2881'.
[  629.408966][T15056] FAULT_INJECTION: forcing a failure.
[  629.408966][T15056] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  629.431183][T15056] CPU: 1 PID: 15056 Comm: syz.1.2883 Not tainted syzkaller #0
[  629.438819][T15056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  629.448926][T15056] Call Trace:
[  629.452330][T15056]  <TASK>
[  629.455305][T15056]  dump_stack_lvl+0x18c/0x250
[  629.460048][T15056]  ? show_regs_print_info+0x20/0x20
[  629.465293][T15056]  ? load_image+0x420/0x420
[  629.469964][T15056]  ? __lock_acquire+0x7d80/0x7d80
[  629.475065][T15056]  ? snprintf+0xe9/0x140
[  629.479369][T15056]  should_fail_ex+0x394/0x4c0
[  629.484078][T15056]  _copy_to_user+0x2f/0xa0
[  629.488530][T15056]  simple_read_from_buffer+0xe7/0x150
[  629.493951][T15056]  proc_fail_nth_read+0x1e8/0x260
[  629.499032][T15056]  ? proc_fault_inject_write+0x360/0x360
[  629.504694][T15056]  ? fsnotify_perm+0x271/0x5e0
[  629.509506][T15056]  ? proc_fault_inject_write+0x360/0x360
[  629.515177][T15056]  vfs_read+0x298/0x990
[  629.519399][T15056]  ? kernel_read+0x1e0/0x1e0
[  629.524020][T15056]  ? __fget_files+0x28/0x460
[  629.528655][T15056]  ? __fget_files+0x3fc/0x460
[  629.533409][T15056]  ? __fdget_pos+0x2a3/0x330
[  629.538080][T15056]  ? ksys_read+0x74/0x260
[  629.542478][T15056]  ksys_read+0x151/0x260
[  629.546794][T15056]  ? vfs_write+0x9a0/0x9a0
[  629.551269][T15056]  ? lockdep_hardirqs_on+0x98/0x150
[  629.556540][T15056]  do_syscall_64+0x55/0xb0
[  629.561002][T15056]  ? clear_bhb_loop+0x40/0x90
[  629.565705][T15056]  ? clear_bhb_loop+0x40/0x90
[  629.570418][T15056]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  629.576349][T15056] RIP: 0033:0x7fba1895e90e
[  629.580791][T15056] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  629.600424][T15056] RSP: 002b:00007fba198b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  629.608868][T15056] RAX: ffffffffffffffda RBX: 00007fba198b66c0 RCX: 00007fba1895e90e
[  629.616882][T15056] RDX: 000000000000000f RSI: 00007fba198b60a0 RDI: 0000000000000007
[  629.624882][T15056] RBP: 00007fba198b6090 R08: 0000000000000000 R09: 0000000000000000
[  629.632882][T15056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  629.640875][T15056] R13: 00007fba18c26038 R14: 00007fba18c25fa0 R15: 00007ffc435b9148
[  629.648903][T15056]  </TASK>
[  629.833723][T15066] netlink: 'syz.0.2886': attribute type 21 has an invalid length.
[  629.857190][T15066] netlink: 'syz.0.2886': attribute type 1 has an invalid length.
[  629.885717][T15066] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2886'.
[  631.734878][T15081] netlink: 'syz.2.2891': attribute type 10 has an invalid length.
[  633.062246][T15114] netlink: 'syz.3.2900': attribute type 10 has an invalid length.
[  633.073912][T15114] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2900'.
[  633.205529][T15120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  633.296915][ T5780] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  633.403333][T15123] netlink: 'syz.3.2902': attribute type 9 has an invalid length.
[  633.420200][T15123] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2902'.
[  633.463406][T15125] netlink: 'syz.1.2905': attribute type 10 has an invalid length.
[  633.920682][T15131] netlink: 'syz.0.2906': attribute type 10 has an invalid length.
[  634.664029][T15131] team0: Device wg1 is of different type
[  635.097176][T15145] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2911'.
[  635.251737][ T5780] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  635.444682][T15157] netlink: 'syz.0.2916': attribute type 10 has an invalid length.
[  636.253861][T15166] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2919'.
[  636.627930][ T5780] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  637.165536][T15202] netlink: 208052 bytes leftover after parsing attributes in process `syz.0.2928'.
[  637.204755][T15202] netlink: 'syz.0.2928': attribute type 1 has an invalid length.
[  637.224020][T15202] netlink: 'syz.0.2928': attribute type 2 has an invalid length.
[  637.238142][T15202] netlink: 'syz.0.2928': attribute type 3 has an invalid length.
[  637.246045][T15202] netlink: 'syz.0.2928': attribute type 4 has an invalid length.
[  637.348061][T15205] netlink: 'syz.3.2930': attribute type 10 has an invalid length.
[  638.739691][T15228] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  638.946911][T15235] netlink: 'syz.1.2939': attribute type 9 has an invalid length.
[  638.988967][T15235] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2939'.
[  639.872988][T15249] netlink: 'syz.0.2946': attribute type 10 has an invalid length.
[  641.867665][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  642.241853][T15264] sctp: [Deprecated]: syz.0.2951 (pid 15264) Use of struct sctp_assoc_value in delayed_ack socket option.
[  642.241853][T15264] Use struct sctp_sack_info instead
[  642.698172][T15278] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  642.965090][T15284] netlink: 'syz.0.2957': attribute type 9 has an invalid length.
[  642.992235][T15284] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2957'.
[  643.700680][T15291] netlink: 'syz.2.2960': attribute type 10 has an invalid length.
[  645.329805][T15325] netlink: 'syz.2.2971': attribute type 10 has an invalid length.
[  645.350346][T15320] delete_channel: no stack
[  645.390108][T15326] netlink: 208052 bytes leftover after parsing attributes in process `syz.1.2970'.
[  645.425045][T15326] netlink: 'syz.1.2970': attribute type 1 has an invalid length.
[  645.436251][T15326] netlink: 'syz.1.2970': attribute type 2 has an invalid length.
[  645.444279][T15326] netlink: 'syz.1.2970': attribute type 3 has an invalid length.
[  645.452210][T15326] netlink: 'syz.1.2970': attribute type 4 has an invalid length.
[  645.680464][T15333] netlink: 'syz.0.2974': attribute type 21 has an invalid length.
[  645.693243][T15333] netlink: 'syz.0.2974': attribute type 13 has an invalid length.
[  645.703405][T15333] netlink: 6188 bytes leftover after parsing attributes in process `syz.0.2974'.
[  647.606213][T15359] netlink: 'syz.2.2981': attribute type 39 has an invalid length.
[  647.795963][T15369] netlink: 'syz.3.2986': attribute type 9 has an invalid length.
[  647.805415][T15369] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2986'.
[  647.866010][T15359] hsr_slave_1 (unregistering): left promiscuous mode
[  647.996905][T15376] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2987'.
[  648.006967][T15376] openvswitch: netlink: Flow actions attr not present in new flow.
[  648.317539][T15367] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  648.325031][T15367] batman_adv: batadv0: Removing interface: batadv_slave_0
[  648.333641][T15367] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  648.341179][T15367] batman_adv: batadv0: Removing interface: batadv_slave_1
[  648.581909][T15371] netlink: 'syz.3.2986': attribute type 9 has an invalid length.
[  648.590490][T15371] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2986'.
[  649.146270][T15397] syzkaller0: entered promiscuous mode
[  649.157141][T15397] syzkaller0: entered allmulticast mode
[  649.178821][T15399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  649.376421][T15399] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2996'.
[  650.840732][T15411] validate_nla: 1 callbacks suppressed
[  650.840744][T15411] netlink: 'syz.3.2999': attribute type 10 has an invalid length.
[  650.859905][T15411] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2999'.
[  650.869045][T15411] team0: entered promiscuous mode
[  650.874102][T15411] team_slave_0: entered promiscuous mode
[  650.885001][T15411] team_slave_1: entered promiscuous mode
[  650.891337][T15411] geneve1: entered promiscuous mode
[  650.897183][T15411] team0: entered allmulticast mode
[  650.902532][T15411] team_slave_0: entered allmulticast mode
[  650.908748][T15411] team_slave_1: entered allmulticast mode
[  650.915257][T15411] geneve1: entered allmulticast mode
[  650.921483][T15411] bridge0: port 3(team0) entered blocking state
[  650.937610][T15411] bridge0: port 3(team0) entered disabled state
[  650.946468][T15411] bridge0: port 3(team0) entered blocking state
[  650.952915][T15411] bridge0: port 3(team0) entered forwarding state
[  651.084234][ T5780] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5
[  651.200264][T15418] veth1_macvtap: left promiscuous mode
[  651.213121][T15418] macsec0: entered allmulticast mode
[  651.428576][T15430] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3007'.
[  651.493496][T15434] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3009'.
[  651.504826][T15434] netlink: del zone limit has 4 unknown bytes
[  651.985234][ T5780] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5
[  652.110573][T15462] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3019'.
[  652.381343][T15469] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  652.582720][T15469] netlink: 'syz.1.3022': attribute type 9 has an invalid length.
[  652.630758][T15469] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3022'.
[  652.922651][ T5780] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  653.375981][T15496] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3029'.
[  653.421155][T15496] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3029'.
[  653.605674][T15504] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3031'.
[  654.392396][T15517] syzkaller0: entered promiscuous mode
[  654.398190][T15517] syzkaller0: entered allmulticast mode
[  654.472347][ T5780] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  654.539051][T15528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  654.741832][T15535] netlink: 'syz.1.3038': attribute type 9 has an invalid length.
[  654.762344][T15535] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3038'.
[  656.431596][T15534] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3041'.
[  656.483073][T15540] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3043'.
[  657.110877][ T5780] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  657.227833][ T5780] Bluetooth: hci0: command 0x0406 tx timeout
[  657.641669][T15569] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3053'.
[  657.912785][T15571] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3054'.
[  658.487760][ T5780] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  658.496534][T15582] netlink: 'syz.3.3058': attribute type 10 has an invalid length.
[  658.517064][T15580] netlink: 'syz.2.3057': attribute type 10 has an invalid length.
[  658.531703][T15580] bridge0: left allmulticast mode
[  658.555092][T15580] bridge0: port 2(bridge_slave_1) entered blocking state
[  658.562871][T15580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  658.571849][T15580] bridge0: port 1(bridge_slave_0) entered blocking state
[  658.579769][T15580] bridge0: port 1(bridge_slave_0) entered forwarding state
[  658.633285][T15580] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  659.186460][T15592] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3061'.
[  659.269405][T15592] openvswitch: netlink: Duplicate key (type 0).
[  659.400168][T15588] cgroup: fork rejected by pids controller in /syz0
[  659.891425][T15702] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3063'.
[  660.193591][ T5780] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  660.334981][T15715] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3069'.
[  660.430704][ T7029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.560479][T15718] netlink: 'syz.3.3070': attribute type 21 has an invalid length.
[  660.660712][ T7029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.782008][ T7029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.916144][ T7029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  660.957800][T15725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  661.065735][T15730] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3075'.
[  661.170533][T15725] netlink: 'syz.3.3074': attribute type 9 has an invalid length.
[  661.213868][T15725] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3074'.
[  661.364338][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  661.372457][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  661.383351][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  661.393139][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  661.403064][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  661.410847][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  663.467555][ T5785] Bluetooth: hci1: command tx timeout
[  664.007655][ T5785] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  664.137698][T15746] mac80211_hwsim hwsim72 wlan1: entered promiscuous mode
[  664.154765][T15746] mac80211_hwsim hwsim72 wlan1: entered allmulticast mode
[  664.873201][T15756] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3080'.
[  664.930628][T15751] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3080'.
[  665.415154][T15773] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3082'.
[  665.509088][T15773] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3082'.
[  665.535236][T15777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3083'.
[  665.547601][ T5785] Bluetooth: hci1: command tx timeout
[  665.626282][T15734] chnl_net:caif_netlink_parms(): no params data found
[  665.691518][T15777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  665.698932][T15777] IPv6: NLM_F_CREATE should be set when creating new route
[  665.758909][T15777] tun0: tun_chr_ioctl cmd 1074025677
[  665.765289][T15777] tun0: linktype set to 512
[  665.822951][T15785] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3084'.
[  665.898356][T15734] bridge0: port 1(bridge_slave_0) entered blocking state
[  665.905588][T15734] bridge0: port 1(bridge_slave_0) entered disabled state
[  665.919595][T15734] bridge_slave_0: entered allmulticast mode
[  665.943350][T15734] bridge_slave_0: entered promiscuous mode
[  665.968843][T15734] bridge0: port 2(bridge_slave_1) entered blocking state
[  665.976030][T15734] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.012442][T15734] bridge_slave_1: entered allmulticast mode
[  666.041380][T15734] bridge_slave_1: entered promiscuous mode
[  666.148697][T15793] netlink: 'syz.3.3085': attribute type 21 has an invalid length.
[  666.156644][T15793] IPv6: NLM_F_CREATE should be specified when creating new route
[  666.177855][T15793] IPv6: Can't replace route, no match found
[  666.194188][T15734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  666.291553][T15734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  666.462748][T15734] team0: Port device team_slave_0 added
[  666.484981][T15734] team0: Port device team_slave_1 added
[  666.607283][T15734] batman_adv: batadv0: Adding interface: batadv_slave_0
[  666.621788][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.670830][T15734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  666.767635][T15734] batman_adv: batadv0: Adding interface: batadv_slave_1
[  666.774939][T15734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  666.847489][T15734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.091542][T15836] netlink: 'syz.3.3094': attribute type 9 has an invalid length.
[  667.132198][T15836] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3094'.
[  667.177244][T15734] hsr_slave_0: entered promiscuous mode
[  667.206489][T15734] hsr_slave_1: entered promiscuous mode
[  667.226603][T15734] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  667.236737][T15734] Cannot create hsr debugfs directory
[  667.627878][ T5785] Bluetooth: hci1: command tx timeout
[  668.023080][T15846] netlink: 'syz.1.3096': attribute type 10 has an invalid length.
[  668.059211][T15846] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3096'.
[  668.642343][T15867] netlink: 40427 bytes leftover after parsing attributes in process `syz.1.3099'.
[  668.809874][T15873] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3101'.
[  668.925053][T15876] bond0: (slave bond_slave_0): Releasing backup interface
[  668.965826][T15876] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  669.022151][T15734] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  669.073605][ T7029] hsr_slave_0: left promiscuous mode
[  669.081446][ T7029] hsr_slave_1: left promiscuous mode
[  669.088680][ T7029] bridge0: port 1(dummy0) entered disabled state
[  669.097143][ T7029] bridge_slave_1: left allmulticast mode
[  669.106672][ T7029] bridge_slave_1: left promiscuous mode
[  669.113051][ T7029] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.141798][ T7029] veth0_macvtap: left promiscuous mode
[  669.147677][ T7029] veth1_vlan: left promiscuous mode
[  669.153205][ T7029] veth0_vlan: left promiscuous mode
[  669.380117][ T7029] team0 (unregistering): Port device geneve1 removed
[  669.513685][ T7029] team0 (unregistering): Port device macvlan0 removed
[  669.707732][ T5785] Bluetooth: hci1: command tx timeout
[  669.809592][ T7029] team0 (unregistering): Port device team_slave_1 removed
[  670.227181][T15734] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  670.246707][T15734] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  670.270856][T15879] __nla_validate_parse: 2 callbacks suppressed
[  670.270870][T15879] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3103'.
[  670.318495][T15734] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  670.666034][T15734] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.763379][T15734] 8021q: adding VLAN 0 to HW filter on device team0
[  670.829031][T15912] netlink: 'syz.2.3111': attribute type 21 has an invalid length.
[  670.859739][ T5780] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  670.861256][T15912] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3111'.
[  670.938606][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3111'.
[  670.967470][T14872] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.974678][T14872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  671.003225][T15908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3109'.
[  671.038390][T14872] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.045564][T14872] bridge0: port 2(bridge_slave_1) entered forwarding state
[  671.139501][T15908] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3109'.
[  671.343748][T15925] netlink: 'syz.3.3112': attribute type 39 has an invalid length.
[  671.735832][T15734] 8021q: adding VLAN 0 to HW filter on device batadv0
[  672.398571][T15734] veth0_vlan: entered promiscuous mode
[  672.462903][T15734] veth1_vlan: entered promiscuous mode
[  672.587561][ T5780] Bluetooth: hci3: command 0x0406 tx timeout
[  672.876969][T15734] veth0_macvtap: entered promiscuous mode
[  672.972194][T15734] veth1_macvtap: entered promiscuous mode
[  673.012518][T15967] netlink: 'syz.3.3118': attribute type 9 has an invalid length.
[  673.054252][T15734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.072485][T15734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.085099][T15734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  673.097943][T15967] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3118'.
[  673.112332][T15734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.134314][T15734] batman_adv: batadv0: Interface activated: batadv_slave_0
[  673.170058][T15734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.188470][T15734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.208549][T15734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  673.226427][T15734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  673.272616][T15734] batman_adv: batadv0: Interface activated: batadv_slave_1
[  673.405565][T15972] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3120'.
[  673.441072][T15734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  673.457404][T15734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  673.466492][T15734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  673.497456][T15734] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  673.844846][ T7035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.882406][ T7035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.953285][ T7029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.971449][ T7029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  675.004806][T16019] netlink: 'syz.1.3128': attribute type 30 has an invalid length.
[  675.606101][T16032] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3131'.
[  676.168089][T16047] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3135'.
[  676.610193][T16057] syzkaller0: entered promiscuous mode
[  676.616648][T16057] syzkaller0: entered allmulticast mode
[  676.699419][T16063] netlink: 'syz.1.3137': attribute type 9 has an invalid length.
[  676.820836][T16063] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3137'.
[  682.642633][T16123] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3157'.
[  683.358652][T16155] netlink: 'syz.0.3169': attribute type 13 has an invalid length.
[  683.375460][T16155] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.3169'.
[  683.844939][T16171] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3174'.
[  684.014739][T16177] netlink: 'syz.2.3176': attribute type 10 has an invalid length.
[  685.147012][T16193] netlink: 'syz.1.3181': attribute type 16 has an invalid length.
[  685.161606][T16193] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3181'.
[  685.464497][T16208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  685.471822][T16208] IPv6: NLM_F_CREATE should be set when creating new route
[  685.479183][T16208] IPv6: NLM_F_CREATE should be set when creating new route
[  685.486445][T16208] IPv6: NLM_F_CREATE should be set when creating new route
[  685.682340][T16215] netlink: 'syz.0.3186': attribute type 9 has an invalid length.
[  685.719556][T16215] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3186'.
[  685.799364][T16217] Ù: renamed from bond_slave_1 (while UP)
[  685.814019][T16222] netlink: 'syz.2.3191': attribute type 10 has an invalid length.
[  685.878924][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  685.885406][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  687.063700][T16243] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.3197'.
[  687.086695][T16243] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8
[  687.131678][T16247] netlink: 'syz.1.3200': attribute type 10 has an invalid length.
[  687.148904][T16247] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3200'.
[  687.274693][T16254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  687.419012][T16257] netlink: 'syz.0.3202': attribute type 9 has an invalid length.
[  687.426820][T16257] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3202'.
[  687.465109][T16260] netlink: 'syz.3.3204': attribute type 10 has an invalid length.
[  688.424170][T16266] netlink: 'syz.3.3206': attribute type 10 has an invalid length.
[  689.174086][T16288] netlink: 'syz.0.3214': attribute type 10 has an invalid length.
[  689.270502][T16288] team0: Port device geneve1 added
[  689.293522][T16292] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3216'.
[  690.052806][T16311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  690.181803][T16316] netlink: 'syz.2.3222': attribute type 9 has an invalid length.
[  690.207467][T16316] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3222'.
[  690.402970][T16323] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3227'.
[  690.861447][T16334] syzkaller0: entered promiscuous mode
[  690.880899][T16334] syzkaller0: entered allmulticast mode
[  690.917397][ T5785] Bluetooth: hci1: unexpected event 0x1d length: 15 > 5
[  691.079204][T16344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  691.143378][T16347] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3237'.
[  691.390737][T16352] netlink: 'syz.3.3236': attribute type 9 has an invalid length.
[  691.429050][T16352] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3236'.
[  693.161148][T16354] netlink: 'syz.0.3238': attribute type 10 has an invalid length.
[  693.169267][T16354] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3238'.
[  693.178772][T16354] hsr0: entered promiscuous mode
[  693.184009][T16354] bridge0: port 3(hsr0) entered blocking state
[  693.192054][T16354] bridge0: port 3(hsr0) entered disabled state
[  693.198515][T16354] hsr0: entered allmulticast mode
[  693.204562][T16354] hsr_slave_0: entered allmulticast mode
[  693.212275][T16354] hsr_slave_1: entered allmulticast mode
[  693.223293][T16354] bridge0: port 3(hsr0) entered blocking state
[  693.229621][T16354] bridge0: port 3(hsr0) entered forwarding state
[  694.043055][T16378] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3246'.
[  694.101162][T16382] bridge0: port 4(ip6gretap0) entered blocking state
[  694.111015][T16382] bridge0: port 4(ip6gretap0) entered disabled state
[  694.118298][T16382] ip6gretap0: entered allmulticast mode
[  694.126443][T16382] ip6gretap0: entered promiscuous mode
[  694.133422][T16382] bridge0: port 4(ip6gretap0) entered blocking state
[  694.140306][T16382] bridge0: port 4(ip6gretap0) entered forwarding state
[  694.185761][T16380] syzkaller0: entered promiscuous mode
[  694.195541][T16380] syzkaller0: entered allmulticast mode
[  694.247584][T16383] ip6gretap0: left allmulticast mode
[  694.252951][T16383] ip6gretap0: left promiscuous mode
[  694.276445][T16383] bridge0: port 4(ip6gretap0) entered disabled state
[  696.097552][T16392] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3252'.
[  696.111419][T16392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  696.151157][T16404] Ù: renamed from bond_slave_1 (while UP)
[  696.294224][T16411] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3257'.
[  697.304479][T16445] tc_dump_action: action bad kind
[  697.327198][T16445] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3265'.
[  697.476327][T16452] netlink: 'syz.3.3267': attribute type 21 has an invalid length.
[  697.503233][T16452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3267'.
[  697.859327][T16464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  698.070448][T16470] netlink: 'syz.3.3273': attribute type 9 has an invalid length.
[  698.136142][T16470] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3273'.
[  700.728413][T16542] netlink: 'syz.0.3297': attribute type 4 has an invalid length.
[  701.683603][T16560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  701.841572][T16565] netlink: 'syz.3.3306': attribute type 9 has an invalid length.
[  701.894133][T16565] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3306'.
[  701.919179][T16569] netlink: 'syz.2.3309': attribute type 40 has an invalid length.
[  702.956352][T16582] netlink: 'syz.2.3314': attribute type 4 has an invalid length.
[  704.033600][T16592] netlink: 'syz.1.3317': attribute type 16 has an invalid length.
[  704.041811][T16592] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3317'.
[  704.055897][T16592] veth1_macvtap: entered allmulticast mode
[  705.961574][T16599] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3319'.
[  705.974868][T16602] netlink: 'syz.1.3319': attribute type 39 has an invalid length.
[  706.350159][T16611] netlink: 'syz.1.3324': attribute type 29 has an invalid length.
[  706.588945][T16617] netlink: 'syz.1.3325': attribute type 4 has an invalid length.
[  707.035682][T16639] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3332'.
[  707.061646][T16640] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3332'.
[  707.227586][T16648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  707.392528][T16654] netlink: 'syz.1.3336': attribute type 9 has an invalid length.
[  707.431765][T16654] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3336'.
[  707.715881][T16657] netlink: 'syz.2.3340': attribute type 9 has an invalid length.
[  707.737508][T16657] netlink: 'syz.2.3340': attribute type 23 has an invalid length.
[  707.746540][T16657] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.3340'.
[  707.877059][T16667] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3344'.
[  707.927261][T16667] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  708.080437][T16671] netlink: 'syz.0.3345': attribute type 1 has an invalid length.
[  708.118319][T16671] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3345'.
[  709.080629][T16696] netlink: 'syz.2.3354': attribute type 13 has an invalid length.
[  709.095754][T16696] netlink: 'syz.2.3354': attribute type 58 has an invalid length.
[  709.112285][T16696] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3354'.
[  709.287441][T16696] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3354'.
[  709.330907][T16696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  709.437184][T16699] tap0: tun_chr_ioctl cmd 1074025677
[  709.460660][T16699] tap0: linktype set to 804
[  709.508770][T16701] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  709.604875][T16707] netlink: 'syz.1.3356': attribute type 9 has an invalid length.
[  709.616749][T16707] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3356'.
[  710.327195][T16729] netlink: 'syz.2.3362': attribute type 1 has an invalid length.
[  710.387561][T16729] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3362'.
[  711.983852][T16754] netlink: 'syz.1.3372': attribute type 10 has an invalid length.
[  712.152340][T16754] team0 (unregistering): Port device team_slave_1 removed
[  712.179106][T16754] team0 (unregistering): Port device geneve1 removed
[  712.249349][T16759] netlink: 'syz.3.3373': attribute type 9 has an invalid length.
[  712.265140][T16757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  712.269080][T16759] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3373'.
[  713.663885][T16786] IPv6: NLM_F_CREATE should be specified when creating new route
[  713.686741][T16786] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3382'.
[  713.895887][T16795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  714.014805][T16796] netlink: 'syz.1.3385': attribute type 9 has an invalid length.
[  714.063680][T16796] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3385'.
[  714.936962][T16819] syz.1.3392[16819] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  714.937087][T16819] syz.1.3392[16819] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  714.953616][T16817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3393'.
[  715.371459][T16823] IPv6: NLM_F_CREATE should be specified when creating new route
[  715.407183][T16823] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3395'.
[  715.747258][T16837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  715.895520][T16842] netlink: 'syz.2.3401': attribute type 9 has an invalid length.
[  715.906911][T16842] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3401'.
[  715.990876][T16844] netlink: 'syz.1.3404': attribute type 13 has an invalid length.
[  716.015487][T16844] netlink: 'syz.1.3404': attribute type 29 has an invalid length.
[  716.059147][T16844] netlink: 'syz.1.3404': attribute type 29 has an invalid length.
[  716.220922][T16851] netlink: 'syz.1.3407': attribute type 10 has an invalid length.
[  716.879519][T16870] IPv6: NLM_F_CREATE should be specified when creating new route
[  716.896673][T16870] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3413'.
[  717.281732][T16878] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3416'.
[  717.498369][T16882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  717.661107][T16890] netlink: 'syz.2.3418': attribute type 9 has an invalid length.
[  717.687522][T16890] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3418'.
[  724.978381][T16906] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3428'.
[  724.981889][T16905] FAULT_INJECTION: forcing a failure.
[  724.981889][T16905] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  725.012875][T16906] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3428'.
[  725.022761][T16905] CPU: 0 PID: 16905 Comm: syz.2.3427 Not tainted syzkaller #0
[  725.030261][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  725.040342][T16905] Call Trace:
[  725.043648][T16905]  <TASK>
[  725.046612][T16905]  dump_stack_lvl+0x18c/0x250
[  725.051349][T16905]  ? show_regs_print_info+0x20/0x20
[  725.056589][T16905]  ? load_image+0x420/0x420
[  725.061156][T16905]  ? __might_fault+0xaa/0x120
[  725.065893][T16905]  ? __lock_acquire+0x7d80/0x7d80
[  725.070984][T16905]  should_fail_ex+0x394/0x4c0
[  725.075709][T16905]  _copy_from_user+0x2f/0xe0
[  725.080337][T16905]  ___sys_sendmsg+0x1c7/0x360
[  725.085053][T16905]  ? __sys_sendmsg+0x2b0/0x2b0
[  725.089870][T16905]  ? ktime_get+0x7f/0x280
[  725.094248][T16905]  __se_sys_sendmsg+0x1d0/0x2c0
[  725.099126][T16905]  ? perf_trace_preemptirq_template+0x269/0x330
[  725.105403][T16905]  ? __x64_sys_sendmsg+0x80/0x80
[  725.110410][T16905]  ? lockdep_hardirqs_on+0x98/0x150
[  725.115675][T16905]  do_syscall_64+0x55/0xb0
[  725.120143][T16905]  ? clear_bhb_loop+0x40/0x90
[  725.124851][T16905]  ? clear_bhb_loop+0x40/0x90
[  725.127792][T16906] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3428'.
[  725.129551][T16905]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  725.129577][T16905] RIP: 0033:0x7fae14b9e0d9
[  725.149020][T16905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  725.168651][T16905] RSP: 002b:00007fae15af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  725.177131][T16905] RAX: ffffffffffffffda RBX: 00007fae14e25fa0 RCX: 00007fae14b9e0d9
[  725.185152][T16905] RDX: 0000000000004000 RSI: 0000200000001a40 RDI: 0000000000000006
[  725.193165][T16905] RBP: 00007fae15af8090 R08: 0000000000000000 R09: 0000000000000000
[  725.201187][T16905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.209194][T16905] R13: 00007fae14e26038 R14: 00007fae14e25fa0 R15: 00007fffc2626b78
[  725.217220][T16905]  </TASK>
[  725.257720][T16909] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3428'.
[  725.672854][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  725.681364][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  725.696565][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  725.722458][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  725.730204][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  725.738101][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  725.828962][T16923] netlink: 'syz.2.3433': attribute type 10 has an invalid length.
[  725.848986][T16919] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3432'.
[  726.171119][T16920] chnl_net:caif_netlink_parms(): no params data found
[  726.331192][T16947] FAULT_INJECTION: forcing a failure.
[  726.331192][T16947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  726.351289][T16947] CPU: 0 PID: 16947 Comm: syz.2.3439 Not tainted syzkaller #0
[  726.358831][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  726.368958][T16947] Call Trace:
[  726.372270][T16947]  <TASK>
[  726.375229][T16947]  dump_stack_lvl+0x18c/0x250
[  726.379960][T16947]  ? show_regs_print_info+0x20/0x20
[  726.385235][T16947]  ? load_image+0x420/0x420
[  726.389826][T16947]  ? __lock_acquire+0x7d80/0x7d80
[  726.394908][T16947]  should_fail_ex+0x394/0x4c0
[  726.399630][T16947]  _copy_from_user+0x2f/0xe0
[  726.404258][T16947]  __copy_msghdr+0x388/0x560
[  726.408877][T16947]  ___sys_sendmsg+0x214/0x360
[  726.413577][T16947]  ? __sys_sendmsg+0x2b0/0x2b0
[  726.418380][T16947]  __se_sys_sendmsg+0x1d0/0x2c0
[  726.423246][T16947]  ? __x64_sys_sendmsg+0x80/0x80
[  726.428222][T16947]  ? syscall_enter_from_user_mode+0x2e/0x80
[  726.434143][T16947]  do_syscall_64+0x55/0xb0
[  726.438580][T16947]  ? clear_bhb_loop+0x40/0x90
[  726.443272][T16947]  ? clear_bhb_loop+0x40/0x90
[  726.447958][T16947]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  726.453864][T16947] RIP: 0033:0x7fae14b9e0d9
[  726.458291][T16947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  726.477920][T16947] RSP: 002b:00007fae15af8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  726.486360][T16947] RAX: ffffffffffffffda RBX: 00007fae14e25fa0 RCX: 00007fae14b9e0d9
[  726.494379][T16947] RDX: 0000000000004000 RSI: 0000200000001a40 RDI: 0000000000000006
[  726.502408][T16947] RBP: 00007fae15af8090 R08: 0000000000000000 R09: 0000000000000000
[  726.510407][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  726.518402][T16947] R13: 00007fae14e26038 R14: 00007fae14e25fa0 R15: 00007fffc2626b78
[  726.526425][T16947]  </TASK>
[  726.561425][T16920] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.575282][T16920] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.585060][T16920] bridge_slave_0: entered allmulticast mode
[  726.598017][T16920] bridge_slave_0: entered promiscuous mode
[  726.607088][T16920] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.614783][T16920] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.622048][T16920] bridge_slave_1: entered allmulticast mode
[  726.629534][T16920] bridge_slave_1: entered promiscuous mode
[  726.665657][T16920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  726.677990][T16920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.723316][T16920] team0: Port device team_slave_0 added
[  726.732635][T16920] team0: Port device team_slave_1 added
[  726.780184][T16920] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.788212][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.821185][T16920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  726.843279][T16920] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.850537][T16920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.897463][T16920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  726.939470][T16954] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3442'.
[  727.069133][T16920] hsr_slave_0: entered promiscuous mode
[  727.079408][T16920] hsr_slave_1: entered promiscuous mode
[  727.480418][T16970] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  727.488836][T16972] netlink: 'syz.3.3449': attribute type 10 has an invalid length.
[  727.496854][T16920] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  727.522399][T16920] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  727.532498][T16970] netlink: 'syz.1.3448': attribute type 9 has an invalid length.
[  727.556729][T16970] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3448'.
[  727.575597][T16920] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  727.797634][ T5785] Bluetooth: hci4: command tx timeout
[  728.480715][T16920] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  728.567999][T16975] netlink: 'syz.1.3448': attribute type 9 has an invalid length.
[  728.575927][T16975] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3448'.
[  728.606423][T16984] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3452'.
[  728.650670][T16987] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  728.851712][T16995] netlink: 'syz.1.3456': attribute type 3 has an invalid length.
[  728.864630][T16995] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3456'.
[  728.912665][T16920] 8021q: adding VLAN 0 to HW filter on device bond0
[  728.969616][T16920] 8021q: adding VLAN 0 to HW filter on device team0
[  728.991295][ T7049] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.998713][ T7049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.049625][ T7049] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.056962][ T7049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  729.095912][T17001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  729.140039][T17002] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  729.221350][T16920] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  729.259761][T17003] netlink: 'syz.1.3458': attribute type 9 has an invalid length.
[  729.424563][T17007] netlink: 'syz.2.3460': attribute type 10 has an invalid length.
[  729.502845][T17005] netlink: 'syz.3.3459': attribute type 9 has an invalid length.
[  729.868374][ T5785] Bluetooth: hci4: command tx timeout
[  730.261859][T16920] 8021q: adding VLAN 0 to HW filter on device batadv0
[  730.746465][T17021] __nla_validate_parse: 2 callbacks suppressed
[  730.746486][T17021] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3461'.
[  730.806731][T16920] veth0_vlan: entered promiscuous mode
[  730.854557][T16920] veth1_vlan: entered promiscuous mode
[  730.893558][T16920] veth0_macvtap: entered promiscuous mode
[  730.906455][T16920] veth1_macvtap: entered promiscuous mode
[  730.970821][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  730.982561][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.993944][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  731.006622][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.016972][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  731.034961][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.047143][T16920] batman_adv: batadv0: Interface activated: batadv_slave_0
[  731.099398][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.111330][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.122755][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.133625][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.143660][T16920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  731.155715][T16920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  731.178851][T16920] batman_adv: batadv0: Interface activated: batadv_slave_1
[  731.250050][T16920] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  731.259520][T16920] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  731.270751][T16920] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  731.279946][T16920] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  731.550733][ T7029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.581915][ T7029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.648457][ T7032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.663184][ T7032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.938727][T17036] netlink: 'syz.2.3468': attribute type 10 has an invalid length.
[  731.948359][ T5785] Bluetooth: hci4: command tx timeout
[  732.096027][T17038] IPv6: NLM_F_CREATE should be specified when creating new route
[  732.130529][T17038] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3425'.
[  732.821091][T17048] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3469'.
[  733.350065][ T5785] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  733.361604][T17056] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3473'.
[  733.470737][T17058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  733.613077][T17066] netlink: 'syz.2.3474': attribute type 9 has an invalid length.
[  733.668643][T17066] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3474'.
[  733.877838][T17072] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3479'.
[  733.903157][T17072] hsr_slave_0: left promiscuous mode
[  733.930447][T17072] hsr_slave_1: left promiscuous mode
[  734.037742][ T5785] Bluetooth: hci4: command tx timeout
[  734.350427][ T5785] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  734.476881][T17092] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3486'.
[  734.495860][ T5785] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  734.497857][T17092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  734.571451][T17090] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3485'.
[  734.948585][T17108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  735.163764][T17117] netlink: 'syz.1.3492': attribute type 9 has an invalid length.
[  735.204879][T17117] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3492'.
[  735.771860][T17134] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  735.922750][T17138] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3503'.
[  736.049562][T17139] netlink: 'syz.1.3501': attribute type 9 has an invalid length.
[  736.115073][T17139] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3501'.
[  736.880073][T17155] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  736.887662][T17155] IPv6: NLM_F_CREATE should be set when creating new route
[  736.895227][T17155] IPv6: NLM_F_CREATE should be set when creating new route
[  736.902856][T17155] IPv6: NLM_F_CREATE should be set when creating new route
[  736.964834][T17161] netlink: 'syz.4.3509': attribute type 9 has an invalid length.
[  737.017115][T17161] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3509'.
[  737.505070][T17172] netlink: 'syz.2.3516': attribute type 10 has an invalid length.
[  737.514195][T17172] veth0_vlan: entered allmulticast mode
[  737.585698][T17172] veth0_vlan: left promiscuous mode
[  737.603261][T17172] veth0_vlan: entered promiscuous mode
[  737.636378][T17172] team0: Device veth0_vlan failed to register rx_handler
[  738.206862][T17199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  738.458525][T17204] netlink: 'syz.3.3523': attribute type 9 has an invalid length.
[  738.473101][T17204] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3523'.
[  738.560304][T17201] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3524'.
[  738.593534][T17201] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3524'.
[  738.622567][T17206] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3524'.
[  739.016592][T17208] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3526'.
[  739.344977][T17216] netlink: 'syz.4.3529': attribute type 10 has an invalid length.
[  739.406548][ T5785] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  739.425502][T17216] team0: Port device netdevsim0 added
[  739.445097][T17218] netlink: 'syz.1.3530': attribute type 10 has an invalid length.
[  739.499394][T17219] netlink: 'syz.4.3529': attribute type 10 has an invalid length.
[  739.533683][T17219] team0: Port device netdevsim0 removed
[  739.550987][T17219] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  740.516939][ T5785] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  740.682270][T17254] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3544'.
[  740.808549][T17260] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3547'.
[  741.045513][T17267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  741.245531][T17267] netlink: 'syz.1.3549': attribute type 9 has an invalid length.
[  741.273635][T17267] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3549'.
[  741.495107][ T5785] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5
[  741.692966][T17284] netlink: 'syz.4.3555': attribute type 10 has an invalid length.
[  741.736823][T17284] veth0_vlan: entered allmulticast mode
[  741.812635][T17291] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3557'.
[  741.999169][T17284] veth0_vlan: left promiscuous mode
[  742.018965][T17284] veth0_vlan: entered promiscuous mode
[  742.040596][T17284] team0: Device veth0_vlan failed to register rx_handler
[  742.362390][T17297] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3558'.
[  742.774519][T17300] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3559'.
[  742.914556][T17317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  743.145764][T17322] netlink: 'syz.4.3565': attribute type 9 has an invalid length.
[  743.197508][T17322] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3565'.
[  743.259789][T17324] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3568'.
[  743.415543][T17329] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3569'.
[  745.181361][T17361] netlink: 'syz.1.3581': attribute type 29 has an invalid length.
[  745.417298][T17356] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3580'.
[  745.482684][T17356] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.527848][T17356] bridge_slave_0 (unregistering): left allmulticast mode
[  745.535037][T17356] bridge_slave_0 (unregistering): left promiscuous mode
[  745.542249][T17356] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.574131][T17361] netlink: 'syz.1.3581': attribute type 29 has an invalid length.
[  745.874668][T17374] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3585'.
[  746.457762][T17390] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3589'.
[  746.608354][T17393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3593'.
[  746.627772][T17393] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3593'.
[  746.807320][T17403] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3595'.
[  746.831636][T17403] FAULT_INJECTION: forcing a failure.
[  746.831636][T17403] name failslab, interval 1, probability 0, space 0, times 0
[  746.849818][T17403] CPU: 0 PID: 17403 Comm: syz.4.3595 Not tainted syzkaller #0
[  746.857419][T17403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  746.867508][T17403] Call Trace:
[  746.870823][T17403]  <TASK>
[  746.873787][T17403]  dump_stack_lvl+0x18c/0x250
[  746.878525][T17403]  ? show_regs_print_info+0x20/0x20
[  746.883802][T17403]  ? load_image+0x420/0x420
[  746.888364][T17403]  ? inet6_fill_ifla6_attrs+0x1300/0x21f0
[  746.894268][T17403]  should_fail_ex+0x394/0x4c0
[  746.898664][T17405] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  746.899006][T17403]  should_failslab+0x9/0x20
[  746.899053][T17403]  slab_pre_alloc_hook+0x59/0x300
[  746.915854][T17403]  kmem_cache_alloc+0x5a/0x2c0
[  746.920703][T17403]  ? skb_clone+0x1eb/0x370
[  746.925164][T17403]  skb_clone+0x1eb/0x370
[  746.929452][T17403]  __netlink_deliver_tap+0x411/0x7f0
[  746.934808][T17403]  ? netlink_deliver_tap+0x2e/0x1b0
[  746.940054][T17403]  netlink_deliver_tap+0x19c/0x1b0
[  746.945206][T17403]  netlink_dump+0x95b/0xec0
[  746.949734][T17403]  ? __skb_try_recv_from_queue+0x58f/0x730
[  746.955606][T17403]  ? netlink_lookup+0x200/0x200
[  746.960495][T17403]  ? skb_copy_datagram_iter+0x200/0x200
[  746.966083][T17403]  ? refcount_dec_and_test+0x4f/0x70
[  746.971401][T17403]  netlink_recvmsg+0x693/0xe60
[  746.976188][T17403]  ? netlink_sendmsg+0xbf0/0xbf0
[  746.981151][T17403]  ? aa_af_perm+0x330/0x330
[  746.985692][T17403]  ? __lock_acquire+0x1262/0x7d80
[  746.990754][T17403]  ? bpf_lsm_socket_recvmsg+0x9/0x10
[  746.996081][T17403]  ? security_socket_recvmsg+0x89/0xb0
[  747.001562][T17403]  ? netlink_sendmsg+0xbf0/0xbf0
[  747.006516][T17403]  ____sys_recvmsg+0x2bd/0x5d0
[  747.011308][T17403]  ? __sys_recvmsg_sock+0x50/0x50
[  747.016376][T17403]  ? import_iovec+0x73/0xa0
[  747.020915][T17403]  ___sys_recvmsg+0x214/0x590
[  747.025617][T17403]  ? __sys_recvmsg+0x2a0/0x2a0
[  747.030405][T17403]  ? ksys_write+0x1d2/0x260
[  747.034933][T17403]  ? __fget_files+0x3fc/0x460
[  747.039637][T17403]  __x64_sys_recvmsg+0x21e/0x2f0
[  747.044591][T17403]  ? ___sys_recvmsg+0x590/0x590
[  747.049465][T17403]  ? lockdep_hardirqs_on+0x98/0x150
[  747.054682][T17403]  do_syscall_64+0x55/0xb0
[  747.059128][T17403]  ? clear_bhb_loop+0x40/0x90
[  747.063824][T17403]  ? clear_bhb_loop+0x40/0x90
[  747.068520][T17403]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  747.074540][T17403] RIP: 0033:0x7fb31b19e0d9
[  747.078983][T17403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  747.098631][T17403] RSP: 002b:00007fb31c118028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  747.107081][T17403] RAX: ffffffffffffffda RBX: 00007fb31b425fa0 RCX: 00007fb31b19e0d9
[  747.115098][T17403] RDX: 0000000000000042 RSI: 0000200000000440 RDI: 0000000000000003
[  747.123095][T17403] RBP: 00007fb31c118090 R08: 0000000000000000 R09: 0000000000000000
[  747.131086][T17403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  747.139078][T17403] R13: 00007fb31b426038 R14: 00007fb31b425fa0 R15: 00007ffe1fa69338
[  747.147184][T17403]  </TASK>
[  747.162458][T17406] netlink: 'syz.2.3597': attribute type 9 has an invalid length.
[  747.171811][T17406] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3597'.
[  747.341581][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  747.348246][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  748.043638][T17429] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3604'.
[  748.308061][T17430] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3605'.
[  748.333256][T17441] netlink: 'syz.4.3607': attribute type 1 has an invalid length.
[  748.338421][T17442] netlink: 'syz.4.3607': attribute type 10 has an invalid length.
[  748.341220][T17441] netlink: 'syz.4.3607': attribute type 3 has an invalid length.
[  748.360483][T17441] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3607'.
[  748.387080][T17442] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3607'.
[  748.488938][T17446] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3608'.
[  748.509516][T17446] FAULT_INJECTION: forcing a failure.
[  748.509516][T17446] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  748.532605][T17446] CPU: 0 PID: 17446 Comm: syz.3.3608 Not tainted syzkaller #0
[  748.540131][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  748.550299][T17446] Call Trace:
[  748.553609][T17446]  <TASK>
[  748.556571][T17446]  dump_stack_lvl+0x18c/0x250
[  748.561319][T17446]  ? show_regs_print_info+0x20/0x20
[  748.566558][T17446]  ? load_image+0x420/0x420
[  748.571112][T17446]  ? __lock_acquire+0x7d80/0x7d80
[  748.576185][T17446]  ? snprintf+0xe9/0x140
[  748.580487][T17446]  should_fail_ex+0x394/0x4c0
[  748.585216][T17446]  _copy_to_user+0x2f/0xa0
[  748.589675][T17446]  simple_read_from_buffer+0xe7/0x150
[  748.595097][T17446]  proc_fail_nth_read+0x1e8/0x260
[  748.600172][T17446]  ? proc_fault_inject_write+0x360/0x360
[  748.605840][T17446]  ? fsnotify_perm+0x271/0x5e0
[  748.610647][T17446]  ? proc_fault_inject_write+0x360/0x360
[  748.616386][T17446]  vfs_read+0x298/0x990
[  748.620559][T17446]  ? kernel_read+0x1e0/0x1e0
[  748.625161][T17446]  ? __fget_files+0x28/0x460
[  748.629767][T17446]  ? __fget_files+0x3fc/0x460
[  748.634452][T17446]  ? __fdget_pos+0x2a3/0x330
[  748.639052][T17446]  ? ksys_read+0x74/0x260
[  748.643389][T17446]  ksys_read+0x151/0x260
[  748.647660][T17446]  ? vfs_write+0x9a0/0x9a0
[  748.652135][T17446]  ? lockdep_hardirqs_on+0x98/0x150
[  748.657407][T17446]  do_syscall_64+0x55/0xb0
[  748.661863][T17446]  ? clear_bhb_loop+0x40/0x90
[  748.666579][T17446]  ? clear_bhb_loop+0x40/0x90
[  748.671299][T17446]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  748.677232][T17446] RIP: 0033:0x7f0226b5e90e
[  748.681675][T17446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  748.701304][T17446] RSP: 002b:00007f0227b0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  748.709760][T17446] RAX: ffffffffffffffda RBX: 00007f0227b0d6c0 RCX: 00007f0226b5e90e
[  748.717751][T17446] RDX: 000000000000000f RSI: 00007f0227b0d0a0 RDI: 0000000000000004
[  748.725718][T17446] RBP: 00007f0227b0d090 R08: 0000000000000000 R09: 0000000000000000
[  748.733705][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  748.741680][T17446] R13: 00007f0226e26038 R14: 00007f0226e25fa0 R15: 00007ffdd2199d38
[  748.749683][T17446]  </TASK>
[  749.635002][T17479] netlink: 'syz.3.3618': attribute type 3 has an invalid length.
[  750.105487][T17491] syzkaller0: entered promiscuous mode
[  750.111768][T17491] syzkaller0: entered allmulticast mode
[  750.992504][T17514] netlink: 'syz.2.3630': attribute type 9 has an invalid length.
[  752.026842][T17504] __nla_validate_parse: 5 callbacks suppressed
[  752.026859][T17504] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3628'.
[  752.061164][T17512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  752.212531][T17516] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3631'.
[  752.985664][T17537] netlink: 'syz.4.3639': attribute type 2 has an invalid length.
[  753.237106][T17548] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3643'.
[  753.371750][T17552] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3644'.
[  753.872027][T17574] netlink: 'syz.3.3651': attribute type 2 has an invalid length.
[  753.894496][T17574] netlink: 'syz.3.3651': attribute type 8 has an invalid length.
[  753.912717][T17574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3651'.
[  754.029647][T17577] netlink: 'syz.2.3652': attribute type 2 has an invalid length.
[  754.196714][T17584] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3653'.
[  754.276697][T17581] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3654'.
[  754.719357][T17605] netlink: 'syz.3.3658': attribute type 9 has an invalid length.
[  754.767434][T17605] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3658'.
[  755.402181][T17616] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3666'.
[  755.800688][T17625] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3669'.
[  755.950660][T17630] netlink: 'syz.2.3678': attribute type 9 has an invalid length.
[  755.961457][T17629] netlink: 'syz.3.3670': attribute type 2 has an invalid length.
[  759.518544][T17667] netlink: 'syz.1.3684': attribute type 10 has an invalid length.
[  759.951743][T17691] __nla_validate_parse: 3 callbacks suppressed
[  759.951764][T17691] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3690'.
[  760.002884][T17692] netlink: 'syz.1.3687': attribute type 9 has an invalid length.
[  760.037910][T17692] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3687'.
[  760.251143][T17694] netlink: 'syz.2.3692': attribute type 9 has an invalid length.
[  760.277715][T17694] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3692'.
[  761.425086][T17714] netlink: 'syz.2.3696': attribute type 10 has an invalid length.
[  761.994068][T17720] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3697'.
[  762.133283][T17720] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3697'.
[  762.719543][T17734] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3701'.
[  763.626303][T17750] netlink: 'syz.4.3707': attribute type 10 has an invalid length.
[  763.805658][T17750] team0: Port device geneve1 added
[  763.845610][T17754] netlink: 'syz.1.3708': attribute type 9 has an invalid length.
[  763.872951][T17754] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3708'.
[  764.822489][T17761] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3710'.
[  764.833745][T17761] bridge_slave_1: default FDB implementation only supports local addresses
[  764.965928][T17765] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3711'.
[  765.750294][T17770] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3712'.
[  766.714917][T17804] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3723'.
[  766.741191][T17799] bridge0: port 3(team0) entered disabled state
[  766.772536][T17799] bridge_slave_1: left allmulticast mode
[  766.788426][T17799] bridge_slave_1: left promiscuous mode
[  766.824887][T17799] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.890837][T17799] bridge_slave_0: left allmulticast mode
[  766.897669][T17799] bridge_slave_0: left promiscuous mode
[  766.904660][T17799] bridge0: port 1(bridge_slave_0) entered disabled state
[  767.081069][T17811] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3725'.
[  767.300821][T17814] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3726'.
[  767.872783][T17832] netlink: 'syz.4.3733': attribute type 10 has an invalid length.
[  767.888706][T17832] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  767.922695][T17828] tap0: tun_chr_ioctl cmd 1074025677
[  767.937986][T17828] tap0: linktype set to 778
[  768.077269][T17838] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3735'.
[  768.299078][T17841] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3744'.
[  768.375019][T17844] bridge_slave_1: left allmulticast mode
[  768.404868][T17844] bridge_slave_1: left promiscuous mode
[  768.428179][T17844] bridge0: port 2(bridge_slave_1) entered disabled state
[  768.503280][T17844] bridge_slave_0: left allmulticast mode
[  768.527649][T17844] bridge_slave_0: left promiscuous mode
[  768.534980][T17844] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.889731][T17851] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3739'.
[  768.904696][T17854] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3739'.
[  770.686045][T17896] bridge_slave_1: left allmulticast mode
[  770.692781][T17896] bridge_slave_1: left promiscuous mode
[  770.721312][T17896] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.870202][T17896] bond0: (slave bridge0): Releasing backup interface
[  771.134162][T17902] netlink: 'syz.1.3764': attribute type 10 has an invalid length.
[  772.104124][T17926] netlink: 'syz.3.3763': attribute type 33 has an invalid length.
[  772.112480][T17926] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3763'.
[  772.774364][T17940] bridge_slave_1: left allmulticast mode
[  772.784649][T17940] bridge_slave_1: left promiscuous mode
[  772.793351][T17940] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.902779][T17940] bridge_slave_0: left allmulticast mode
[  772.926917][T17940] bridge_slave_0: left promiscuous mode
[  772.965463][T17940] bridge0: port 1(bridge_slave_0) entered disabled state
[  775.874488][T17950] netlink: 'syz.2.3773': attribute type 21 has an invalid length.
[  775.896337][T17950] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3773'.
[  776.348306][T17966] netlink: 'syz.1.3778': attribute type 6 has an invalid length.
[  776.363934][T17966] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3778'.
[  778.361051][T17995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  778.412446][T17995] netlink: 'syz.1.3787': attribute type 9 has an invalid length.
[  778.432140][T17995] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3787'.
[  778.444290][T17998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  778.646284][T18000] netlink: 'syz.1.3787': attribute type 9 has an invalid length.
[  778.661936][T18000] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3787'.
[  778.764195][T17997] netlink: 'syz.3.3788': attribute type 9 has an invalid length.
[  778.773411][T17997] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3788'.
[  779.052756][T17998] netlink: 'syz.3.3788': attribute type 9 has an invalid length.
[  779.061507][T17998] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3788'.
[  779.257486][T17999] netlink: 'syz.3.3788': attribute type 9 has an invalid length.
[  779.277665][T17999] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3788'.
[  779.709122][T18034] netlink: 'syz.3.3794': attribute type 9 has an invalid length.
[  779.716925][T18034] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3794'.
[  780.600363][T18043] netlink: 'syz.4.3800': attribute type 2 has an invalid length.
[  780.617688][T18043] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3800'.
[  781.042714][T18053] netlink: 'syz.2.3803': attribute type 29 has an invalid length.
[  781.376273][T18053] netlink: 'syz.2.3803': attribute type 29 has an invalid length.
[  782.377726][T18077] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3810'.
[  782.554863][T18083] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3811'.
[  783.133130][T18088] netlink: 'syz.2.3812': attribute type 3 has an invalid length.
[  783.150609][T18088] netlink: 134300 bytes leftover after parsing attributes in process `syz.2.3812'.
[  785.288378][T18091] netlink: 'syz.2.3813': attribute type 39 has an invalid length.
[  785.656389][T18102] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3816'.
[  785.726990][T18109] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3817'.
[  785.754563][T18109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  785.808973][T18110] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.3818'.
[  786.128269][T18121] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3822'.
[  786.217571][T18121] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3822'.
[  786.295162][T18121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  786.389380][T18131] netlink: 64771 bytes leftover after parsing attributes in process `syz.3.3826'.
[  786.902859][T18147] netlink: 'syz.4.3828': attribute type 9 has an invalid length.
[  786.920843][T18147] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3828'.
[  787.155505][T18152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3832'.
[  787.475819][T18152] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3832'.
[  787.540160][T18154] netlink: 'syz.1.3832': attribute type 2 has an invalid length.
[  787.596853][T18153] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3832'.
[  787.971818][T18161] netlink: 'syz.3.3833': attribute type 3 has an invalid length.
[  788.257212][T18177] netlink: 'syz.1.3838': attribute type 9 has an invalid length.
[  789.010434][T18171] delete_channel: no stack
[  789.662147][T18206] netlink: 'syz.4.3846': attribute type 3 has an invalid length.
[  790.343943][T18229] netlink: 'syz.4.3854': attribute type 9 has an invalid length.
[  790.696290][T18238] netlink: 'syz.2.3858': attribute type 3 has an invalid length.
[  790.735122][T18238] __nla_validate_parse: 8 callbacks suppressed
[  790.735138][T18238] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3858'.
[  790.762382][T18235] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3859'.
[  790.958750][T18240] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3860'.
[  791.025290][T18242] netlink: 'syz.3.3861': attribute type 5 has an invalid length.
[  791.220532][T18244] netlink: 'syz.3.3861': attribute type 10 has an invalid length.
[  791.237786][T18242] netlink: 'syz.3.3861': attribute type 10 has an invalid length.
[  791.453096][T18250] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3862'.
[  792.326214][T18274] IPv6: Can't replace route, no match found
[  793.195947][T18295] netlink: 'syz.4.3880': attribute type 9 has an invalid length.
[  793.225412][T18295] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3880'.
[  793.350503][T18299] netlink: 171096 bytes leftover after parsing attributes in process `syz.1.3881'.
[  793.378833][T18299] openvswitch: netlink: Flow key attribute not present in set flow.
[  793.389816][T18301] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3883'.
[  793.390086][T18303] netlink: 'syz.2.3883': attribute type 9 has an invalid length.
[  793.390103][T18303] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3883'.
[  793.585515][T18306] netlink: 'syz.2.3883': attribute type 9 has an invalid length.
[  793.648072][T18306] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3883'.
[  794.633128][T18330] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3890'.
[  795.180308][T18340] netlink: set zone limit has 8 unknown bytes
[  796.319667][ T5785] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5
[  796.791473][T18368] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.3901'.
[  796.820441][T18368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3901'.
[  796.959828][T18371] syzkaller0: entered promiscuous mode
[  796.965502][T18371] syzkaller0: entered allmulticast mode
[  798.188511][ T5785] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5
[  798.645934][T18403] netlink: 'syz.4.3912': attribute type 9 has an invalid length.
[  798.675771][T18403] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3912'.
[  800.940537][ T5785] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5
[  802.074953][T18455] netlink: 'syz.1.3930': attribute type 9 has an invalid length.
[  802.128403][T18457] netlink: 'syz.3.3932': attribute type 4 has an invalid length.
[  802.136198][T18457] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3932'.
[  802.148508][T18455] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3930'.
[  805.062894][T18509] netlink: 'syz.4.3949': attribute type 9 has an invalid length.
[  805.071131][T18509] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3949'.
[  805.284267][T18520] C: renamed from team_slave_0 (while UP)
[  805.309798][T18520] netlink: 'syz.3.3953': attribute type 3 has an invalid length.
[  805.319081][T18520] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3953'.
[  806.679789][T18549] 
@0Ù: renamed from bridge_slave_0 (while UP)
[  808.091801][T18595] netlink: 'syz.2.3976': attribute type 9 has an invalid length.
[  808.103105][T18595] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3976'.
[  808.161817][T18594] netlink: 'syz.1.3978': attribute type 1 has an invalid length.
[  808.215245][T18594] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3978'.
[  808.767877][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  808.776831][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  808.833136][T18601] netlink: 'syz.4.3980': attribute type 9 has an invalid length.
[  808.862763][T18601] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3980'.
[  810.005433][T18625] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3988'.
[  810.197506][T18626] sit0: entered allmulticast mode
[  810.436080][T18628] netlink: 'syz.1.3989': attribute type 3 has an invalid length.
[  810.447765][T18628] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3989'.
[  810.597984][T18634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3991'.
[  811.556995][T18662] netlink: 'syz.2.4008': attribute type 3 has an invalid length.
[  811.576319][T18662] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4008'.
[  811.650580][T18663] netlink: 'syz.3.4000': attribute type 9 has an invalid length.
[  811.664787][T18663] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4000'.
[  811.753033][T18665] netlink: 'syz.1.4001': attribute type 9 has an invalid length.
[  811.768288][T18665] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4001'.
[  813.489768][T18682] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4005'.
[  813.644701][T18681] netlink: 668 bytes leftover after parsing attributes in process `syz.2.4005'.
[  813.687213][T18681] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  813.727778][T18681] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  813.913470][T18685] netlink: 'syz.4.4006': attribute type 2 has an invalid length.
[  814.003315][T18685] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4006'.
[  814.400515][T18689] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.4009'.
[  814.545731][T18693] netlink: 'syz.3.4010': attribute type 2 has an invalid length.
[  814.585122][T18693] netlink: 'syz.3.4010': attribute type 8 has an invalid length.
[  814.609397][T18693] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4010'.
[  814.755384][T18702] netlink: 'syz.4.4012': attribute type 2 has an invalid length.
[  814.883579][T18705] netlink: 'syz.1.4013': attribute type 9 has an invalid length.
[  814.912893][T18705] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4013'.
[  815.447628][T18712] netlink: 'syz.3.4015': attribute type 3 has an invalid length.
[  815.469211][T18712] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4015'.
[  815.653513][T18726] netlink: 'syz.2.4018': attribute type 10 has an invalid length.
[  815.690224][T18726] team0: Port device wlan1 added
[  815.775162][T18730] netlink: 'syz.4.4020': attribute type 2 has an invalid length.
[  815.783707][T18730] netlink: 'syz.4.4020': attribute type 4 has an invalid length.
[  815.792828][T18730] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4020'.
[  816.211312][T18738] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.4023'.
[  816.662556][T18754] netlink: 'syz.3.4027': attribute type 10 has an invalid length.
[  816.693154][T18754] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4027'.
[  816.753940][T18754] batman_adv: batadv0: Adding interface: veth0_vlan
[  816.765180][T18754] batman_adv: batadv0: Interface activated: veth0_vlan
[  816.785624][T18756] netlink: 'syz.4.4028': attribute type 10 has an invalid length.
[  816.866372][T18756] team0: Device wg1 is of different type
[  817.098170][T18763] netlink: 'syz.2.4030': attribute type 21 has an invalid length.
[  817.136958][T18763] IPv6: NLM_F_CREATE should be specified when creating new route
[  817.159123][T18763] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  817.166704][T18763] IPv6: NLM_F_CREATE should be set when creating new route
[  817.174338][T18763] IPv6: NLM_F_CREATE should be set when creating new route
[  817.182045][T18763] IPv6: NLM_F_CREATE should be set when creating new route
[  820.290771][T18815] netlink: 'syz.4.4043': attribute type 9 has an invalid length.
[  820.306013][T18815] __nla_validate_parse: 1 callbacks suppressed
[  820.306030][T18815] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4043'.
[  820.679171][T18826] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.4047'.
[  822.092459][T18867] netlink: 'syz.1.4052': attribute type 9 has an invalid length.
[  822.117797][T18867] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.4052'.
[  822.445080][T18888] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4058'.
[  823.034823][T18903] netlink: 'syz.4.4061': attribute type 9 has an invalid length.
[  823.097438][T18903] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.4061'.
[  824.320804][T18915] netlink: 'syz.3.4065': attribute type 28 has an invalid length.
[  824.347608][T18915] netlink: 'syz.3.4065': attribute type 4 has an invalid length.
[  824.355413][T18915] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4065'.
[  824.705534][T18930] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4067'.
[  824.928069][T18930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  824.963799][T18930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  825.042576][T18930] bond0 (unregistering): Released all slaves
[  825.906675][T18958] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4075'.
[  826.158885][T18967] netlink: 'syz.2.4076': attribute type 9 has an invalid length.
[  826.205681][T18967] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4076'.
[  828.721792][T19007] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4090'.
[  828.907192][T19009] netlink: 56863 bytes leftover after parsing attributes in process `syz.4.4091'.
[  829.050571][T19013] netlink: 'syz.3.4093': attribute type 10 has an invalid length.
[  829.064672][T19013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4093'.
[  829.092044][T19013] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  829.109673][T19013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  829.311255][T19014] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.4093'.
[  829.366740][T19014] openvswitch: netlink: Duplicate key (type 0).
[  830.279658][ T5785] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  830.305436][T19037] netlink: 'syz.1.4102': attribute type 13 has an invalid length.
[  830.314117][T19037] netlink: 'syz.1.4102': attribute type 4 has an invalid length.
[  830.327669][T19037] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4102'.
[  831.244331][T19048] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4106'.
[  831.322217][T19051] netlink: 'syz.3.4108': attribute type 9 has an invalid length.
[  831.360767][T19051] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4108'.
[  831.794099][T19061] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.4111'.
[  831.815995][T19061] netlink: 'syz.1.4111': attribute type 10 has an invalid length.
[  832.212781][T19072] 
@0Ù: entered allmulticast mode
[  832.301539][T19073] can: request_module (can-proto-0) failed.
[  832.357802][ T5785] Bluetooth: hci3: command 0x0406 tx timeout
[  832.999826][T19097] netlink: 'syz.1.4121': attribute type 9 has an invalid length.
[  833.053863][T19097] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4121'.
[  833.749265][T19116] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4128'.
[  833.792359][T19116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4128'.
[  833.817486][T19116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4128'.
[  833.837637][T19116] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4128'.
[  837.748510][T19152] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4140'.
[  841.722710][T19188] netlink: 'syz.3.4150': attribute type 9 has an invalid length.
[  841.828483][T19189] netlink: 'syz.3.4150': attribute type 9 has an invalid length.
[  841.836335][T19189] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4150'.
[  841.927837][T19188] netlink: 399 bytes leftover after parsing attributes in process `syz.3.4150'.
[  843.732369][T19205] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  846.977601][T19235] netlink: 'syz.1.4165': attribute type 3 has an invalid length.
[  846.985518][T19235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4165'.
[  847.335753][T19224] netlink: 'syz.2.4161': attribute type 9 has an invalid length.
[  847.448275][T19224] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4161'.
[  848.161332][T19256] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4168'.
[  848.204775][T19256] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  849.747006][T19269] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4173'.
[  851.789685][ T5780] Bluetooth: hci4: command 0x0406 tx timeout
[  852.782094][T19321] netlink: 'syz.3.4189': attribute type 9 has an invalid length.
[  852.842453][T19321] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4189'.
[  853.892177][ T5785] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  854.543774][T19361] delete_channel: no stack
[  854.555713][T19361] delete_channel: no stack
[  856.055093][T19401] netlink: 'syz.1.4218': attribute type 9 has an invalid length.
[  856.083473][T19401] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4218'.
[  856.108091][   T29] INFO: task syz.0.3360:16721 blocked for more than 143 seconds.
[  856.156645][   T29]       Not tainted syzkaller #0
[  856.163518][T19401] ieee80211 phy171: Selected rate control algorithm 'minstrel_ht'
[  856.183609][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  856.202874][   T29] task:syz.0.3360      state:D stack:26376 pid:16721 ppid:15734  flags:0x00004006
[  856.222610][   T29] Call Trace:
[  856.225935][   T29]  <TASK>
[  856.237412][   T29]  __schedule+0x15ae/0x4660
[  856.247110][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  856.253772][   T29]  ? asan.module_dtor+0x20/0x20
[  856.259101][   T29]  ? trace_contention_end+0x39/0xe0
[  856.264445][   T29]  ? task_work_cancel+0xa5/0x220
[  856.270008][   T29]  ? task_work_cancel_func+0x210/0x210
[  856.275618][   T29]  schedule+0xbd/0x170
[  856.280371][   T29]  ? _free_event+0x10d/0xfb0
[  856.285057][   T29]  _free_event+0x176/0xfb0
[  856.290881][   T29]  perf_event_release_kernel+0x7c8/0x850
[  856.296587][   T29]  ? __might_sleep+0xe0/0xe0
[  856.317417][   T29]  ? calc_timer_values+0x400/0x400
[  856.322833][   T29]  ? perf_mmap+0x15e0/0x15e0
[  856.332135][   T29]  perf_release+0x3b/0x40
[  856.336605][   T29]  __fput+0x221/0x940
[  856.340886][   T29]  task_work_run+0x1d4/0x260
[  856.345687][   T29]  ? task_work_cancel+0x220/0x220
[  856.354788][   T29]  do_exit+0x986/0x2530
[  856.366595][   T29]  ? lock_chain_count+0x20/0x20
[  856.377135][   T29]  ? put_task_struct+0xc0/0xc0
[  856.383635][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[  856.389065][   T29]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  856.395277][   T29]  ? do_group_exit+0x76/0x2f0
[  856.407013][   T29]  do_group_exit+0x22d/0x2f0
[  856.413987][   T29]  get_signal+0x12a6/0x1390
[  856.422803][   T29]  arch_do_signal_or_restart+0xc2/0x7b0
[  856.429388][   T29]  ? mutex_unlock+0x10/0x10
[  856.434256][   T29]  ? get_sigframe_size+0x20/0x20
[  856.451752][   T29]  ? ksys_write+0x201/0x260
[  856.456512][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  856.467399][   T29]  exit_to_user_mode_loop+0x70/0x110
[  856.472810][   T29]  exit_to_user_mode_prepare+0xee/0x180
[  856.482621][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  856.488248][   T29]  do_syscall_64+0x61/0xb0
[  856.492810][   T29]  ? clear_bhb_loop+0x40/0x90
[  856.498937][   T29]  ? clear_bhb_loop+0x40/0x90
[  856.507152][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  856.515739][   T29] RIP: 0033:0x7feeb9f9e0d9
[  856.529211][   T29] RSP: 002b:00007feebadd3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  856.538233][   T29] RAX: 0000000000000012 RBX: 00007feeba225fa0 RCX: 00007feeb9f9e0d9
[  856.546437][   T29] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000049
[  856.564829][   T29] RBP: 00007feeba035024 R08: 0000000000000000 R09: 0000000000000000
[  856.587466][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  856.615854][   T29] R13: 00007feeba226038 R14: 00007feeba225fa0 R15: 00007ffe07b19b98
[  856.634219][   T29]  </TASK>
[  856.647563][   T29] 
[  856.647563][   T29] Showing all locks held in the system:
[  856.665508][   T29] 1 lock held by khungtaskd/29:
[  856.684926][   T29]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  856.725729][   T29] 2 locks held by getty/5528:
[  856.740795][   T29]  #0: ffff8880316a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  856.786598][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  856.839911][   T29] 2 locks held by kworker/0:4/5816:
[  856.845712][   T29]  #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  856.859218][   T29]  #1: ffffc90004c2fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  856.871601][   T29] 2 locks held by syz.2.4217/19389:
[  856.897452][   T29]  #0: ffffffff8d188088 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140
[  856.951540][   T29]  #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880
[  856.978340][   T29] 2 locks held by syz.1.4218/19391:
[  856.983747][   T29]  #0: ffffffff8e3c9ad0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x342/0x5d0
[  856.995579][   T29]  #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[  857.006852][   T29] 2 locks held by syz.4.4221/19404:
[  857.012660][   T29] 
[  857.015174][   T29] =============================================
[  857.015174][   T29] 
[  857.024442][   T29] NMI backtrace for cpu 0
[  857.028818][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  857.036144][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  857.046252][   T29] Call Trace:
[  857.049567][   T29]  <TASK>
[  857.052531][   T29]  dump_stack_lvl+0x18c/0x250
[  857.057249][   T29]  ? nmi_cpu_backtrace+0x1b6/0x3e0
[  857.062401][   T29]  ? show_regs_print_info+0x20/0x20
[  857.067650][   T29]  ? load_image+0x420/0x420
[  857.072203][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  857.077206][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  857.083421][   T29]  ? load_image+0x420/0x420
[  857.087970][   T29]  ? wq_watchdog_touch+0xef/0x170
[  857.093036][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  857.099145][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  857.105174][   T29]  watchdog+0xf59/0xfa0
[  857.109420][   T29]  ? watchdog+0x1e1/0xfa0
[  857.113789][   T29]  kthread+0x2fa/0x390
[  857.117893][   T29]  ? hungtask_pm_notify+0x50/0x50
[  857.122968][   T29]  ? kthread_blkcg+0xd0/0xd0
[  857.127600][   T29]  ret_from_fork+0x48/0x80
[  857.132069][   T29]  ? kthread_blkcg+0xd0/0xd0
[  857.136698][   T29]  ret_from_fork_asm+0x11/0x20
[  857.141561][   T29]  </TASK>
[  857.145564][   T29] Sending NMI from CPU 0 to CPUs 1:
[  857.151373][    C1] NMI backtrace for cpu 1
[  857.151382][    C1] CPU: 1 PID: 19404 Comm: syz.4.4221 Not tainted syzkaller #0
[  857.151397][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  857.151406][    C1] RIP: 0010:unwind_next_frame+0x4bc/0x2990
[  857.151426][    C1] Code: 4d 8d 7c 45 00 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 34 4d 63 27 4d 01 fc 4c 89 e7 4c 89 f6 <e8> 9f cb 4b 00 49 8d 47 04 4d 39 f4 4c 0f 46 e8 49 8d 47 fc 48 0f
[  857.151438][    C1] RSP: 0018:ffffc900015e7058 EFLAGS: 00000283
[  857.151451][    C1] RAX: 0000000000000000 RBX: ffffffff8ef28564 RCX: dffffc0000000000
[  857.151461][    C1] RDX: ffff88802e911e00 RSI: ffffffff88bf4f02 RDI: ffffffff88bf36c8
[  857.151472][    C1] RBP: ffffffff8ef28564 R08: ffffc900015e71f0 R09: 0000000000000009
[  857.151482][    C1] R10: 0000000000000004 R11: 0000000000000002 R12: ffffffff88bf36c8
[  857.151491][    C1] R13: ffffffff8ef28564 R14: ffffffff88bf4f02 R15: ffffffff8ef28564
[  857.151502][    C1] FS:  00007fb31c0f76c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  857.151515][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  857.151525][    C1] CR2: 00007fee292f3e9c CR3: 0000000035ee8000 CR4: 00000000003506e0
[  857.151539][    C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000
[  857.151547][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  857.151556][    C1] Call Trace:
[  857.151561][    C1]  <TASK>
[  857.151570][    C1]  ? bpf_test_run_xdp_live+0x1842/0x1b30
[  857.151593][    C1]  ? bpf_test_run_xdp_live+0x1843/0x1b30
[  857.151613][    C1]  ? bpf_test_run_xdp_live+0x1843/0x1b30
[  857.151632][    C1]  ? stack_trace_save+0x100/0x100
[  857.151651][    C1]  arch_stack_walk+0x144/0x190
[  857.151670][    C1]  ? bpf_test_run_xdp_live+0x1843/0x1b30
[  857.151692][    C1]  stack_trace_save+0xaa/0x100
[  857.151716][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  857.151733][    C1]  ? perf_trace_lock_acquire+0x105/0x400
[  857.151751][    C1]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  857.151767][    C1]  kasan_set_track+0x4e/0x70
[  857.151783][    C1]  ? kasan_set_track+0x4e/0x70
[  857.151798][    C1]  ? kasan_save_free_info+0x28/0x40
[  857.151817][    C1]  ? ____kasan_slab_free+0x126/0x1f0
[  857.151834][    C1]  ? slab_free_freelist_hook+0x130/0x1a0
[  857.151848][    C1]  ? kmem_cache_free+0xf8/0x290
[  857.151869][    C1]  ? llc_rcv+0x743/0xc60
[  857.151958][    C1]  ? __netif_receive_skb_list_core+0x708/0x770
[  857.152011][    C1]  ? netif_receive_skb_list_internal+0x943/0xca0
[  857.152032][    C1]  ? netif_receive_skb_list+0x54/0x3f0
[  857.152051][    C1]  ? bpf_test_run_xdp_live+0x1843/0x1b30
[  857.152093][    C1]  ? kmem_cache_free+0xf8/0x290
[  857.152113][    C1]  kasan_save_free_info+0x28/0x40
[  857.152132][    C1]  ____kasan_slab_free+0x126/0x1f0
[  857.152150][    C1]  slab_free_freelist_hook+0x130/0x1a0
[  857.152168][    C1]  ? llc_rcv+0x743/0xc60
[  857.152181][    C1]  kmem_cache_free+0xf8/0x290
[  857.152204][    C1]  llc_rcv+0x743/0xc60
[  857.152219][    C1]  ? llc_set_station_handler+0x40/0x40
[  857.152236][    C1]  __netif_receive_skb_list_core+0x708/0x770
[  857.152259][    C1]  ? set_rps_cpu+0x6a0/0x6a0
[  857.152275][    C1]  ? read_tsc+0x9/0x20
[  857.152296][    C1]  netif_receive_skb_list_internal+0x943/0xca0
[  857.152321][    C1]  ? netif_receive_skb_list_internal+0x4b1/0xca0
[  857.152343][    C1]  ? netif_receive_skb_core+0x230/0x230
[  857.152373][    C1]  netif_receive_skb_list+0x54/0x3f0
[  857.152395][    C1]  bpf_test_run_xdp_live+0x1843/0x1b30
[  857.152424][    C1]  ? bpf_test_run_xdp_live+0x4df/0x1b30
[  857.152444][    C1]  ? xdp_convert_md_to_buff+0x330/0x330
[  857.152480][    C1]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  857.152501][    C1]  ? _copy_from_user+0xa5/0xe0
[  857.152518][    C1]  ? bpf_test_init+0x119/0x140
[  857.152534][    C1]  ? xdp_convert_md_to_buff+0x5b/0x330
[  857.152554][    C1]  bpf_prog_test_run_xdp+0x7d8/0x1140
[  857.152572][    C1]  ? __lock_acquire+0x7d80/0x7d80
[  857.152593][    C1]  ? __fget_files+0x36a/0x460
[  857.152615][    C1]  ? dev_put+0x80/0x80
[  857.152638][    C1]  ? dev_put+0x80/0x80
[  857.152655][    C1]  bpf_prog_test_run+0x31f/0x390
[  857.152674][    C1]  __sys_bpf+0x49d/0x890
[  857.152690][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[  857.152720][    C1]  ? lock_chain_count+0x20/0x20
[  857.152741][    C1]  __x64_sys_bpf+0x7c/0x90
[  857.152756][    C1]  do_syscall_64+0x55/0xb0
[  857.152772][    C1]  ? clear_bhb_loop+0x40/0x90
[  857.152787][    C1]  ? clear_bhb_loop+0x40/0x90
[  857.152804][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  857.152836][    C1] RIP: 0033:0x7fb31b19e0d9
[  857.152849][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.152862][    C1] RSP: 002b:00007fb31c0f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  857.152877][    C1] RAX: ffffffffffffffda RBX: 00007fb31b426090 RCX: 00007fb31b19e0d9
[  857.152888][    C1] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  857.152897][    C1] RBP: 00007fb31b235024 R08: 0000000000000000 R09: 0000000000000000
[  857.152906][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  857.152914][    C1] R13: 00007fb31b426128 R14: 00007fb31b426090 R15: 00007ffe1fa69338
[  857.152934][    C1]  </TASK>
[  857.701860][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  857.708750][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  857.715968][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  857.726039][   T29] Call Trace:
[  857.729421][   T29]  <TASK>
[  857.732361][   T29]  dump_stack_lvl+0x18c/0x250
[  857.737056][   T29]  ? show_regs_print_info+0x20/0x20
[  857.742270][   T29]  ? load_image+0x420/0x420
[  857.746802][   T29]  panic+0x2ca/0x720
[  857.750728][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  857.755264][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  857.760861][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  857.766275][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  857.772455][   T29]  watchdog+0xf98/0xfa0
[  857.776637][   T29]  ? watchdog+0x1e1/0xfa0
[  857.780992][   T29]  kthread+0x2fa/0x390
[  857.785088][   T29]  ? hungtask_pm_notify+0x50/0x50
[  857.790160][   T29]  ? kthread_blkcg+0xd0/0xd0
[  857.794792][   T29]  ret_from_fork+0x48/0x80
[  857.799244][   T29]  ? kthread_blkcg+0xd0/0xd0
[  857.803856][   T29]  ret_from_fork_asm+0x11/0x20
[  857.808653][   T29]  </TASK>
[  857.812266][   T29] Kernel Offset: disabled
[  857.816604][   T29] Rebooting in 86400 seconds..