last executing test programs:

5.309626261s ago: executing program 0 (id=2622):
close(0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000001140), 0xb}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0xffffffffffffffff, 0x400000000000009, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
close(0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x80494, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x100600, 0xfffffffffffffffd, 0x5, 0x7, 0x4, 0x5, 0x8, 0x0, 0x82000008, 0x0, 0x7}, 0x0, 0x11, 0xffffffffffffffff, 0x2) (async)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async)
socket$kcm(0x2, 0x5, 0x84) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40050}, 0x4010) (async)
perf_event_open(&(0x7f0000000700)={0x0, 0x80, 0xe, 0x3, 0x9, 0x6, 0x0, 0x81, 0x200, 0x8, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x40, 0x0, @perf_config_ext={0x6, 0x488}, 0x90b0, 0x8, 0x7, 0x8, 0x4, 0xfff, 0x1, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x19)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0xfd, 0x0, 0x2, 0x0, 0x3, 0x8320, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, @perf_config_ext={0x2, 0x9}, 0x2110, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x401, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
recvmsg$kcm(r3, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x100) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080))

5.259572412s ago: executing program 4 (id=2623):
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4020, r0}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x20000801)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

5.009701118s ago: executing program 0 (id=2625):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x109042, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b7"], 0x0, 0x100}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000540), 0x4)
r3 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)}, 0xc000)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"})
close(0xffffffffffffffff)
socket$kcm(0x2, 0x200000000000006, 0x0)
ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x8955, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r7 = syz_clone(0x81821000, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="2ce9375e662e46329c8e8e3c668bdf66695bdc83aa44c2b7629795f502ef88c371a94b75b456ecf158c648ba54cdd56a2f5cc503c6a98742f57b31633f850c8b9e0411f9ce9fa3d3594854ed9610b8b3a554ae631509c99d20d794eee008cb373349f0bd")
perf_event_open(0x0, r7, 0x40000005, 0xffffffffffffffff, 0x8)
socket$kcm(0x1e, 0x4, 0x0)

4.832329712s ago: executing program 3 (id=2627):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffff, 0xb}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x940, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x8004745a, &(0x7f0000000180))

4.467077771s ago: executing program 2 (id=2629):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff}) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00')
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
close(r0) (async)
r4 = socket$kcm(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6) (async)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (async)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1)
socket$kcm(0x10, 0x100000000002, 0x4) (async)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071117b0000000000851000000200000085000000f700000095000000000000009500a505000000002064a72c3d96112ee69f437791c838bddf672ce88d96d259e7ff378e16458f21d805000000b510d3d8937c76af973d6e96e6e31f9182fefdb654bbddd34fae2ecd979ce80fc3226a35d985fede67b9bb774b1c361e4fec6df8949bff529e8afdcbc60ff4b08ee7270ebb39f92043acbeb4063a46b9dcf2a6a9037e916743a5da32beab3eb8c1c5dde6c98b491b3ed4f3bf7c83b3a80fda3ee253060bab11d57b2398022ea900cce75702dbb8b187441b2039fbf7399cac110f834e71aa1e8eee3786189203d3372d809d8a1c3f9dd9e00cb9f84965b1af10403fd536550297325f6736a2e3865169936d093ef5b5cde7be82897311a67540f4a7d9ef21"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000200)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)

4.303097135s ago: executing program 3 (id=2630):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x13, &(0x7f0000000240)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5a87}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = socket$kcm(0x2, 0x5, 0x84)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x200})
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x2000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r3})
ioctl$TUNSETVNETHDRSZ(r7, 0x800454e0, 0x0)
close(r6)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x2040)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r12 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000)=r10, 0x8)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000080)=0x5)

4.256434486s ago: executing program 1 (id=2631):
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/23, 0x17}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNATTACHFILTER(r2, 0x5451, 0x0)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="89000000120081ae08060cdc030000007f1be3f740281774bfe2ffca1b1f0000000000080e72f750375ed06056331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014008080cc2150a0000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e338af92347514f0b56a20ff27fff0000", 0x89}], 0x1}, 0x64000040)

4.243549706s ago: executing program 2 (id=2632):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1b}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x5601, 0x0, 0x0, 0x1, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x830d}, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, 0x0, 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0xf0ffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
write$cgroup_devices(r3, &(0x7f0000000340)={'c', ' *:* ', 'rwm\x00'}, 0xa)
close(0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000030000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000100)}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xacd6a4e1331c235f, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f00000014c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10000}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000d00)=r7, 0x4)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r5, 0x400454c9, 0x1)
ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0)

4.144875229s ago: executing program 4 (id=2633):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x268, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025643a00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, 0x0, 0xfc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10020)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, 0x0)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r6, 0x4)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010011201000"})

3.802333917s ago: executing program 1 (id=2634):
r0 = socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x16, 0x1, 0x200, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x3000000, &(0x7f0000000080)=[{&(0x7f0000000040)="0202000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0)

3.431922756s ago: executing program 3 (id=2635):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffff}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xdf, 0x0, &(0x7f0000000600)="5fdafedb4265561a3305dafa7cd22efeb3858c599f5e36995ae44e9bd331fcf41672aaede41c8d5bcc3bc2383015b7593581476ce13f614870af2dbfe87e093424988236240c8d06bd398bd27d82423e03745fec67dcce9a4d21138d0354b73ca3cabea4859355f92c504acc774ef4ea0ca9b84847ded2637cdd7db1c1fb6dbb6711794f47b2da9d80af49a1928e93216dc29468d1898e41999adf6e5c58bc7c454c1dc6f81742ecb28eb8d3c54ae1ac0166b7fc00c7805d8743fab9905edbbb25afe31747b5195be25127636f1b0bc5130ea3c7e289719cc97d36490cd9d8", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180)=r2, 0x4)
socket$kcm(0xa, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="1c000000180081064e810e82db4cb90402200800fe02fe023efe50a1", 0x1c}], 0x1}, 0x0)
socketpair(0x1d, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
close(r5)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00037f0080"], 0x48)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000"], 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'bond0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080))
r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

3.419172697s ago: executing program 1 (id=2636):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c000000040000000f00000000000010040000000600000002000004f48000000000000005000000070000643a155199a2180700be0000000100000000000008050000000000000005370000000000000f00000000080011050000000400000007000000010000130c0000000800000007000000080000000d0000000000001204000000002e6100"], &(0x7f0000000200)=""/67, 0x98, 0x43, 0x1, 0x4}, 0x28) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000000000000100000007000000c4000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000e2ed010000000f000000000000001000040000000000"], 0x50) (async)
r2 = gettid()
sendmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2], 0x38, 0x4050}, 0x20000800)
recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40012140) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (rerun: 32)

3.188492712s ago: executing program 0 (id=2637):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000800000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r0, 0x4, r0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

3.187944302s ago: executing program 2 (id=2638):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x7, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12)
r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12)
mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff)
r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r2], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000)

3.170334363s ago: executing program 1 (id=2639):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x440200, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffea1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.85650419s ago: executing program 4 (id=2640):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffff, 0xb}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x940, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x8004745a, &(0x7f0000000180))

2.250914955s ago: executing program 2 (id=2641):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000040000000200000000000091030000000000000000000000000000020100000002000000000000080200000000005f"], 0x0, 0x44}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x4}, 0x72f041ae438f2ac, 0x0, 0x0, 0x4, 0x2, 0x1ff, 0x100}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYRESHEX=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000002100000000000000080000b7080000000000007b8af8ff00000000b708000035f500007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000"], 0x68}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r8 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000c0000000400000001000084020000000a0000000300000000000001010000000000000700200000000000000000000b02000000006100302e61306161616100"], 0x0, 0x54}, 0x28)
sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x45, 0x0, &(0x7f0000000ac0)="b901040000000000000001be3e7d2a182f0000000064fc720873e42f080020cd0a40336c5bdd5d10c53d7f93b584400c681f881745a0a9e59a454dbce4e06d01008f10f100", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000a80)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0, 0x4}, 0x50)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x3, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0xc}, 0x0, 0x0, 0xc2ba, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)

1.448166904s ago: executing program 0 (id=2642):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbdeffff00000000000000008500000041000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2141, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20)
r2 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000040)=r3, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)='%pB    \x00'}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x11, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000700)}}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, 0x0, &(0x7f0000000180)}, 0x20)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@o_path={&(0x7f0000000980)='./file0\x00', 0x0, 0x8, r0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x1f, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xca}, @jmp={0x5, 0x0, 0x8, 0x6, 0x5b2054e097963e80, 0xffffffffffffffff, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe}, @generic={0x2, 0xf, 0x1, 0x5, 0x4}, @ldst={0x1, 0x0, 0x0, 0x4, 0xa, 0x100, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xe6, &(0x7f0000000400)=""/230, 0x40f00, 0x7a, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0xb, 0x48, 0x1000}, 0x10, 0x8af2, r0, 0x1, &(0x7f0000000ac0)=[r6, r7, r8, r9], &(0x7f0000000b00)=[{0x2, 0x5, 0x4, 0xb}], 0x10, 0x4b}, 0x94)

1.307963328s ago: executing program 1 (id=2643):
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4020, r0}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r1, 0x0, 0x20000801)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)

1.21735279s ago: executing program 3 (id=2644):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000005d2d, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f0000002e00)={&(0x7f00000001c0), 0x80, &(0x7f0000002d00)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/243, 0xf3}, {&(0x7f0000002bc0)=""/77, 0x4d}, {&(0x7f0000002c40)}, {&(0x7f0000002c80)=""/80, 0x50}], 0x5, &(0x7f0000002d80)=""/76, 0x4c}, 0x10060)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000800000005"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000380), &(0x7f0000000580)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001080)={{r1}, &(0x7f0000001000), &(0x7f0000001040)}, 0x20)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273f"], 0xfdef)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c)

1.181774801s ago: executing program 0 (id=2645):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xd}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8108, 0x2, 0xfffffffe, 0x3, 0x0, 0x4, 0x6980, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x13, &(0x7f0000000240)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5a87}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r3 = socket$kcm(0x2, 0x5, 0x84)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00', 0x200})
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
recvmsg(r8, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x2000)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r3})
ioctl$TUNSETVNETHDRSZ(r7, 0x800454e0, 0x0)
close(r6)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="110000004e0033"], 0xfe33)
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x2040)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c034002000187053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r12 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1b0000001a00895436dff9ce32a4e79480029ec4eea6dd56e22e57", 0x1b}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000)=r10, 0x8)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000080)=0x5)

1.181133251s ago: executing program 4 (id=2646):
socket$kcm(0xa, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffef0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac61, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x11e, &(0x7f0000000200), 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000020000000000000000081811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async)
socket$kcm(0xa, 0x2, 0x73) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0) (async)
socketpair(0x18, 0x2, 0x0, &(0x7f0000000200))
setsockopt$sock_attach_bpf(r4, 0x29, 0x33, 0x0, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001340)={r3, 0x0, 0x0}, 0x10) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="100000002d000b02d25a806f8c6394f9101a04000adb67aede31ab63e22ebbb9b5e04309a46a07357dfc44e075215ccd1f81321123f07e964177bd4e13238abb69084189", 0x44}], 0x59}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@ethernet={0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, 0x0}, 0x40004891) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95f24fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
recvmsg$kcm(0xffffffffffffffff, &(0x7f00000026c0)={&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000002580)=[{&(0x7f0000000540)=""/42, 0x2a}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/217, 0xd9}, {&(0x7f0000002480)=""/196, 0xc4}], 0x5, &(0x7f0000002600)=""/158, 0x9e}, 0x10000) (async)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
unlink(0x0)

1.104437173s ago: executing program 2 (id=2647):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffd67}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071108a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

918.945247ms ago: executing program 3 (id=2648):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@alu={0x7, 0x1, 0x0, 0xa, 0x3, 0xc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0xc3d9, 0x1000, &(0x7f0000000a80)=""/4096, 0x41000, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0x3, 0xf, 0xfffffffe}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000001b00)=[{0x2, 0x2, 0x9, 0x6}, {0x1, 0x4, 0x5, 0x6}, {0x4, 0x3, 0x2, 0x1}, {0x1, 0x3, 0x7669efb5, 0x1}], 0x10, 0x6}, 0x94)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1c, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x6, 0x25, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, 0x0, 0xfffffffd}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60020000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x23, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x14, &(0x7f0000000640)=""/20, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x0, 0xe, 0x3, 0x9}, 0x10, 0x1e442, 0xffffffffffffffff, 0x1, &(0x7f00000006c0)=[r2, r2, r2, r2, r2, r2], &(0x7f0000000700)=[{0x2, 0x4, 0xa, 0x4}], 0x10, 0x1}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@fallback=r1, 0x1f, 0x0, 0xafa4, &(0x7f0000000800)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0), <r9=>0x0}, 0x40)
r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@fallback, r7, 0x32, 0x4, r8, @void, @value=r10, @void, @void, r9}, 0x20)
r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001c00)={@map=r11, 0xffffffffffffffff, 0x1c, 0x2008, r0, @value, @void, @void, @void, r9}, 0x20)
r12 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r12, &(0x7f0000000440)={&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r12, {0x2, 0x4e21, @empty}, 0x3, 0x0, 0x1, 0x1000}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000180)="02c3", 0x2}, {&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}, {&(0x7f00000008c0)="3d6d7398624025b53b4388c259c1281dd659b814", 0x14}], 0x3, 0x0, 0x0, 0x900}, 0x840)

821.65682ms ago: executing program 4 (id=2649):
r0 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xe, 0xb6, 0x6, 0x5, 0x0, 0x2, 0x140, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xd, 0x4, @perf_config_ext={0x1000, 0x3}, 0x2000, 0x9, 0x9, 0x5, 0xb22b, 0x5, 0x1, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x20000000000, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="190000000400000004000000ff07000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0x21, 0x2, 0xa)
mkdirat$cgroup(r2, &(0x7f0000000100)='syz1\x00', 0x1ff)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000008000000001001000001000000dc00000000000000"], 0x18}, 0x2004fc10)
close(r3)
socket$kcm(0x10, 0x2, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000040)=r6, 0x4)
openat$cgroup(r6, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_devices(r1, 0x0, 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0xb)

508.231027ms ago: executing program 0 (id=2650):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x268, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025643a00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r2, 0x0, 0xfc)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000740))
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x10020)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x1f6, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2a}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, 0x0)
sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r6, 0x4)
sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010011201000"})

417.665799ms ago: executing program 3 (id=2651):
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = socket$kcm(0x10, 0x7, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f00000001c0), 0x12)
r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r6, 0x12)
r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12)
mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff)
r9 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r2], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000)

415.25095ms ago: executing program 2 (id=2652):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x5, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x2d5}, @jmp={0x5, 0x0, 0x7, 0x0, 0x8, 0xffffffffffffffe0, 0xffffffffffffffff}], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="bdaa00000000000071101000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xe4, 0x0, 0x0, 0x5, 0x0, 0x80000001, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x9}, 0x20, 0x0, 0xc2b7, 0x5, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014200d00091209000d2000000401a80018000e400e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000009800000000ff00", @ANYRES16=r3, @ANYRES32=r0], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r4, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a00)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@fwd={0x2}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @volatile={0x3, 0x0, 0x0, 0x9, 0x1}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x23, 0x0, 0x7, 0x3}, @struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x401, [{0x1, 0x0, 0x6}]}]}, {0x0, [0x5f, 0x5f, 0x2e]}}, &(0x7f0000000a00)=""/4096, 0x69, 0x1000, 0x0, 0x80000000, 0x10000}, 0x28)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0xffffffffffff55be)
r9 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r7}, 0x8)
write$cgroup_int(r9, &(0x7f00000001c0), 0xfffffdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x1, 0x5, 0x3, 0x4, 0x100, 0x8}, @map_val={0x18, 0x7, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x10b}}}, &(0x7f0000000340)='GPL\x00', 0x6c469c98, 0x0, 0x0, 0x41000, 0x10, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000001a40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001a80)={0x0, 0xf, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001ac0)=[r4, r4, r4, r4, r2, r9], &(0x7f0000001b00)=[{0x4, 0x5, 0xe}, {0x5, 0x2, 0x10}, {0x0, 0x1, 0x6, 0x8}, {0x1, 0x5, 0x2, 0x1}, {0x0, 0x4, 0xd, 0x5}, {0x0, 0x5, 0xe, 0x3}, {0x0, 0x2, 0x4, 0x3}], 0x10, 0x9}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
close(0x4)
r10 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0)
close(0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$unix(r1, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0)

300.786162ms ago: executing program 1 (id=2653):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="18120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7968dd986c6a6700020006aa"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060005c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800000}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socket$kcm(0xa, 0x3, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x400, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe51a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfee}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4c, 0x7c, 0x1, 0x8, [{@remote, 0xb1e}, {@empty, 0xb5a}, {@loopback, 0x4}, {@local, 0x959}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@empty, 0xa}, {@multicast1}, {@loopback, 0x7}]}]}}}], 0x78}, 0x8000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xffffffff, r3}, 0x38)
r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 4 (id=2654):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x440200, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffea1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400700000000000001000084060000000000000001"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce2200"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

kernel console output (not intermixed with test programs):

idge0: port 1(bridge_slave_0) entered disabled state
[  302.753694][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.761721][ T8219] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.432689][ T8229] netlink: 'syz.2.956': attribute type 3 has an invalid length.
[  303.475811][ T8233] netlink: 'syz.1.957': attribute type 10 has an invalid length.
[  303.553530][ T8229] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.956'.
[  303.643470][ T8233] 8021q: adding VLAN 0 to HW filter on device team0
[  303.761347][ T8233] bond0: (slave team0): Enslaving as an active interface with an up link
[  303.986570][ T8239] netlink: 'syz.3.959': attribute type 21 has an invalid length.
[  304.426206][ T8246] netlink: 'syz.0.960': attribute type 1 has an invalid length.
[  305.870723][ T8327] netlink: 'syz.0.967': attribute type 3 has an invalid length.
[  305.965607][ T8327] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.967'.
[  307.167162][ T8341] netlink: 'syz.4.972': attribute type 3 has an invalid length.
[  307.257191][ T8341] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.972'.
[  307.613188][ T8366] netlink: 'syz.1.979': attribute type 28 has an invalid length.
[  307.649845][ T8366] netlink: 'syz.1.979': attribute type 29 has an invalid length.
[  307.697242][ T8366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.979'.
[  308.037870][ T8383] netlink: 188 bytes leftover after parsing attributes in process `syz.2.981'.
[  308.089722][ T8383] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate.
[  308.196579][ T8386] netlink: 'syz.1.983': attribute type 21 has an invalid length.
[  308.494379][ T8390] netlink: 'syz.4.984': attribute type 3 has an invalid length.
[  308.567431][ T8390] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.984'.
[  308.745382][ T8393] tap0: tun_chr_ioctl cmd 2147767517
[  309.174145][ T8410] netlink: 68 bytes leftover after parsing attributes in process `syz.0.991'.
[  309.592515][ T8416] netlink: 'syz.1.992': attribute type 9 has an invalid length.
[  309.714612][ T8410] device syzkaller0 entered promiscuous mode
[  309.732235][ T8424] netlink: 'syz.3.990': attribute type 3 has an invalid length.
[  309.785624][ T8416] netlink: 399 bytes leftover after parsing attributes in process `syz.1.992'.
[  309.842779][ T8424] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.990'.
[  309.907611][ T8422] netlink: 'syz.4.993': attribute type 9 has an invalid length.
[  309.939282][ T8422] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.993'.
[  314.772097][ T8441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.997'.
[  315.244372][ T8466] netlink: 'syz.3.1000': attribute type 3 has an invalid length.
[  315.323040][ T8466] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1000'.
[  315.489255][ T8472] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1003'.
[  315.506503][ T8474] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.1003'.
[  315.547265][ T8474] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.1003'.
[  315.569498][ T8474] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.1003'.
[  316.928580][ T8489] netlink: 'syz.3.1010': attribute type 10 has an invalid length.
[  317.535581][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  317.542271][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  319.863078][ T8501] netlink: 'syz.2.1012': attribute type 9 has an invalid length.
[  319.911826][ T8502] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1021'.
[  319.912590][ T8501] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1012'.
[  319.944433][ T8505] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.1021'.
[  319.987900][ T8505] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.1021'.
[  320.029619][ T8505] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.1021'.
[  320.561335][ T8504] netlink: 'syz.1.1011': attribute type 3 has an invalid length.
[  320.796071][ T8504] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1011'.
[  320.823341][ T8524] netlink: 'syz.2.1016': attribute type 3 has an invalid length.
[  320.870533][ T8524] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1016'.
[  320.999114][ T8530] TCP: TCP_TX_DELAY enabled
[  321.072388][ T8536] netlink: 'syz.0.1019': attribute type 29 has an invalid length.
[  321.115920][ T8536] netlink: 'syz.0.1019': attribute type 29 has an invalid length.
[  321.191537][ T8540] netlink: 'syz.1.1020': attribute type 2 has an invalid length.
[  321.211802][ T8540] netlink: 'syz.1.1020': attribute type 4 has an invalid length.
[  321.232276][ T8540] netlink: 'syz.1.1020': attribute type 8 has an invalid length.
[  321.324263][ T8540] netlink: 'syz.1.1020': attribute type 9 has an invalid length.
[  321.389100][ T8540] netlink: 'syz.1.1020': attribute type 10 has an invalid length.
[  321.397641][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'.
[  321.442404][ T8545] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.1022'.
[  321.715740][ T8563] netlink: 'syz.0.1026': attribute type 10 has an invalid length.
[  321.872197][ T8567] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1027'.
[  324.175833][ T8578] : port 1(ip6gretap0) entered blocking state
[  324.199218][ T8578] : port 1(ip6gretap0) entered disabled state
[  324.217111][ T8578] device ip6gretap0 entered promiscuous mode
[  324.304616][ T8579] device ip6gretap0 left promiscuous mode
[  324.324991][ T8579] : port 1(ip6gretap0) entered disabled state
[  325.174201][ T8601] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1034'.
[  326.625334][ T8617] validate_nla: 2 callbacks suppressed
[  326.625355][ T8617] netlink: 'syz.0.1041': attribute type 10 has an invalid length.
[  326.683994][ T8617] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.687578][ T8613] netlink: 'syz.4.1039': attribute type 11 has an invalid length.
[  326.691456][ T8617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.693243][ T8617] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.715043][ T8617] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.716212][ T8613] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1039'.
[  326.813045][ T8617] team0: Port device bridge0 added
[  326.820399][ T8302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  326.833651][ T8626] netlink: 'syz.3.1044': attribute type 9 has an invalid length.
[  326.834654][ T8611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  326.877629][ T8626] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1044'.
[  326.931442][ T8627] netlink: 'syz.2.1043': attribute type 10 has an invalid length.
[  329.295156][ T8652] netlink: 'syz.4.1048': attribute type 3 has an invalid length.
[  329.339156][ T8652] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1048'.
[  329.514947][ T8657] netlink: 'syz.1.1052': attribute type 3 has an invalid length.
[  329.554420][ T8657] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1052'.
[  330.429373][ T8694] netlink: 'syz.2.1060': attribute type 39 has an invalid length.
[  331.157025][ T8701] netlink: 'syz.4.1061': attribute type 9 has an invalid length.
[  331.178210][ T8701] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1061'.
[  331.668168][ T8715] netlink: 'syz.2.1065': attribute type 3 has an invalid length.
[  331.681068][ T8715] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1065'.
[  332.214660][ T8739] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1071'.
[  332.983356][ T8736] device syzkaller0 entered promiscuous mode
[  334.236857][ T8765] netlink: 'syz.4.1078': attribute type 9 has an invalid length.
[  334.419615][ T8765] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1078'.
[  334.829132][ T4286] Bluetooth: hci0: command 0x0406 tx timeout
[  335.275603][ T8771] netlink: 'syz.0.1079': attribute type 9 has an invalid length.
[  335.289277][ T8771] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1079'.
[  339.688788][ T8749] device syzkaller0 entered promiscuous mode
[  340.543534][ T8790] netlink: 'syz.4.1081': attribute type 3 has an invalid length.
[  340.551895][ T8790] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1081'.
[  342.268205][ T8782] IPv6: €: Disabled Multicast RS
[  342.653367][ T8793] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1084'.
[  343.371427][ T8810] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1088'.
[  343.437643][ T8813] netlink: 'syz.0.1089': attribute type 46 has an invalid length.
[  343.512396][ T8813] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1089'.
[  343.861759][ T8829] netlink: 'syz.0.1094': attribute type 15 has an invalid length.
[  343.891660][ T8829] netlink: 'syz.0.1094': attribute type 7 has an invalid length.
[  344.012456][ T8828] netlink: 'syz.0.1094': attribute type 39 has an invalid length.
[  345.707577][ T8845] netlink: 'syz.4.1096': attribute type 3 has an invalid length.
[  345.719744][ T8845] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1096'.
[  345.954546][ T8846] device bond_slave_1 entered promiscuous mode
[  346.315385][ T8861] netlink: 'syz.2.1102': attribute type 29 has an invalid length.
[  346.330026][ T8861] netlink: 'syz.2.1102': attribute type 29 has an invalid length.
[  346.665243][ T8860] netlink: 'syz.3.1103': attribute type 21 has an invalid length.
[  346.705032][ T8865] netlink: 'syz.0.1105': attribute type 28 has an invalid length.
[  346.715786][ T8860] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1103'.
[  346.732402][ T8865] netlink: 'syz.0.1105': attribute type 3 has an invalid length.
[  346.782140][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'.
[  346.798236][ T8865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1105'.
[  346.826607][ T8863] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1104'.
[  347.645410][ T8885] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1108'.
[  347.705757][ T8885] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  347.761530][ T8889] netlink: 'syz.0.1110': attribute type 3 has an invalid length.
[  347.795524][ T8885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  347.813465][ T8889] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1110'.
[  347.928143][ T8889] netlink: 'syz.0.1110': attribute type 13 has an invalid length.
[  347.948732][ T8889] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1110'.
[  347.975032][ T8895] netlink: 'syz.1.1111': attribute type 10 has an invalid length.
[  348.119842][ T8895] team0: Device bond0 is already an upper device of the team interface
[  348.889605][ T8910] netlink: 'syz.1.1116': attribute type 3 has an invalid length.
[  348.897518][ T8910] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1116'.
[  349.201541][ T8920] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1120'.
[  350.940575][ T8957] __nla_validate_parse: 5 callbacks suppressed
[  350.940620][ T8957] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1129'.
[  351.068990][ T8957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  352.052717][ T8969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1135'.
[  352.413079][ T8975] validate_nla: 6 callbacks suppressed
[  352.413165][ T8975] netlink: 'syz.2.1133': attribute type 3 has an invalid length.
[  352.749333][ T8975] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1133'.
[  353.206544][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1141'.
[  353.465288][ T8994] netlink: 'syz.1.1142': attribute type 9 has an invalid length.
[  353.476389][ T8994] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1142'.
[  355.337563][ T9018] netlink: 2739 bytes leftover after parsing attributes in process `syz.2.1148'.
[  356.833024][ T9009] netlink: 7039 bytes leftover after parsing attributes in process `syz.0.1146'.
[  356.842461][ T9020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1149'.
[  357.064442][ T9032] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1152'.
[  357.593674][ T9040] netlink: 'syz.1.1155': attribute type 3 has an invalid length.
[  357.723437][ T9040] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1155'.
[  359.220867][ T9066] sctp: [Deprecated]: syz.2.1162 (pid 9066) Use of struct sctp_assoc_value in delayed_ack socket option.
[  359.220867][ T9066] Use struct sctp_sack_info instead
[  359.794764][ T9073] netlink: 'syz.0.1165': attribute type 9 has an invalid length.
[  359.841435][ T9073] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1165'.
[  360.229148][ T9088] netlink: 'syz.1.1170': attribute type 19 has an invalid length.
[  360.320914][ T9088] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1170'.
[  360.588798][ T9091] netlink: 'syz.3.1169': attribute type 3 has an invalid length.
[  360.623255][ T9092] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1171'.
[  360.667330][ T9091] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1169'.
[  362.536500][ T9115] netlink: 'syz.4.1175': attribute type 10 has an invalid length.
[  362.589919][ T9115] netlink: 3819 bytes leftover after parsing attributes in process `syz.4.1175'.
[  363.717752][ T9144] netlink: 'syz.1.1198': attribute type 11 has an invalid length.
[  363.752606][ T9144] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1198'.
[  363.915127][ T9151] netlink: 'syz.3.1187': attribute type 3 has an invalid length.
[  364.001098][ T9151] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1187'.
[  364.126676][ T9152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  364.794309][ T9164] netlink: 'syz.1.1189': attribute type 9 has an invalid length.
[  364.889475][ T9164] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1189'.
[  365.456199][ T9185] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1195'.
[  366.062509][ T9180] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1193'.
[  367.155273][ T9202] netlink: 'syz.1.1201': attribute type 3 has an invalid length.
[  367.241194][ T9202] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1201'.
[  367.762086][ T9210] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1203'.
[  367.886914][ T9210] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  368.384369][ T9225] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1207'.
[  368.434605][ T9223] netlink: 'syz.3.1206': attribute type 3 has an invalid length.
[  368.485675][ T9223] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1206'.
[  368.941349][ T9228] netlink: 'syz.0.1209': attribute type 9 has an invalid length.
[  368.974495][ T9228] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1209'.
[  369.868778][ T9263] netlink: 'syz.4.1215': attribute type 3 has an invalid length.
[  369.984435][ T9263] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1215'.
[  371.193933][ T9293] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1222'.
[  372.196646][ T9324] netlink: 'syz.4.1229': attribute type 9 has an invalid length.
[  372.209362][ T9324] netlink: 399 bytes leftover after parsing attributes in process `syz.4.1229'.
[  372.344313][ T9334] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1233'.
[  372.642024][ T9337] netlink: 'syz.3.1232': attribute type 3 has an invalid length.
[  372.823990][ T9337] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1232'.
[  376.142338][ T9381] tun0: tun_chr_ioctl cmd 1074812118
[  376.189652][ T9381] tun0: tun_chr_ioctl cmd 2147767519
[  376.967478][ T9396] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  377.776082][ T9389] device syzkaller0 entered promiscuous mode
[  378.134715][ T9398] device syzkaller0 entered promiscuous mode
[  378.480979][ T9409] netlink: 'syz.0.1249': attribute type 9 has an invalid length.
[  378.497500][ T9409] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1249'.
[  378.826768][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  378.834392][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  381.312398][ T9423] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.1252'.
[  381.325526][ T9423] netlink: 'syz.0.1252': attribute type 2 has an invalid length.
[  381.338637][ T9423] netlink: 'syz.0.1252': attribute type 8 has an invalid length.
[  381.348335][ T9423] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.1252'.
[  381.702086][ T9433] netlink: 'syz.2.1251': attribute type 3 has an invalid length.
[  381.719030][ T9433] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1251'.
[  384.149563][ T9442] netlink: 'syz.1.1256': attribute type 29 has an invalid length.
[  384.180473][ T9442] netlink: 'syz.1.1256': attribute type 29 has an invalid length.
[  384.202855][ T9454] netlink: 'syz.1.1256': attribute type 29 has an invalid length.
[  384.714577][ T9462] netlink: 'syz.4.1261': attribute type 10 has an invalid length.
[  384.769864][ T9462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1261'.
[  384.819742][ T9462] batman_adv: batadv0: Adding interface: virt_wifi0
[  384.823206][ T9461] netlink: 'syz.0.1262': attribute type 9 has an invalid length.
[  384.826985][ T9462] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  384.907392][ T9462] batman_adv: batadv0: Interface activated: virt_wifi0
[  384.924185][ T9461] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1262'.
[  386.346231][ T9464] netlink: 'syz.3.1263': attribute type 39 has an invalid length.
[  386.381668][ T9470] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1263'.
[  386.656320][ T9481] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1266'.
[  387.346638][ T9502] netlink: 'syz.2.1270': attribute type 3 has an invalid length.
[  387.416995][ T9502] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1270'.
[  388.294423][ T9518] netlink: 'syz.3.1274': attribute type 10 has an invalid length.
[  388.342211][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.375946][ T9518] device bridge_slave_1 left promiscuous mode
[  388.382906][ T9518] bridge0: port 2(bridge_slave_1) entered disabled state
[  388.394321][ T9517] netlink: 'syz.2.1277': attribute type 10 has an invalid length.
[  388.402814][ T9517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1277'.
[  388.645912][ T9530] netlink: 'syz.1.1278': attribute type 9 has an invalid length.
[  388.735522][ T9530] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1278'.
[  389.357214][ T9549] netlink: 'syz.3.1285': attribute type 2 has an invalid length.
[  389.438232][ T9551] netlink: 'syz.2.1284': attribute type 2 has an invalid length.
[  389.663230][ T9558] netlink: 'syz.1.1287': attribute type 3 has an invalid length.
[  389.709055][ T9558] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1287'.
[  389.762670][ T9560] ref_ctr_offset mismatch. inode: 0x54a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0
[  390.179881][ T9572] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1292'.
[  392.839033][ T9586] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1297'.
[  393.105252][ T9601] netlink: 'syz.4.1299': attribute type 27 has an invalid length.
[  393.143305][ T9590] Â: renamed from pim6reg1
[  393.448340][ T9603] netlink: 'syz.1.1300': attribute type 3 has an invalid length.
[  393.529247][ T9603] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1300'.
[  393.634287][ T9596] netlink: 'syz.4.1299': attribute type 28 has an invalid length.
[  393.718522][ T9596] netlink: 'syz.4.1299': attribute type 3 has an invalid length.
[  393.799904][ T9596] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1299'.
[  394.560842][ T9620] netlink: 'syz.2.1303': attribute type 2 has an invalid length.
[  395.582505][ T9633] netlink: 'syz.0.1305': attribute type 2 has an invalid length.
[  395.700651][ T9633] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1305'.
[  395.875129][ T9617] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1302'.
[  397.126775][ T9658] netlink: 'syz.2.1311': attribute type 11 has an invalid length.
[  397.159165][ T9658] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1311'.
[  397.329405][ T9657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  397.417666][ T9661] netlink: 'syz.0.1312': attribute type 3 has an invalid length.
[  397.449323][ T9661] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1312'.
[  397.833352][ T9677] netlink: 'syz.0.1317': attribute type 39 has an invalid length.
[  397.985416][ T9680] netlink: 'syz.3.1315': attribute type 40 has an invalid length.
[  398.065076][ T9682] netlink: 'syz.1.1318': attribute type 2 has an invalid length.
[  398.573362][ T9686] netlink: 'syz.0.1320': attribute type 2 has an invalid length.
[  398.596508][ T9686] netlink: 'syz.0.1320': attribute type 4 has an invalid length.
[  398.609537][ T9686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1320'.
[  398.946851][ T9698] netlink: 'syz.0.1322': attribute type 7 has an invalid length.
[  399.183301][ T9698] netlink: 'syz.0.1322': attribute type 11 has an invalid length.
[  399.267795][ T9698] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1322'.
[  399.725889][ T9718] netlink: 'syz.4.1326': attribute type 21 has an invalid length.
[  399.768665][ T9718] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1326'.
[  400.151252][ T9729] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1329'.
[  400.388544][ T9724] netlink: 'syz.3.1327': attribute type 3 has an invalid length.
[  400.471104][ T9724] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1327'.
[  400.867843][ T9750] netlink: 'syz.1.1335': attribute type 2 has an invalid length.
[  401.269320][ T9761] netlink: 'syz.0.1337': attribute type 27 has an invalid length.
[  401.431966][ T9761] netlink: 'syz.0.1337': attribute type 28 has an invalid length.
[  401.475425][ T9761] netlink: 'syz.0.1337': attribute type 3 has an invalid length.
[  401.510371][ T9761] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1337'.
[  402.432148][ T9774] device syzkaller0 entered promiscuous mode
[  402.914743][ T9798] netlink: 'syz.4.1346': attribute type 3 has an invalid length.
[  402.961460][ T9798] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1346'.
[  404.227398][ T9817] netlink: 'syz.0.1353': attribute type 2 has an invalid length.
[  406.803191][ T9826] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1354'.
[  406.864435][ T9826] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.1354'.
[  406.889460][ T9826] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1354'.
[  406.966912][ T9824] device syzkaller0 entered promiscuous mode
[  407.055134][ T9833] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1355'.
[  407.291748][ T9842] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1359'.
[  411.474062][ T9864] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1365'.
[  411.538144][ T9868] netlink: 'syz.1.1366': attribute type 2 has an invalid length.
[  411.583773][ T9864] netlink: 'syz.3.1365': attribute type 13 has an invalid length.
[  411.631657][ T9864] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1365'.
[  411.647303][ T9864] syz_tun: refused to change device tx_queue_len
[  411.727533][ T9864] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  411.758769][ T9861] netlink: 'syz.2.1363': attribute type 2 has an invalid length.
[  411.768261][ T9861] netlink: 'syz.2.1363': attribute type 4 has an invalid length.
[  411.784630][ T9861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1363'.
[  411.841131][ T9877] netlink: 'syz.0.1367': attribute type 3 has an invalid length.
[  411.855603][ T9877] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1367'.
[  412.018350][ T9881] netlink: 'syz.4.1368': attribute type 21 has an invalid length.
[  413.705826][ T9904] netlink: 'syz.4.1373': attribute type 3 has an invalid length.
[  413.736864][ T9904] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1373'.
[  414.002314][ T9902] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1375'.
[  414.238596][ T9912] netlink: 'syz.3.1377': attribute type 10 has an invalid length.
[  414.267249][ T9912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1377'.
[  414.327755][ T9912] batman_adv: batadv0: Adding interface: virt_wifi0
[  414.355222][ T9912] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  414.475292][ T9912] batman_adv: batadv0: Interface activated: virt_wifi0
[  415.137356][ T9919] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1378'.
[  415.229619][ T9919] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  415.350931][ T9919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  415.670997][ T9934] netlink: 'syz.1.1381': attribute type 3 has an invalid length.
[  415.745624][ T9934] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1381'.
[  415.856316][ T9935] netlink: 'syz.2.1384': attribute type 2 has an invalid length.
[  417.769441][ T9958] netlink: 'syz.0.1389': attribute type 3 has an invalid length.
[  417.823811][ T9958] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1389'.
[  419.414430][ T9981] netlink: 'syz.2.1396': attribute type 3 has an invalid length.
[  419.423315][ T9981] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1396'.
[  419.798368][ T9994] netlink: 'syz.4.1400': attribute type 2 has an invalid length.
[  420.740550][T10012] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1415'.
[  420.856068][T10019] netlink: 'syz.2.1405': attribute type 3 has an invalid length.
[  420.885122][T10019] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1405'.
[  421.167118][T10020] device bond0 entered promiscuous mode
[  421.187771][T10020] device bond_slave_0 entered promiscuous mode
[  421.204671][T10020] device team0 entered promiscuous mode
[  421.225046][T10020] device team_slave_0 entered promiscuous mode
[  421.256268][T10020] device team_slave_1 entered promiscuous mode
[  421.357421][T10020] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.422454][T10030] netlink: 'syz.3.1409': attribute type 3 has an invalid length.
[  421.447831][T10030] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1409'.
[  422.728023][T10046] netlink: 'syz.2.1412': attribute type 2 has an invalid length.
[  422.763618][T10052] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1412'.
[  423.301918][T10064] netlink: 'syz.2.1412': attribute type 21 has an invalid length.
[  423.381040][T10064] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1412'.
[  423.732300][T10061] device syzkaller0 entered promiscuous mode
[  423.789790][T10068] netlink: 'syz.0.1419': attribute type 21 has an invalid length.
[  423.797832][T10068] netlink: 'syz.0.1419': attribute type 1 has an invalid length.
[  423.849215][T10068] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.1419'.
[  424.964468][T10106] netlink: 'syz.3.1426': attribute type 3 has an invalid length.
[  425.011517][T10106] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1426'.
[  427.057062][T10128] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1427'.
[  431.621605][T10140] device syzkaller0 entered promiscuous mode
[  431.808726][ T4286] Bluetooth: hci4: unexpected subevent 0x06 length: 150 > 10
[  433.869125][ T4286] Bluetooth: hci4: command 0x2021 tx timeout
[  434.781645][T10181] netlink: 8964 bytes leftover after parsing attributes in process `syz.2.1439'.
[  435.029579][T10196] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1443'.
[  435.595777][T10218] netlink: 'syz.2.1448': attribute type 3 has an invalid length.
[  435.604069][T10218] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1448'.
[  438.117827][T10214] netlink: 'syz.3.1447': attribute type 10 has an invalid length.
[  438.154147][T10226] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1450'.
[  438.170920][T10226] tc_dump_action: action bad kind
[  438.176325][T10227] netlink: 35083 bytes leftover after parsing attributes in process `syz.1.1450'.
[  438.541736][T10241] netlink: 'syz.4.1455': attribute type 1 has an invalid length.
[  438.923236][T10248] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1456'.
[  440.261968][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  440.268541][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  441.676161][T10263] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.1462'.
[  442.769057][T10293] netlink: 'syz.2.1467': attribute type 10 has an invalid length.
[  443.052790][T10293] team0: Device hsr_slave_0 failed to register rx_handler
[  443.474679][T10306] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1468'.
[  443.765864][T10315] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.1472'.
[  443.901930][T10322] netlink: 'syz.2.1476': attribute type 2 has an invalid length.
[  443.930866][T10320] netlink: 'syz.1.1475': attribute type 2 has an invalid length.
[  443.996547][T10315] netlink: zone id is out of range
[  444.030834][T10315] netlink: zone id is out of range
[  444.094970][T10315] netlink: zone id is out of range
[  444.119323][T10315] netlink: zone id is out of range
[  444.137704][T10315] netlink: zone id is out of range
[  444.158302][T10315] netlink: zone id is out of range
[  444.179912][T10315] netlink: get zone limit has 8 unknown bytes
[  444.714829][T10336] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1480'.
[  445.460394][T10358] netlink: 'syz.3.1485': attribute type 39 has an invalid length.
[  445.912162][T10377] netlink: 'syz.2.1486': attribute type 3 has an invalid length.
[  445.984608][T10377] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1486'.
[  446.166759][T10384] netlink: 'syz.1.1491': attribute type 2 has an invalid length.
[  446.204693][T10378] netlink: 'syz.4.1488': attribute type 22 has an invalid length.
[  446.218394][T10378] netlink: 14526 bytes leftover after parsing attributes in process `syz.4.1488'.
[  446.952769][T10400] netlink: 'syz.4.1497': attribute type 2 has an invalid length.
[  448.249186][T10424] netlink: 'syz.1.1502': attribute type 7 has an invalid length.
[  448.272101][T10422] netlink: 'syz.0.1504': attribute type 10 has an invalid length.
[  448.861951][T10429] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1502'.
[  449.130709][T10426] netlink: 'syz.4.1503': attribute type 3 has an invalid length.
[  449.229283][T10426] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1503'.
[  453.376118][T10473] netlink: 'syz.0.1514': attribute type 2 has an invalid length.
[  456.254803][T10500] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1520'.
[  456.475618][T10508] netlink: 'syz.4.1522': attribute type 4 has an invalid length.
[  456.510031][T10508] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1522'.
[  456.561481][T10508] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  457.857714][T10532] netlink: 'syz.0.1530': attribute type 7 has an invalid length.
[  458.090862][T10535] netlink: 'syz.4.1529': attribute type 10 has an invalid length.
[  458.112764][T10540] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1530'.
[  459.092105][T10535] team0: Device hsr_slave_0 failed to register rx_handler
[  459.141477][T10539] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1531'.
[  459.163525][T10545] netlink: 'syz.2.1531': attribute type 10 has an invalid length.
[  459.174174][T10545] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1531'.
[  459.199958][T10545] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  459.317839][T10545] batman_adv: batadv0: Removing interface: virt_wifi0
[  459.545229][T10559] netlink: 'syz.2.1536': attribute type 29 has an invalid length.
[  459.720393][T10561] delete_channel: no stack
[  461.913761][T10559] netlink: 'syz.2.1536': attribute type 29 has an invalid length.
[  461.921984][T10565] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1538'.
[  463.649532][T10582] netlink: 'syz.0.1544': attribute type 28 has an invalid length.
[  463.657888][T10582] netlink: 'syz.0.1544': attribute type 29 has an invalid length.
[  463.677601][T10583] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1543'.
[  463.721063][T10583] netlink: 'syz.2.1543': attribute type 13 has an invalid length.
[  463.735646][T10582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1544'.
[  463.745052][T10583] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1543'.
[  463.884301][T10583] syz_tun: refused to change device tx_queue_len
[  463.959534][T10583] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  464.484159][T10615] netlink: 'syz.1.1552': attribute type 2 has an invalid length.
[  464.692228][T10616] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1553'.
[  464.818027][T10623] netlink: 'syz.3.1554': attribute type 3 has an invalid length.
[  464.932205][T10623] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1554'.
[  468.385291][T10653] netlink: 'syz.4.1562': attribute type 28 has an invalid length.
[  468.550281][T10664] netlink: 'syz.1.1565': attribute type 10 has an invalid length.
[  468.575540][T10662] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1564'.
[  468.901671][T10668] netlink: 'syz.4.1567': attribute type 3 has an invalid length.
[  469.050233][T10668] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1567'.
[  469.892992][T10674] netlink: 'syz.1.1569': attribute type 2 has an invalid length.
[  471.369837][T10703] FAULT_INJECTION: forcing a failure.
[  471.369837][T10703] name failslab, interval 1, probability 0, space 0, times 1
[  471.623206][T10703] CPU: 0 PID: 10703 Comm: syz.3.1575 Not tainted syzkaller #0
[  471.630793][T10703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  471.640912][T10703] Call Trace:
[  471.644390][T10703]  <TASK>
[  471.647523][T10703]  dump_stack_lvl+0x188/0x24e
[  471.652449][T10703]  ? show_regs_print_info+0x12/0x12
[  471.657730][T10703]  ? load_image+0x410/0x410
[  471.663296][T10703]  ? __might_sleep+0xd0/0xd0
[  471.668020][T10703]  ? __lock_acquire+0x7c40/0x7c40
[  471.673189][T10703]  should_fail_ex+0x390/0x4c0
[  471.678040][T10703]  should_failslab+0x5/0x20
[  471.682607][T10703]  slab_pre_alloc_hook+0x59/0x300
[  471.687701][T10703]  ? trace_call_bpf+0x5d6/0x6b0
[  471.692712][T10703]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  471.698602][T10703]  __kmem_cache_alloc_node+0x4f/0x270
[  471.704063][T10703]  ? tomoyo_realpath_from_path+0xe2/0x5c0
[  471.709936][T10703]  __kmalloc+0xa3/0x240
[  471.714172][T10703]  tomoyo_realpath_from_path+0xe2/0x5c0
[  471.719794][T10703]  ? tomoyo_domain+0xd2/0x120
[  471.724555][T10703]  ? tomoyo_path_number_perm+0x205/0x650
[  471.730384][T10703]  tomoyo_path_number_perm+0x22f/0x650
[  471.736100][T10703]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  471.741668][T10703]  ? trace_call_bpf+0xbf/0x6b0
[  471.746522][T10703]  ? trace_call_bpf+0xbf/0x6b0
[  471.751448][T10703]  ? trace_call_bpf+0x5d6/0x6b0
[  471.756665][T10703]  ? __fget_files+0x28/0x460
[  471.761454][T10703]  security_file_ioctl+0x6c/0xa0
[  471.766566][T10703]  __se_sys_ioctl+0x48/0x170
[  471.771253][T10703]  do_syscall_64+0x4c/0xa0
[  471.775758][T10703]  ? clear_bhb_loop+0x60/0xb0
[  471.780839][T10703]  ? clear_bhb_loop+0x60/0xb0
[  471.785594][T10703]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  471.791557][T10703] RIP: 0033:0x7f4d0039e0d9
[  471.796346][T10703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  471.817117][T10703] RSP: 002b:00007f4d0127d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  471.825646][T10703] RAX: ffffffffffffffda RBX: 00007f4d00626090 RCX: 00007f4d0039e0d9
[  471.834304][T10703] RDX: 00002000000000c0 RSI: 00000000401054d5 RDI: 0000000000000003
[  471.843068][T10703] RBP: 00007f4d0127d090 R08: 0000000000000000 R09: 0000000000000000
[  471.851704][T10703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  471.860635][T10703] R13: 00007f4d00626128 R14: 00007f4d00626090 R15: 00007ffead920c08
[  471.872220][T10703]  </TASK>
[  472.109306][T10703] ERROR: Out of memory at tomoyo_realpath_from_path.
[  472.158055][T10692] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1573'.
[  472.208219][T10702] device veth1_macvtap left promiscuous mode
[  472.752478][T10714] netlink: 'syz.1.1578': attribute type 2 has an invalid length.
[  472.776084][T10714] netlink: 'syz.1.1578': attribute type 1 has an invalid length.
[  472.794923][ T4286] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  472.828094][T10716] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  473.053827][T10716] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  473.080270][T10722] netlink: 'syz.3.1580': attribute type 3 has an invalid length.
[  473.088160][T10723] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  473.103490][T10722] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1580'.
[  473.117488][T10724] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  473.188282][T10727] netlink: 'syz.1.1581': attribute type 10 has an invalid length.
[  473.230400][T10727] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.242550][T10727] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.590142][T10727] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.599934][T10727] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.614200][T10727] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.623959][T10727] bridge0: port 1(bridge_slave_0) entered forwarding state
[  473.734289][T10727] device bridge0 entered promiscuous mode
[  473.933820][T10727] team0: Port device bridge0 added
[  474.061955][T10725] netlink: 'syz.4.1579': attribute type 29 has an invalid length.
[  475.186536][T10767] validate_nla: 1 callbacks suppressed
[  475.186576][T10767] netlink: 'syz.2.1594': attribute type 2 has an invalid length.
[  475.264185][T10772] C: renamed from team_slave_0
[  475.378594][T10772] netlink: 'syz.0.1592': attribute type 3 has an invalid length.
[  475.389883][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1592'.
[  475.403711][T10772] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  475.548441][T10772] netlink: 'syz.0.1592': attribute type 3 has an invalid length.
[  475.617699][T10772] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1592'.
[  475.906148][T10794] netlink: 'syz.0.1600': attribute type 2 has an invalid length.
[  475.952397][T10794] netlink: 'syz.0.1600': attribute type 1 has an invalid length.
[  476.056819][T10797] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1599'.
[  476.328256][T10799] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1601'.
[  476.439785][T10799] device caif0 entered promiscuous mode
[  476.445530][T10799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  477.870527][T10837] netlink: 'syz.1.1611': attribute type 2 has an invalid length.
[  478.265693][T10845] netlink: 'syz.3.1613': attribute type 2 has an invalid length.
[  478.313475][T10845] netlink: 'syz.3.1613': attribute type 1 has an invalid length.
[  478.576818][T10852] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1614'.
[  479.313396][T10864] netlink: 'syz.1.1617': attribute type 29 has an invalid length.
[  479.366656][T10864] netlink: 'syz.1.1617': attribute type 29 has an invalid length.
[  479.458883][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1618'.
[  479.557025][T10870] device ªªªªª6 left promiscuous mode
[  479.581969][T10870] device ªªªªª6 entered promiscuous mode
[  479.921125][T10870] bridge0: port 2(ªªªªª6) entered blocking state
[  479.927794][T10870] bridge0: port 2(ªªªªª6) entered disabled state
[  480.065732][T10870] A link change request failed with some changes committed already. Interface ªªªªª6 may have been left with an inconsistent configuration, please check.
[  480.297687][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): ªªªªª6: link becomes ready
[  480.326859][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  480.370550][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  480.405556][T10883] validate_nla: 1 callbacks suppressed
[  480.405577][T10883] netlink: 'syz.4.1619': attribute type 3 has an invalid length.
[  480.432280][T10889] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1623'.
[  480.552817][T10883] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1619'.
[  481.307600][T10899] netlink: 'syz.2.1626': attribute type 10 has an invalid length.
[  481.374994][T10899] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.386467][T10899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.726813][ T4286] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  481.779665][T10905] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  481.833846][T10899] team0: Port device bridge0 added
[  481.886437][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  481.923785][T10891] netlink: 'syz.1.1624': attribute type 10 has an invalid length.
[  481.941593][T10891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1624'.
[  481.997683][T10891] batman_adv: batadv0: Adding interface: veth0_vlan
[  482.068956][T10891] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  482.201616][T10891] batman_adv: batadv0: Interface activated: veth0_vlan
[  482.223544][T10905] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  482.260599][T10910] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  482.301940][T10918] netlink: 'syz.2.1630': attribute type 10 has an invalid length.
[  482.344590][T10918] team0: Device vxcan1 is of different type
[  482.427121][T10911] netlink: 'syz.0.1628': attribute type 29 has an invalid length.
[  482.537852][T10919] netlink: 'syz.4.1629': attribute type 2 has an invalid length.
[  482.631947][T10922] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1631'.
[  482.649397][T10919] netlink: 'syz.4.1629': attribute type 1 has an invalid length.
[  482.907934][T10933] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1634'.
[  483.171015][T10934] netlink: 14526 bytes leftover after parsing attributes in process `syz.0.1634'.
[  483.715013][T10944] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1638'.
[  484.392118][T10948] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1639'.
[  484.550475][T10950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1640'.
[  484.823243][T10965] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1644'.
[  485.040404][T10956] bond0: (slave bridge0): Releasing backup interface
[  485.234666][T10956] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.243684][T10956] bridge0: port 1(bridge_slave_0) entered forwarding state
[  485.370609][T10956] device bridge0 entered promiscuous mode
[  485.452595][T10956] team0: Port device bridge0 added
[  485.545709][ T8286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  485.787942][T10989] validate_nla: 6 callbacks suppressed
[  485.787983][T10989] netlink: 'syz.0.1651': attribute type 2 has an invalid length.
[  486.213671][T10993] __nla_validate_parse: 2 callbacks suppressed
[  486.213697][T10993] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1652'.
[  487.647230][T11013] device syzkaller0 entered promiscuous mode
[  492.461588][T11043] netlink: 'syz.3.1663': attribute type 10 has an invalid length.
[  492.985349][T11103] C: renamed from team_slave_0
[  493.021370][T11103] netlink: 'syz.4.1680': attribute type 2 has an invalid length.
[  493.068934][T11103] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1680'.
[  493.104996][T11103] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  493.347179][T11110] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.1682'.
[  493.867347][T11123] netlink: 'syz.1.1687': attribute type 3 has an invalid length.
[  493.875374][T11123] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1687'.
[  493.954860][T11129] netlink: 'syz.0.1686': attribute type 3 has an invalid length.
[  493.994584][T11129] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1686'.
[  494.840201][T11143] netlink: 'syz.0.1694': attribute type 13 has an invalid length.
[  494.848105][T11143] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1694'.
[  496.616656][T11179] netlink: 'syz.0.1702': attribute type 10 has an invalid length.
[  496.749197][T11179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1702'.
[  496.771325][T11179] bridge0: port 3(ipvlan1) entered blocking state
[  496.879929][T11179] bridge0: port 3(ipvlan1) entered disabled state
[  496.997018][T11179] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  497.950386][T11192] netlink: 'syz.1.1705': attribute type 3 has an invalid length.
[  498.016441][T11192] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1705'.
[  501.777987][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  501.784423][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  501.890456][T11229] netlink: 'syz.4.1714': attribute type 3 has an invalid length.
[  501.905137][T11229] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.1714'.
[  502.743865][T11249] netlink: 'syz.2.1717': attribute type 10 has an invalid length.
[  502.897687][T11249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1717'.
[  502.936007][T11250] netlink: 'syz.1.1720': attribute type 3 has an invalid length.
[  502.945190][T11250] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1720'.
[  502.955595][T11249] device ipvlan1 entered promiscuous mode
[  502.964817][T11249] bridge0: port 3(ipvlan1) entered blocking state
[  502.984559][T11249] bridge0: port 3(ipvlan1) entered disabled state
[  502.996105][T11249] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  503.622109][T11273] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1727'.
[  504.424310][T11289] netlink: 'syz.0.1743': attribute type 30 has an invalid length.
[  505.430261][T11305] netlink: 'syz.1.1735': attribute type 3 has an invalid length.
[  505.494498][T11305] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1735'.
[  505.614856][T11304] netlink: 'syz.3.1737': attribute type 10 has an invalid length.
[  505.643903][T11304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1737'.
[  505.659633][T11304] device ipvlan1 entered promiscuous mode
[  505.707070][T11304] bridge0: port 2(ipvlan1) entered blocking state
[  505.730058][T11304] bridge0: port 2(ipvlan1) entered disabled state
[  505.753941][T11304] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  506.105117][ T4286] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  506.206262][T11334] netlink: 'syz.1.1742': attribute type 1 has an invalid length.
[  506.334738][T11334] netlink: 'syz.1.1742': attribute type 39 has an invalid length.
[  508.032700][T11331] device syzkaller0 entered promiscuous mode
[  508.805684][ T4286] Bluetooth: hci3: ISO packet for unknown connection handle 20
[  509.751243][T11383] netlink: 'syz.3.1753': attribute type 3 has an invalid length.
[  509.779858][T11383] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1753'.
[  509.792202][T11381] netlink: 'syz.4.1755': attribute type 3 has an invalid length.
[  509.811742][T11381] netlink: 'syz.4.1755': attribute type 1 has an invalid length.
[  509.833442][T11381] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1755'.
[  512.965677][T11360] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1751'.
[  512.987672][T11360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  513.007316][T11360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  513.042292][T11400] netlink: 'syz.4.1760': attribute type 19 has an invalid length.
[  513.057637][T11400] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1760'.
[  513.345226][T11403] netlink: 'syz.2.1761': attribute type 10 has an invalid length.
[  513.442140][T11403] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.505665][T11403] device bridge_slave_1 left promiscuous mode
[  513.535168][T11403] bridge0: port 2(bridge_slave_1) entered disabled state
[  513.671086][T11416] device veth1_macvtap left promiscuous mode
[  513.698377][T11421] netlink: 'syz.1.1765': attribute type 1 has an invalid length.
[  513.770540][T11421] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1765'.
[  513.828156][T11416] device macsec0 left promiscuous mode
[  514.418397][T11413] netlink: 'syz.0.1764': attribute type 3 has an invalid length.
[  514.434603][T11413] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1764'.
[  515.705537][T11463] netlink: 'syz.1.1774': attribute type 10 has an invalid length.
[  515.757430][T11457] netlink: 'syz.1.1774': attribute type 30 has an invalid length.
[  516.605532][T11463] bond0: (slave team0): Releasing backup interface
[  516.623372][T11463] device team0 left promiscuous mode
[  516.649385][T11463] device team_slave_0 left promiscuous mode
[  516.676010][T11463] device team_slave_1 left promiscuous mode
[  516.696433][T11463] device bridge0 left promiscuous mode
[  516.788244][T11480] netlink: 'syz.3.1779': attribute type 1 has an invalid length.
[  516.791032][T11463] team0 (unregistering): Port device team_slave_0 removed
[  516.824867][T11480] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1779'.
[  516.839975][T11463] team0 (unregistering): Port device team_slave_1 removed
[  516.894698][T11463] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.902456][T11463] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.957431][T11463] team0 (unregistering): Port device bridge0 removed
[  516.999854][T11462] netlink: 'syz.2.1776': attribute type 2 has an invalid length.
[  517.018286][T11462] netlink: 'syz.2.1776': attribute type 1 has an invalid length.
[  517.043470][T11467] netlink: 'syz.4.1773': attribute type 21 has an invalid length.
[  517.387531][T11494] netlink: 125520 bytes leftover after parsing attributes in process `syz.2.1783'.
[  517.388003][T11488] delete_channel: no stack
[  517.703354][T11502] netlink: 'syz.3.1785': attribute type 3 has an invalid length.
[  517.784822][T11502] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1785'.
[  518.837745][T11526] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1791'.
[  518.889161][T11526] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  518.942980][T11526] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  519.912116][T11552] netlink: 'syz.0.1800': attribute type 3 has an invalid length.
[  519.934163][T11552] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1800'.
[  520.240269][T11561] netlink: 'syz.4.1801': attribute type 41 has an invalid length.
[  521.287414][T11585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1808'.
[  521.350223][T11585] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1808'.
[  522.618299][T11592] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1811'.
[  524.676877][T11603] netlink: 'syz.4.1812': attribute type 13 has an invalid length.
[  524.699496][T11603] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1812'.
[  524.710640][T11603] @: renamed from C
[  525.647995][T11619] netlink: 'syz.3.1815': attribute type 3 has an invalid length.
[  525.719737][T11619] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1815'.
[  526.071922][T11634] device syzkaller0 entered promiscuous mode
[  529.319588][T11649] netlink: 'syz.3.1822': attribute type 10 has an invalid length.
[  529.328059][T11649] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.335912][T11649] device bridge0 left promiscuous mode
[  529.345567][T11649] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.354065][T11649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  529.403266][T11649] team0: Port device bridge0 added
[  531.291619][T11685] netlink: 'syz.3.1832': attribute type 41 has an invalid length.
[  531.591014][T11685] device wlan1 entered promiscuous mode
[  531.720985][T11686] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1830'.
[  531.743896][T11686] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  531.798625][T11686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  531.900999][T11696] netlink: 'syz.1.1834': attribute type 3 has an invalid length.
[  532.009315][T11696] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1834'.
[  532.922646][T11706] netlink: 'syz.1.1835': attribute type 3 has an invalid length.
[  532.965580][T11706] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1835'.
[  533.736153][T11729] netlink: 'syz.0.1844': attribute type 2 has an invalid length.
[  533.795886][T11729] netlink: 'syz.0.1844': attribute type 11 has an invalid length.
[  533.885247][T11729] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1844'.
[  534.160389][T11738] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1846'.
[  534.424865][T11741] netlink: 'syz.2.1847': attribute type 3 has an invalid length.
[  534.472609][T11741] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1847'.
[  534.554445][T11742] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1846'.
[  535.059978][T11758] netlink: 'syz.3.1850': attribute type 28 has an invalid length.
[  535.068370][T11758] netlink: 'syz.3.1850': attribute type 3 has an invalid length.
[  535.156945][T11758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1850'.
[  538.769395][T11801] netlink: 'syz.3.1860': attribute type 3 has an invalid length.
[  538.777220][T11801] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1860'.
[  540.133023][T11821] syz_tun: tun_chr_ioctl cmd 1074275332
[  540.176831][T11817] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1864'.
[  540.198182][T11817] netlink: 'syz.2.1864': attribute type 1 has an invalid length.
[  540.247293][T11817] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1864'.
[  540.320720][T11817] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  542.379609][T11850] netlink: 'syz.4.1875': attribute type 3 has an invalid length.
[  542.394900][T11850] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1875'.
[  544.073153][T11861] netlink: 'syz.4.1880': attribute type 21 has an invalid length.
[  547.584547][T11887] netlink: 'syz.1.1886': attribute type 28 has an invalid length.
[  547.652018][T11887] netlink: 'syz.1.1886': attribute type 29 has an invalid length.
[  547.833237][T11887] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1886'.
[  549.638426][T11904] netlink: 'syz.4.1891': attribute type 3 has an invalid length.
[  549.700414][T11904] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1891'.
[  553.456677][T11938] netlink: 'syz.4.1900': attribute type 1 has an invalid length.
[  553.475598][T11938] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1900'.
[  553.507080][T11938] netlink: 'syz.4.1900': attribute type 29 has an invalid length.
[  553.581605][T11940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1900'.
[  553.617221][T11938] netlink: 'syz.4.1900': attribute type 29 has an invalid length.
[  554.397105][T11957] netlink: 'syz.2.1905': attribute type 3 has an invalid length.
[  554.479831][T11957] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1905'.
[  554.620622][T11959] sock: sock_timestamping_bind_phc: sock not bind to device
[  554.990102][T11972] netlink: 'syz.4.1908': attribute type 10 has an invalid length.
[  554.998297][T11972] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1908'.
[  555.007892][T11972] device bond0 entered promiscuous mode
[  555.016549][T11972] device bond_slave_0 entered promiscuous mode
[  555.023464][T11972] device bond_slave_1 entered promiscuous mode
[  555.030194][T11972] device bridge_slave_1 entered promiscuous mode
[  555.037110][T11972] bridge0: port 2(bond0) entered blocking state
[  555.044228][T11972] bridge0: port 2(bond0) entered disabled state
[  555.062939][T11972] bridge0: port 2(bond0) entered blocking state
[  555.069444][T11972] bridge0: port 2(bond0) entered forwarding state
[  555.107274][T11974] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1910'.
[  555.124488][T11976] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1908'.
[  555.241947][T11985] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1913'.
[  555.289969][T11985] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1913'.
[  555.480978][T11989] netlink: 'syz.3.1915': attribute type 3 has an invalid length.
[  555.504394][T11989] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1915'.
[  557.494461][T12013] netlink: 'syz.0.1922': attribute type 3 has an invalid length.
[  557.580308][T12013] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1922'.
[  557.615175][T12024] netlink: 'syz.2.1926': attribute type 2 has an invalid length.
[  557.682669][T12024] netlink: 'syz.2.1926': attribute type 8 has an invalid length.
[  557.756943][T12027] tipc: Started in network mode
[  557.842446][T12027] tipc: Node identity 9215a268, cluster identity 4711
[  557.910892][T12027] tipc: Node number set to 2450891368
[  558.213949][T12032] cgroup: fork rejected by pids controller in /syz0
[  559.179133][T12169] netlink: 'syz.1.1937': attribute type 10 has an invalid length.
[  559.255417][T12169] device netdevsim0 entered promiscuous mode
[  559.827983][ T4350] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.368172][T12176] netlink: 'syz.1.1940': attribute type 3 has an invalid length.
[  560.379168][T12176] __nla_validate_parse: 1 callbacks suppressed
[  560.379206][T12176] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1940'.
[  561.065775][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  561.075531][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  561.091597][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  561.110208][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  561.126975][T12190] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  561.134663][T12190] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  561.314673][T12183] delete_channel: no stack
[  561.563901][T12197] netlink: 'syz.2.1945': attribute type 3 has an invalid length.
[  561.579579][T12197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1945'.
[  563.165624][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  563.172204][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  563.231187][T12190] Bluetooth: hci1: command 0x0409 tx timeout
[  564.152164][ T4350] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.180667][T12206] netlink: 'syz.2.1947': attribute type 1 has an invalid length.
[  564.325074][ T4350] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.453305][ T4350] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  565.116538][T12230] netlink: 'syz.3.1953': attribute type 3 has an invalid length.
[  565.195170][T12230] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1953'.
[  565.299251][ T4286] Bluetooth: hci1: command 0x041b tx timeout
[  565.358645][T12228] netlink: 'syz.4.1952': attribute type 1 has an invalid length.
[  565.379443][T12228] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1952'.
[  565.637298][T12189] chnl_net:caif_netlink_parms(): no params data found
[  565.742065][T12248] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1956'.
[  565.791874][T12248] bridge_slave_1: default FDB implementation only supports local addresses
[  565.987330][T12254] netlink: 'syz.1.1957': attribute type 1 has an invalid length.
[  566.022689][T12259] netlink: 'syz.1.1957': attribute type 29 has an invalid length.
[  566.060831][T12254] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1957'.
[  567.015700][T12272] netlink: 'syz.4.1960': attribute type 2 has an invalid length.
[  567.321033][T12259] netlink: 'syz.1.1957': attribute type 29 has an invalid length.
[  567.339434][T12254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1957'.
[  567.379003][ T4286] Bluetooth: hci1: command 0x040f tx timeout
[  567.588571][T12189] bridge0: port 1(bridge_slave_0) entered blocking state
[  567.618368][T12189] bridge0: port 1(bridge_slave_0) entered disabled state
[  567.679000][T12189] device bridge_slave_0 entered promiscuous mode
[  567.688660][T12189] bridge0: port 2(bridge_slave_1) entered blocking state
[  567.707140][T12189] bridge0: port 2(bridge_slave_1) entered disabled state
[  567.715670][T12189] device bridge_slave_1 entered promiscuous mode
[  567.824813][T12189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  567.871961][T12189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  568.143200][T12282] netlink: 'syz.2.1961': attribute type 3 has an invalid length.
[  568.204940][T12189] team0: Port device team_slave_0 added
[  568.212095][T12282] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1961'.
[  568.257060][T12300] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1965'.
[  568.311816][T12302] netlink: 'syz.1.1965': attribute type 10 has an invalid length.
[  568.352361][T12302] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1965'.
[  568.477855][T12189] team0: Port device team_slave_1 added
[  568.502209][T12297] delete_channel: no stack
[  568.669555][T12189] batman_adv: batadv0: Adding interface: batadv_slave_0
[  568.676643][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.745341][T12189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  568.827713][T12189] batman_adv: batadv0: Adding interface: batadv_slave_1
[  568.851745][T12189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  568.994597][T12189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  569.458907][ T4286] Bluetooth: hci1: command 0x0419 tx timeout
[  570.130436][T12189] device hsr_slave_0 entered promiscuous mode
[  570.191359][T12189] device hsr_slave_1 entered promiscuous mode
[  570.207798][T12336] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1972'.
[  570.230302][T12189] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  570.249160][T12189] Cannot create hsr debugfs directory
[  570.259647][T12339] netlink: 105 bytes leftover after parsing attributes in process `syz.4.1972'.
[  570.560389][T12339] netlink: 105 bytes leftover after parsing attributes in process `syz.4.1972'.
[  570.579462][T12348] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1974'.
[  570.671024][T12348] netlink: 'syz.2.1974': attribute type 10 has an invalid length.
[  570.685299][T12348] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  570.798964][ T4350] device hsr_slave_0 left promiscuous mode
[  570.808383][ T4350] device hsr_slave_1 left promiscuous mode
[  570.821785][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  570.832027][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_0
[  570.846709][T12356] netlink: 'syz.3.1976': attribute type 2 has an invalid length.
[  570.847225][ T4350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  570.862560][ T4350] batman_adv: batadv0: Removing interface: batadv_slave_1
[  570.871172][ T4350] device bridge_slave_1 left promiscuous mode
[  570.879567][ T4350] bridge0: port 2(bridge_slave_1) entered disabled state
[  570.889913][ T4350] device bridge_slave_0 left promiscuous mode
[  570.897937][ T4350] bridge0: port 1(bridge_slave_0) entered disabled state
[  570.925707][ T4350] device veth1_vlan left promiscuous mode
[  570.932240][ T4350] device veth0_vlan left promiscuous mode
[  571.566558][ T4350] team0 (unregistering): Port device team_slave_1 removed
[  571.615920][ T4350] team0 (unregistering): Port device C removed
[  572.001457][ T4350] team0 (unregistering): Port device bridge0 removed
[  572.151420][T12354] netlink: 'syz.4.1977': attribute type 27 has an invalid length.
[  572.176226][T12355] netlink: 'syz.4.1977': attribute type 27 has an invalid length.
[  572.394985][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1979'.
[  572.438569][T12369] netlink: 'syz.4.1979': attribute type 10 has an invalid length.
[  572.556608][T12369] device team0 left promiscuous mode
[  572.587316][T12369] device @ left promiscuous mode
[  572.593038][T12369] device team_slave_1 left promiscuous mode
[  572.600985][T12369] device bridge0 left promiscuous mode
[  572.608430][T12369] ¥: port 1(team0) entered disabled state
[  572.618773][T12369] team0 (unregistering): Port device @ removed
[  572.656842][T12369] team0 (unregistering): Port device team_slave_1 removed
[  572.665600][T12369] bridge0: port 2(bond0) entered disabled state
[  572.672374][T12369] bridge0: port 1(bridge_slave_0) entered disabled state
[  572.699336][T12369] team0 (unregistering): Port device bridge0 removed
[  572.945008][T12373] netlink: 'syz.3.1980': attribute type 3 has an invalid length.
[  572.973651][T12373] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1980'.
[  573.654319][T12386] netlink: 'syz.3.1983': attribute type 29 has an invalid length.
[  573.718201][T12386] netlink: 'syz.3.1983': attribute type 29 has an invalid length.
[  573.748752][T12382] netlink: 'syz.3.1983': attribute type 29 has an invalid length.
[  573.767376][T12391] netlink: 'syz.3.1983': attribute type 29 has an invalid length.
[  574.003178][T12189] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  574.081956][T12189] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  574.150584][T12189] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  574.223440][T12189] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  574.986989][T12189] 8021q: adding VLAN 0 to HW filter on device bond0
[  575.032259][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  575.056813][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  575.103529][T12189] 8021q: adding VLAN 0 to HW filter on device team0
[  575.119707][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  575.149033][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  575.182305][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.189627][ T8284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  575.210755][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  575.272070][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  575.293319][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  575.343340][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.351594][ T8284] bridge0: port 2(bridge_slave_1) entered forwarding state
[  575.376819][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  575.403537][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  575.410139][T12423] netlink: 'syz.4.1990': attribute type 2 has an invalid length.
[  575.455151][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  575.477170][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  575.516943][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  575.536238][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  575.556254][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  575.570140][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  575.590007][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  575.642184][T12189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  575.675833][T12189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  575.688148][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  575.698516][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  576.497417][T12435] netlink: 'syz.2.1993': attribute type 3 has an invalid length.
[  576.519479][T12435] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1993'.
[  577.038133][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  577.058696][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  577.163245][T12189] 8021q: adding VLAN 0 to HW filter on device batadv0
[  577.250788][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  577.270054][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  577.366526][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  577.386479][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  577.420349][T12189] device veth0_vlan entered promiscuous mode
[  577.444536][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  577.475871][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  577.512782][T12189] device veth1_vlan entered promiscuous mode
[  577.592701][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  577.617469][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  577.639756][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  577.668091][ T9157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  577.700562][T12189] device veth0_macvtap entered promiscuous mode
[  577.742167][T12189] device veth1_macvtap entered promiscuous mode
[  577.794463][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.807019][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.838999][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.861830][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.881501][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.919121][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.943923][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  577.965355][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  577.994289][T12189] batman_adv: batadv0: Interface activated: batadv_slave_0
[  578.023204][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.050165][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.074853][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.100727][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.111247][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.122243][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.140063][T12189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  578.163244][T12189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  578.217113][T12189] batman_adv: batadv0: Interface activated: batadv_slave_1
[  578.255976][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  578.278736][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  578.288550][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  578.326890][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  578.363064][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  578.388046][ T8274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  578.687975][T12475] device syzkaller0 entered promiscuous mode
[  578.714240][T12189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  578.755569][T12189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  578.800343][T12189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  578.832694][T12189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  579.360941][T12501] netlink: 'syz.2.2004': attribute type 2 has an invalid length.
[  579.966684][T12507] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2005'.
[  579.976410][T12507] netlink: 'syz.3.2005': attribute type 1 has an invalid length.
[  581.945968][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.030736][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.049313][T12516] netlink: 'syz.3.2006': attribute type 1 has an invalid length.
[  582.057216][T12516] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2006'.
[  582.158691][T12518] netlink: 'syz.4.2007': attribute type 3 has an invalid length.
[  582.166921][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  582.195919][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.231333][T12525] netlink: 'syz.2.2009': attribute type 2 has an invalid length.
[  582.231469][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.268233][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  582.269055][T12518] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2007'.
[  582.276239][T12525] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2009'.
[  583.863633][T12556] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2015'.
[  583.889071][T12564] netlink: 'syz.0.2015': attribute type 10 has an invalid length.
[  583.929148][T12564] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2015'.
[  584.303835][T12572] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2017'.
[  584.649814][T12581] netlink: 'syz.4.2019': attribute type 2 has an invalid length.
[  585.229502][T12591] netlink: 'syz.3.2023': attribute type 25 has an invalid length.
[  585.237570][T12591] netlink: 'syz.3.2023': attribute type 3 has an invalid length.
[  585.318932][T12596] netlink: 'syz.0.2022': attribute type 3 has an invalid length.
[  585.377551][T12596] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2022'.
[  585.393815][T12599] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  585.401140][T12599] IPv6: NLM_F_CREATE should be set when creating new route
[  585.408681][T12599] IPv6: NLM_F_CREATE should be set when creating new route
[  585.516220][T12603] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2025'.
[  585.569188][T12599] netlink: 'syz.2.2025': attribute type 2 has an invalid length.
[  585.591843][T12599] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2025'.
[  585.897485][T12622] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2028'.
[  586.347568][T12640] netlink: 'syz.4.2034': attribute type 13 has an invalid length.
[  586.379096][T12640] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2034'.
[  586.606077][T12648] netlink: 'syz.0.2036': attribute type 2 has an invalid length.
[  587.167412][T12656] : port 1(ip6gretap0) entered blocking state
[  587.217015][T12656] : port 1(ip6gretap0) entered disabled state
[  587.268239][T12656] device ip6gretap0 entered promiscuous mode
[  587.316088][T12660] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2038'.
[  587.353502][T12658] device ip6gretap0 left promiscuous mode
[  587.364686][T12658] : port 1(ip6gretap0) entered disabled state
[  587.797581][T12681] delete_channel: no stack
[  588.172724][T12684] netlink: 'syz.3.2041': attribute type 3 has an invalid length.
[  588.208890][T12684] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2041'.
[  589.570314][T12712] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2050'.
[  589.896097][T12720] netlink: 'syz.0.2053': attribute type 2 has an invalid length.
[  590.020127][T12717] tun0: tun_chr_ioctl cmd 1074812118
[  590.069578][T12717] tun0: tun_chr_ioctl cmd 2147767519
[  590.221176][T12721] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2049'.
[  591.671766][T12745] netlink: 'syz.2.2058': attribute type 3 has an invalid length.
[  591.804681][T12745] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2058'.
[  592.595659][T12771] netlink: 'syz.4.2064': attribute type 2 has an invalid length.
[  592.649205][T12771] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2064'.
[  593.073241][T12778] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2065'.
[  593.602879][T12792] netlink: 'syz.2.2068': attribute type 21 has an invalid length.
[  593.603950][T12786] netlink: 'syz.4.2067': attribute type 2 has an invalid length.
[  593.652421][T12792] netlink: 'syz.2.2068': attribute type 2 has an invalid length.
[  593.697333][T12792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2068'.
[  593.844934][T12801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2070'.
[  593.879266][T12801] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2070'.
[  594.116954][T12810] netlink: 'syz.1.2072': attribute type 3 has an invalid length.
[  594.149127][T12810] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2072'.
[  594.429900][T12815] netlink: 'syz.2.2074': attribute type 3 has an invalid length.
[  594.438901][T12815] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2074'.
[  594.852708][T12828] netlink: 'syz.4.2076': attribute type 29 has an invalid length.
[  594.919285][T12828] netlink: 'syz.4.2076': attribute type 29 has an invalid length.
[  595.463779][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.524635][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.534464][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.545137][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.554378][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.564445][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.575565][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.586786][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.596805][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  595.606573][T12846] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  597.423726][T12859] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2082'.
[  597.936026][T12878] netlink: 'syz.0.2086': attribute type 2 has an invalid length.
[  598.563347][T12886] netlink: 'syz.2.2091': attribute type 29 has an invalid length.
[  598.617036][T12886] netlink: 'syz.2.2091': attribute type 29 has an invalid length.
[  598.684960][T12891] netlink: 'syz.2.2091': attribute type 29 has an invalid length.
[  600.761998][T12920] netlink: 'syz.3.2099': attribute type 2 has an invalid length.
[  600.830526][T12920] netlink: 'syz.3.2099': attribute type 1 has an invalid length.
[  601.040011][T12920] netlink: 'syz.3.2099': attribute type 4 has an invalid length.
[  601.167101][T12920] netlink: 'syz.3.2099': attribute type 6 has an invalid length.
[  601.179026][T12920] netlink: 'syz.3.2099': attribute type 7 has an invalid length.
[  601.190028][T12920] netlink: 'syz.3.2099': attribute type 5 has an invalid length.
[  601.200309][T12920] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.2099'.
[  601.428578][T12933] netlink: 'syz.4.2101': attribute type 3 has an invalid length.
[  601.500410][T12933] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2101'.
[  602.760278][T12963] netlink: 'syz.0.2111': attribute type 13 has an invalid length.
[  602.790265][T12963] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2111'.
[  602.858217][ T4286] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  603.381840][T12979] netlink: 'syz.1.2115': attribute type 2 has an invalid length.
[  603.430602][T12979] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2115'.
[  604.701322][T13010] device netdevsim0 entered promiscuous mode
[  604.742828][T12998] netlink: 'syz.1.2120': attribute type 3 has an invalid length.
[  604.787163][T12998] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2120'.
[  605.104659][T13017] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2127'.
[  605.940799][T13020] validate_nla: 1 callbacks suppressed
[  605.940852][T13020] netlink: 'syz.0.2138': attribute type 3 has an invalid length.
[  606.010317][T13020] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2138'.
[  606.255141][T13036] netlink: 'syz.4.2132': attribute type 11 has an invalid length.
[  606.319986][T13036] netlink: 'syz.4.2132': attribute type 11 has an invalid length.
[  606.365057][T13036] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2132'.
[  607.281066][T13069] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2143'.
[  607.329295][T13069] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  607.388469][T13069] net_ratelimit: 3256 callbacks suppressed
[  607.388563][T13069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  607.723894][T13076] netlink: 'syz.1.2144': attribute type 3 has an invalid length.
[  607.888972][T13076] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2144'.
[  608.828658][T13108] netlink: 'syz.0.2154': attribute type 2 has an invalid length.
[  609.762253][T13125] netlink: 'syz.1.2158': attribute type 10 has an invalid length.
[  610.171519][T13142] netlink: 'syz.4.2162': attribute type 3 has an invalid length.
[  610.198896][T13142] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2162'.
[  612.863696][T13145] IPv6: pim6reg1: Disabled Multicast RS
[  613.006331][T13150] device syzkaller0 entered promiscuous mode
[  613.106136][T13145] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2163'.
[  613.794737][T13174] netlink: 'syz.2.2171': attribute type 2 has an invalid length.
[  614.258086][T13185] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2173'.
[  616.398303][T13209] netlink: 'syz.4.2177': attribute type 3 has an invalid length.
[  616.407321][T13209] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2177'.
[  617.122492][T13162] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2168'.
[  617.133333][T13184] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2173'.
[  619.108044][T13231] delete_channel: no stack
[  619.532554][T13245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2188'.
[  619.553260][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'.
[  619.563011][T13245] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2188'.
[  619.586672][T13249] netlink: 'syz.2.2190': attribute type 2 has an invalid length.
[  619.589069][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'.
[  619.630432][T13245] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2188'.
[  619.668207][T13245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2188'.
[  619.669164][T13251] netlink: 'syz.4.2189': attribute type 29 has an invalid length.
[  619.683989][T13245] netlink: 33 bytes leftover after parsing attributes in process `syz.3.2188'.
[  619.866566][T13251] netlink: 'syz.4.2189': attribute type 29 has an invalid length.
[  619.984432][T13245] device syzkaller0 entered promiscuous mode
[  620.152508][T13259] netlink: 'syz.1.2191': attribute type 3 has an invalid length.
[  620.165048][T13259] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2191'.
[  620.357327][T13266] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2193'.
[  620.576283][T13266] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2193'.
[  623.548981][T13304] netlink: 'syz.0.2205': attribute type 10 has an invalid length.
[  623.648820][T13304] team0: Device wg1 is of different type
[  623.901892][T13316] netlink: 'syz.1.2207': attribute type 2 has an invalid length.
[  623.923433][T13317] netlink: 'syz.4.2206': attribute type 3 has an invalid length.
[  624.385232][T13325] netlink: 'syz.4.2212': attribute type 2 has an invalid length.
[  624.581249][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  624.587661][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  627.257195][T13350] __nla_validate_parse: 3 callbacks suppressed
[  627.257241][T13350] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2217'.
[  627.341302][T13353] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2219'.
[  627.404888][T13353] netlink: 192156 bytes leftover after parsing attributes in process `syz.1.2219'.
[  627.444318][T13353] netlink: zone id is out of range
[  627.449989][T13353] netlink: zone id is out of range
[  627.455470][T13353] netlink: zone id is out of range
[  627.467701][T13353] netlink: zone id is out of range
[  627.488571][T13353] netlink: zone id is out of range
[  627.519182][T13350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2217'.
[  627.530287][T13353] netlink: zone id is out of range
[  627.535593][T13353] netlink: zone id is out of range
[  627.542368][T13353] netlink: zone id is out of range
[  627.591416][T13353] netlink: zone id is out of range
[  627.596738][T13353] netlink: zone id is out of range
[  628.471957][T13385] netlink: 'syz.2.2228': attribute type 21 has an invalid length.
[  628.480223][T13385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2228'.
[  628.744172][T13394] netlink: 'syz.3.2230': attribute type 2 has an invalid length.
[  631.872044][T13419] netlink: 'syz.1.2235': attribute type 29 has an invalid length.
[  632.125299][T13419] netlink: 'syz.1.2235': attribute type 29 has an invalid length.
[  632.165427][T13418] netlink: 'syz.1.2235': attribute type 29 has an invalid length.
[  632.704655][T13433] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  632.786366][T13433] net_ratelimit: 15 callbacks suppressed
[  632.786387][T13433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  633.678406][T13446] batadv_slave_0: mtu less than device minimum
[  633.857387][T13450] netlink: 'syz.1.2244': attribute type 2 has an invalid length.
[  633.975397][T13452] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2246'.
[  634.097589][T13459] netlink: 'syz.3.2246': attribute type 21 has an invalid length.
[  634.400078][T13465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2247'.
[  634.470119][T13465] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2247'.
[  635.086821][T13475] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.2250'.
[  636.597910][T13500] netlink: 'syz.1.2256': attribute type 21 has an invalid length.
[  636.625290][T13500] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2256'.
[  636.723871][T13503] batadv_slave_0: mtu less than device minimum
[  637.461502][T13519] netlink: 'syz.4.2261': attribute type 2 has an invalid length.
[  637.563296][T13514] device syzkaller0 entered promiscuous mode
[  640.464175][T13547] netlink: 'syz.4.2269': attribute type 4 has an invalid length.
[  640.488580][T13547] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2269'.
[  642.432912][T13558] device vcan0 entered promiscuous mode
[  642.446361][T13558] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  642.492770][T13560] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2271'.
[  642.549403][T13565] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2274'.
[  642.599698][T13567] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.2274'.
[  642.743681][T13568] netlink: 'syz.4.2275': attribute type 2 has an invalid length.
[  643.394120][T13578] netlink: 'syz.0.2276': attribute type 15 has an invalid length.
[  643.402448][T13578] netlink: 'syz.0.2276': attribute type 7 has an invalid length.
[  643.410519][T13578] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2276'.
[  643.567846][T13581] netlink: 'syz.1.2278': attribute type 10 has an invalid length.
[  643.598400][T13581] bridge0: port 2(bridge_slave_1) entered blocking state
[  643.605754][T13581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  643.613536][T13581] bridge0: port 1(bridge_slave_0) entered blocking state
[  643.620841][T13581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  643.661526][T13581] device bridge0 entered promiscuous mode
[  643.732068][T13581] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  644.936382][T13619] netlink: 'syz.3.2290': attribute type 2 has an invalid length.
[  645.658234][T13633] netlink: 'syz.4.2293': attribute type 46 has an invalid length.
[  645.770609][T13633] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2293'.
[  647.607303][T13674] netlink: 'syz.2.2306': attribute type 2 has an invalid length.
[  648.026818][T13670] netlink: 'syz.1.2302': attribute type 3 has an invalid length.
[  648.089092][T13670] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2302'.
[  648.595515][T13685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  648.603581][T13685] IPv6: NLM_F_CREATE should be set when creating new route
[  648.731351][T13685] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2309'.
[  649.163507][T13684] delete_channel: no stack
[  649.701056][T13703] netlink: 'syz.1.2312': attribute type 21 has an invalid length.
[  649.729049][T13703] IPv6: NLM_F_CREATE should be specified when creating new route
[  649.754957][T13703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  649.762317][T13703] IPv6: NLM_F_CREATE should be set when creating new route
[  649.769715][T13703] IPv6: NLM_F_CREATE should be set when creating new route
[  649.776976][T13703] IPv6: NLM_F_CREATE should be set when creating new route
[  650.010370][T13714] netlink: 'syz.2.2317': attribute type 29 has an invalid length.
[  650.058739][T13714] netlink: 'syz.2.2317': attribute type 29 has an invalid length.
[  650.134511][T13714] netlink: 'syz.2.2317': attribute type 29 has an invalid length.
[  650.398084][T13721] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2319'.
[  650.542302][T13721] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  650.636508][T13721] CPU: 1 PID: 13721 Comm: syz.4.2319 Not tainted syzkaller #0
[  650.644417][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  650.654703][T13721] Call Trace:
[  650.658027][T13721]  <TASK>
[  650.661088][T13721]  dump_stack_lvl+0x188/0x24e
[  650.665807][T13721]  ? show_regs_print_info+0x12/0x12
[  650.671152][T13721]  ? load_image+0x410/0x410
[  650.675705][T13721]  sysfs_warn_dup+0x8a/0xa0
[  650.680234][T13721]  sysfs_do_create_link_sd+0xc0/0x110
[  650.685639][T13721]  device_add+0x83b/0x1050
[  650.690168][T13721]  wiphy_register+0x1d8b/0x2aa0
[  650.695126][T13721]  ? cfg80211_event_work+0x40/0x40
[  650.700273][T13721]  ? minstrel_ht_alloc+0x894/0xa20
[  650.705527][T13721]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  650.711660][T13721]  ieee80211_register_hw+0x2d48/0x39f0
[  650.717218][T13721]  ? ieee80211_register_hw+0xee1/0x39f0
[  650.722941][T13721]  ? ieee80211_register_hw+0xee1/0x39f0
[  650.728522][T13721]  ? ieee80211_tasklet_handler+0x20/0x20
[  650.734175][T13721]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  650.740102][T13721]  ? __debug_object_init+0xed/0x440
[  650.745345][T13721]  ? memset+0x1e/0x40
[  650.749360][T13721]  ? __hrtimer_init+0x189/0x270
[  650.754248][T13721]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  650.760074][T13721]  ? memcpy+0x3c/0x60
[  650.764084][T13721]  hwsim_new_radio_nl+0xab7/0xc90
[  650.769158][T13721]  genl_family_rcv_msg_doit+0x22f/0x350
[  650.774759][T13721]  ? end_current_label_crit_section+0x170/0x170
[  650.781035][T13721]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  650.786972][T13721]  ? bpf_lsm_capable+0x5/0x10
[  650.791673][T13721]  ? security_capable+0x85/0xb0
[  650.796565][T13721]  genl_rcv_msg+0x601/0x790
[  650.801179][T13721]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  650.807385][T13721]  ? genl_bind+0x360/0x360
[  650.812171][T13721]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  650.818537][T13721]  ? lock_acquire+0x225/0x4a0
[  650.823345][T13721]  netlink_rcv_skb+0x1ef/0x440
[  650.828175][T13721]  ? genl_bind+0x360/0x360
[  650.832619][T13721]  ? netlink_ack+0x1160/0x1160
[  650.837434][T13721]  ? down_read+0x1a8/0x2d0
[  650.841967][T13721]  genl_rcv+0x24/0x40
[  650.845968][T13721]  netlink_unicast+0x7ad/0x920
[  650.850777][T13721]  netlink_sendmsg+0x8ad/0xbd0
[  650.855601][T13721]  ? netlink_getsockopt+0x550/0x550
[  650.861006][T13721]  ? apparmor_socket_sendmsg+0x8a/0x330
[  650.866592][T13721]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  650.871984][T13721]  ? security_socket_sendmsg+0x7c/0xa0
[  650.877466][T13721]  ? netlink_getsockopt+0x550/0x550
[  650.882694][T13721]  ____sys_sendmsg+0x5ed/0x9a0
[  650.887572][T13721]  ? __sys_sendmsg_sock+0x30/0x30
[  650.892712][T13721]  ? __import_iovec+0x306/0x510
[  650.897687][T13721]  ? import_iovec+0x6f/0xa0
[  650.902232][T13721]  ___sys_sendmsg+0x2a2/0x360
[  650.906970][T13721]  ? __sys_sendmsg+0x2a0/0x2a0
[  650.911857][T13721]  __se_sys_sendmsg+0x1c3/0x2b0
[  650.916728][T13721]  ? ct_nmi_exit+0x145/0x1c0
[  650.921349][T13721]  ? __x64_sys_sendmsg+0x80/0x80
[  650.926353][T13721]  ? lockdep_hardirqs_on+0x94/0x140
[  650.931602][T13721]  do_syscall_64+0x4c/0xa0
[  650.936069][T13721]  ? clear_bhb_loop+0x60/0xb0
[  650.940799][T13721]  ? clear_bhb_loop+0x60/0xb0
[  650.945525][T13721]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  650.951445][T13721] RIP: 0033:0x7f424079e0d9
[  650.955970][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.975595][T13721] RSP: 002b:00007f4241733028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  650.984123][T13721] RAX: ffffffffffffffda RBX: 00007f4240a26090 RCX: 00007f424079e0d9
[  650.992119][T13721] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  651.000133][T13721] RBP: 00007f4240835024 R08: 0000000000000000 R09: 0000000000000000
[  651.008139][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  651.016128][T13721] R13: 00007f4240a26128 R14: 00007f4240a26090 R15: 00007ffe64d72058
[  651.024184][T13721]  </TASK>
[  651.452219][T13729] netlink: 'syz.3.2321': attribute type 3 has an invalid length.
[  651.479136][T13729] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2321'.
[  651.868614][T13747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.666389][T13789] netlink: 'syz.4.2336': attribute type 3 has an invalid length.
[  653.769553][T13789] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2336'.
[  653.924857][T13795] netlink: 'syz.2.2338': attribute type 3 has an invalid length.
[  653.953240][T13795] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2338'.
[  654.057415][T13796] ¥: port 1(team0) entered blocking state
[  654.119817][T13796] ¥: port 1(team0) entered disabled state
[  654.128681][T13796] device team0 entered promiscuous mode
[  654.153240][T13796] device team_slave_0 entered promiscuous mode
[  654.179254][T13796] device team_slave_1 entered promiscuous mode
[  654.228970][T13796] device geneve1 entered promiscuous mode
[  654.250661][T13796] device bridge0 entered promiscuous mode
[  654.319289][T13798] device team0 left promiscuous mode
[  654.354918][T13798] device team_slave_0 left promiscuous mode
[  654.429046][T13798] device team_slave_1 left promiscuous mode
[  654.435196][T13798] device geneve1 left promiscuous mode
[  654.508254][T13798] device bridge0 left promiscuous mode
[  654.544760][T13798] ¥: port 1(team0) entered disabled state
[  654.598158][T13805] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2341'.
[  654.623660][T13802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  654.631486][T13802] IPv6: NLM_F_CREATE should be set when creating new route
[  654.639139][T13802] IPv6: NLM_F_CREATE should be set when creating new route
[  654.647302][T13802] IPv6: NLM_F_CREATE should be set when creating new route
[  654.871558][T13801] delete_channel: no stack
[  655.248455][T13812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2344'.
[  655.289277][T13812] : renamed from caif0
[  655.345659][T13812] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check.
[  655.552501][T13813] netlink: 'syz.3.2344': attribute type 5 has an invalid length.
[  656.579426][T13831] device sit0 entered promiscuous mode
[  656.721350][T13837] netlink: 'syz.4.2350': attribute type 10 has an invalid length.
[  656.745616][T13837] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2350'.
[  656.771560][T13837] device hsr0 entered promiscuous mode
[  656.777633][T13837] bridge0: port 3(hsr0) entered blocking state
[  656.794115][T13837] bridge0: port 3(hsr0) entered disabled state
[  657.268231][T13848] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2352'.
[  657.339653][T13848] netlink: zone id is out of range
[  657.344922][T13848] netlink: zone id is out of range
[  657.413295][T13848] netlink: zone id is out of range
[  657.441483][T13848] netlink: zone id is out of range
[  657.478939][T13848] netlink: zone id is out of range
[  657.495236][T13848] netlink: zone id is out of range
[  657.500142][T13850] netlink: 'syz.3.2353': attribute type 3 has an invalid length.
[  657.546769][T13848] netlink: del zone limit has 4 unknown bytes
[  657.680271][T13850] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2353'.
[  658.109801][T13856] delete_channel: no stack
[  658.566324][T13871] netlink: 'syz.3.2360': attribute type 2 has an invalid length.
[  661.005223][T13893] ¥: port 1(team0) entered blocking state
[  661.016299][T13911] netlink: 'syz.3.2367': attribute type 3 has an invalid length.
[  661.039395][T13893] ¥: port 1(team0) entered disabled state
[  661.066849][T13911] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2367'.
[  661.097510][T13893] device team0 entered promiscuous mode
[  661.108805][T13893] device team_slave_1 entered promiscuous mode
[  661.115217][T13893] device geneve1 entered promiscuous mode
[  661.189252][T13893] device wlan1 entered promiscuous mode
[  661.229334][T13893] device bridge0 entered promiscuous mode
[  661.272045][T13900] device team0 left promiscuous mode
[  661.323910][T13900] device team_slave_1 left promiscuous mode
[  661.370918][T13900] device geneve1 left promiscuous mode
[  661.376694][T13900] device wlan1 left promiscuous mode
[  661.406401][T13900] device bridge0 left promiscuous mode
[  661.425135][T13900] ¥: port 1(team0) entered disabled state
[  665.638188][T13937] netlink: 'syz.3.2377': attribute type 10 has an invalid length.
[  665.695148][T13939] netlink: 'syz.4.2378': attribute type 2 has an invalid length.
[  666.542558][T13937] team0: Device gre0 is of different type
[  666.915715][T13959] netlink: 'syz.1.2383': attribute type 3 has an invalid length.
[  667.019914][T13959] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2383'.
[  667.218029][T13954] netlink: 'syz.0.2382': attribute type 10 has an invalid length.
[  667.369785][T13954] team0: Device hsr_slave_0 failed to register rx_handler
[  670.546627][T13974] netlink: 'syz.2.2385': attribute type 25 has an invalid length.
[  670.559134][T13974] netlink: 'syz.2.2385': attribute type 28 has an invalid length.
[  670.757348][T13990] netlink: 'syz.1.2399': attribute type 4 has an invalid length.
[  670.990457][T14001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2392'.
[  671.064630][T14003] netlink: 'syz.0.2392': attribute type 1 has an invalid length.
[  671.111469][T14003] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2392'.
[  671.802884][T14023] netlink: 'syz.3.2396': attribute type 2 has an invalid length.
[  673.256614][T14047] netlink: 'syz.1.2401': attribute type 3 has an invalid length.
[  673.308067][T14047] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2401'.
[  673.361585][T14048] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2401'.
[  673.511827][T14053] device bond_slave_1 entered promiscuous mode
[  674.117117][T14063] netlink: 'syz.0.2409': attribute type 21 has an invalid length.
[  674.185577][T14063] netlink: 'syz.0.2409': attribute type 6 has an invalid length.
[  674.230900][T14063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2409'.
[  674.640758][T14078] netlink: 'syz.2.2412': attribute type 3 has an invalid length.
[  674.739303][T14078] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2412'.
[  675.076769][T14090] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2414'.
[  677.561310][T14136] netlink: 'syz.1.2426': attribute type 16 has an invalid length.
[  677.634199][T14136] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2426'.
[  677.683446][T14141] netlink: 'syz.1.2426': attribute type 10 has an invalid length.
[  677.869371][T14135] delete_channel: no stack
[  678.620161][T14151] netlink: 'syz.3.2431': attribute type 2 has an invalid length.
[  679.150448][T14159] netlink: 'syz.1.2433': attribute type 17 has an invalid length.
[  679.284241][T14160] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2432'.
[  679.454626][T14160] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  679.779916][T14165] device syzkaller0 entered promiscuous mode
[  686.021134][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  686.028542][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  686.435141][T14178] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2437'.
[  686.747442][T14183] device wlan1 left promiscuous mode
[  686.966534][T14197] netlink: 'syz.2.2441': attribute type 16 has an invalid length.
[  687.042583][T14195] netlink: 'syz.2.2441': attribute type 10 has an invalid length.
[  687.092356][T14197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2441'.
[  687.099222][T14195] device macvlan0 left promiscuous mode
[  687.193916][T14189] delete_channel: no stack
[  687.367616][T14206] netlink: 'syz.1.2445': attribute type 2 has an invalid length.
[  688.099435][T12190] Bluetooth: hci1: command 0x0406 tx timeout
[  688.474386][ T4286] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17
[  688.843293][T14245] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2453'.
[  688.885821][T14251] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2455'.
[  688.920549][T14245] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  688.959079][T14245] CPU: 0 PID: 14245 Comm: syz.1.2453 Not tainted syzkaller #0
[  688.966633][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  688.976744][T14245] Call Trace:
[  688.980067][T14245]  <TASK>
[  688.983040][T14245]  dump_stack_lvl+0x188/0x24e
[  688.987779][T14245]  ? show_regs_print_info+0x12/0x12
[  688.993034][T14245]  ? load_image+0x410/0x410
[  688.997599][T14245]  sysfs_warn_dup+0x8a/0xa0
[  689.002161][T14245]  sysfs_do_create_link_sd+0xc0/0x110
[  689.007593][T14245]  device_add+0x83b/0x1050
[  689.012094][T14245]  wiphy_register+0x1d8b/0x2aa0
[  689.017041][T14245]  ? cfg80211_event_work+0x40/0x40
[  689.022215][T14245]  ? minstrel_ht_alloc+0x894/0xa20
[  689.027398][T14245]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  689.033530][T14245]  ieee80211_register_hw+0x2d48/0x39f0
[  689.039239][T14245]  ? ieee80211_register_hw+0xee1/0x39f0
[  689.044845][T14245]  ? ieee80211_register_hw+0xee1/0x39f0
[  689.050458][T14245]  ? ieee80211_tasklet_handler+0x20/0x20
[  689.056147][T14245]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  689.062101][T14245]  ? __debug_object_init+0xed/0x440
[  689.067372][T14245]  ? memset+0x1e/0x40
[  689.071406][T14245]  ? __hrtimer_init+0x189/0x270
[  689.076328][T14245]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  689.082114][T14245]  ? memcpy+0x3c/0x60
[  689.086150][T14245]  hwsim_new_radio_nl+0xab7/0xc90
[  689.091242][T14245]  genl_family_rcv_msg_doit+0x22f/0x350
[  689.096821][T14245]  ? end_current_label_crit_section+0x170/0x170
[  689.103109][T14245]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  689.109056][T14245]  ? bpf_lsm_capable+0x5/0x10
[  689.113761][T14245]  ? security_capable+0x85/0xb0
[  689.118728][T14245]  genl_rcv_msg+0x601/0x790
[  689.123441][T14245]  ? genl_bind+0x360/0x360
[  689.127868][T14245]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  689.134232][T14245]  netlink_rcv_skb+0x1ef/0x440
[  689.139016][T14245]  ? genl_bind+0x360/0x360
[  689.143449][T14245]  ? netlink_ack+0x1160/0x1160
[  689.148262][T14245]  ? down_read+0x1a8/0x2d0
[  689.152693][T14245]  genl_rcv+0x24/0x40
[  689.156688][T14245]  netlink_unicast+0x7ad/0x920
[  689.161475][T14245]  netlink_sendmsg+0x8ad/0xbd0
[  689.166268][T14245]  ? netlink_getsockopt+0x550/0x550
[  689.171484][T14245]  ? apparmor_socket_sendmsg+0x8a/0x330
[  689.177055][T14245]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  689.182356][T14245]  ? security_socket_sendmsg+0x7c/0xa0
[  689.187912][T14245]  ? netlink_getsockopt+0x550/0x550
[  689.193125][T14245]  ____sys_sendmsg+0x5ed/0x9a0
[  689.197914][T14245]  ? __sys_sendmsg_sock+0x30/0x30
[  689.202950][T14245]  ? __import_iovec+0x306/0x510
[  689.207820][T14245]  ? import_iovec+0x6f/0xa0
[  689.212341][T14245]  ___sys_sendmsg+0x2a2/0x360
[  689.217060][T14245]  ? __sys_sendmsg+0x2a0/0x2a0
[  689.221884][T14245]  __se_sys_sendmsg+0x1c3/0x2b0
[  689.226840][T14245]  ? __x64_sys_sendmsg+0x80/0x80
[  689.231805][T14245]  ? lockdep_hardirqs_on+0x94/0x140
[  689.237031][T14245]  do_syscall_64+0x4c/0xa0
[  689.241470][T14245]  ? clear_bhb_loop+0x60/0xb0
[  689.246172][T14245]  ? clear_bhb_loop+0x60/0xb0
[  689.250863][T14245]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  689.256780][T14245] RIP: 0033:0x7fd7d7b9e0d9
[  689.261221][T14245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  689.281031][T14245] RSP: 002b:00007fd7d897e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  689.289542][T14245] RAX: ffffffffffffffda RBX: 00007fd7d7e26090 RCX: 00007fd7d7b9e0d9
[  689.297522][T14245] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  689.305500][T14245] RBP: 00007fd7d7c35024 R08: 0000000000000000 R09: 0000000000000000
[  689.313478][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  689.321481][T14245] R13: 00007fd7d7e26128 R14: 00007fd7d7e26090 R15: 00007ffcac49d9b8
[  689.329486][T14245]  </TASK>
[  689.394158][T14252] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2455'.
[  689.429662][T14262] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.2457'.
[  689.624997][T14268] netlink: 'syz.4.2459': attribute type 16 has an invalid length.
[  689.643401][T14268] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2459'.
[  689.702168][T14268] netlink: 'syz.4.2459': attribute type 10 has an invalid length.
[  689.712359][T14270] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2460'.
[  689.846321][T14267] delete_channel: no stack
[  689.981518][T14286] netlink: 'syz.1.2464': attribute type 2 has an invalid length.
[  690.656093][T14297] netlink: 'syz.4.2467': attribute type 10 has an invalid length.
[  691.077129][T14305] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2470'.
[  692.240856][T14322] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2473'.
[  692.457209][T14322] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  692.476751][T14322] CPU: 0 PID: 14322 Comm: syz.2.2473 Not tainted syzkaller #0
[  692.484300][T14322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  692.494403][T14322] Call Trace:
[  692.497718][T14322]  <TASK>
[  692.500698][T14322]  dump_stack_lvl+0x188/0x24e
[  692.505419][T14322]  ? show_regs_print_info+0x12/0x12
[  692.510649][T14322]  ? load_image+0x410/0x410
[  692.515198][T14322]  sysfs_warn_dup+0x8a/0xa0
[  692.519723][T14322]  sysfs_do_create_link_sd+0xc0/0x110
[  692.525200][T14322]  device_add+0x83b/0x1050
[  692.529639][T14322]  wiphy_register+0x1d8b/0x2aa0
[  692.534533][T14322]  ? cfg80211_event_work+0x40/0x40
[  692.539670][T14322]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  692.545943][T14322]  ieee80211_register_hw+0x2d48/0x39f0
[  692.551770][T14322]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  692.557950][T14322]  ? ieee80211_register_hw+0xee1/0x39f0
[  692.563510][T14322]  ? ieee80211_register_hw+0xee1/0x39f0
[  692.569078][T14322]  ? ieee80211_tasklet_handler+0x20/0x20
[  692.574729][T14322]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  692.580642][T14322]  ? __debug_object_init+0xed/0x440
[  692.585888][T14322]  ? memset+0x1e/0x40
[  692.589886][T14322]  ? __hrtimer_init+0x189/0x270
[  692.594757][T14322]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  692.600507][T14322]  ? memcpy+0x3c/0x60
[  692.604506][T14322]  hwsim_new_radio_nl+0xab7/0xc90
[  692.609562][T14322]  genl_family_rcv_msg_doit+0x22f/0x350
[  692.615123][T14322]  ? end_current_label_crit_section+0x170/0x170
[  692.621390][T14322]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  692.627328][T14322]  ? bpf_lsm_capable+0x5/0x10
[  692.632023][T14322]  ? security_capable+0x85/0xb0
[  692.636902][T14322]  genl_rcv_msg+0x601/0x790
[  692.641451][T14322]  ? genl_bind+0x360/0x360
[  692.645913][T14322]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  692.652553][T14322]  netlink_rcv_skb+0x1ef/0x440
[  692.657348][T14322]  ? genl_bind+0x360/0x360
[  692.661783][T14322]  ? netlink_ack+0x1160/0x1160
[  692.666584][T14322]  ? down_read+0x1a8/0x2d0
[  692.671014][T14322]  genl_rcv+0x24/0x40
[  692.675020][T14322]  netlink_unicast+0x7ad/0x920
[  692.679992][T14322]  netlink_sendmsg+0x8ad/0xbd0
[  692.684777][T14322]  ? lockdep_hardirqs_on+0x94/0x140
[  692.690000][T14322]  ? netlink_getsockopt+0x550/0x550
[  692.695224][T14322]  ? security_socket_sendmsg+0x41/0xa0
[  692.700699][T14322]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  692.705993][T14322]  ? security_socket_sendmsg+0x7c/0xa0
[  692.711467][T14322]  ? netlink_getsockopt+0x550/0x550
[  692.716687][T14322]  ____sys_sendmsg+0x5ed/0x9a0
[  692.721479][T14322]  ? __sys_sendmsg_sock+0x30/0x30
[  692.726516][T14322]  ? __import_iovec+0x306/0x510
[  692.731399][T14322]  ? import_iovec+0x6f/0xa0
[  692.735921][T14322]  ___sys_sendmsg+0x2a2/0x360
[  692.740642][T14322]  ? __sys_sendmsg+0x2a0/0x2a0
[  692.745432][T14322]  ? perf_trace_preemptirq_template+0xa8/0x320
[  692.751601][T14322]  ? irqentry_enter+0x33/0x50
[  692.756303][T14322]  ? rcu_is_watching+0x11/0xa0
[  692.761102][T14322]  ? __x64_sys_sendmsg+0x60/0x80
[  692.766065][T14322]  __se_sys_sendmsg+0x1c3/0x2b0
[  692.770945][T14322]  ? __x64_sys_sendmsg+0x80/0x80
[  692.776003][T14322]  ? syscall_enter_from_user_mode+0x2a/0x80
[  692.781942][T14322]  do_syscall_64+0x4c/0xa0
[  692.786396][T14322]  ? clear_bhb_loop+0x60/0xb0
[  692.791177][T14322]  ? clear_bhb_loop+0x60/0xb0
[  692.795867][T14322]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  692.801776][T14322] RIP: 0033:0x7f279979e0d9
[  692.806200][T14322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  692.825816][T14322] RSP: 002b:00007f279a71b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  692.834244][T14322] RAX: ffffffffffffffda RBX: 00007f2799a26180 RCX: 00007f279979e0d9
[  692.842230][T14322] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  692.850213][T14322] RBP: 00007f2799835024 R08: 0000000000000000 R09: 0000000000000000
[  692.858194][T14322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  692.866182][T14322] R13: 00007f2799a26218 R14: 00007f2799a26180 R15: 00007fffc58ca848
[  692.874186][T14322]  </TASK>
[  693.076391][T14347] netlink: 'syz.1.2478': attribute type 2 has an invalid length.
[  693.112934][T14345] netlink: 'syz.0.2477': attribute type 2 has an invalid length.
[  693.160423][T14347] device 0 entered promiscuous mode
[  693.454939][T14357] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2481'.
[  693.485659][T14356] netlink: 'syz.1.2480': attribute type 21 has an invalid length.
[  693.498410][T14356] netlink: 'syz.1.2480': attribute type 7 has an invalid length.
[  693.759205][T14361] netlink: 'syz.2.2482': attribute type 2 has an invalid length.
[  695.174052][T14383] netlink: 'syz.1.2488': attribute type 10 has an invalid length.
[  695.293735][T14383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2488'.
[  695.416917][T14383] device dummy0 entered promiscuous mode
[  695.905258][T14383] bridge0: port 3(dummy0) entered blocking state
[  695.952095][T14383] bridge0: port 3(dummy0) entered disabled state
[  696.432259][T14383] bridge0: port 3(dummy0) entered blocking state
[  696.442354][T14383] bridge0: port 3(dummy0) entered forwarding state
[  697.036325][T14414] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2493'.
[  697.060357][T14398] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2490'.
[  698.937359][T14442] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2501'.
[  698.995353][T14439] netlink: 'syz.1.2500': attribute type 2 has an invalid length.
[  699.803948][T14449] netlink: 'syz.3.2502': attribute type 6 has an invalid length.
[  699.893774][T14452] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2504'.
[  700.744494][T14473] netlink: 'syz.0.2509': attribute type 29 has an invalid length.
[  700.767135][T14473] netlink: 'syz.0.2509': attribute type 29 has an invalid length.
[  700.782613][T14474] netlink: 'syz.0.2509': attribute type 29 has an invalid length.
[  702.564658][T14501] netlink: 'syz.0.2515': attribute type 2 has an invalid length.
[  703.476162][T14530] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2519'.
[  703.840263][T14542] netlink: 'syz.3.2523': attribute type 21 has an invalid length.
[  704.095311][T14530] netlink: 'syz.1.2519': attribute type 3 has an invalid length.
[  704.152387][T14530] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2519'.
[  704.725350][T14559] netlink: 'syz.1.2528': attribute type 29 has an invalid length.
[  704.770631][T14559] netlink: 'syz.1.2528': attribute type 29 has an invalid length.
[  704.792033][T14560] netlink: 'syz.1.2528': attribute type 29 has an invalid length.
[  704.818016][T14559] netlink: 'syz.1.2528': attribute type 29 has an invalid length.
[  705.389687][T14573] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2532'.
[  705.501530][T14573] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  705.665124][T14573] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  706.228073][T14579] netlink: 'syz.4.2533': attribute type 3 has an invalid length.
[  706.400661][T14579] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2533'.
[  708.116650][T14608] netlink: 'syz.4.2539': attribute type 2 has an invalid length.
[  708.725333][ T4286] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  708.758281][T14617] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2542'.
[  709.795964][T14625] device syzkaller0 entered promiscuous mode
[  710.632234][T14645] netlink: 'syz.3.2546': attribute type 3 has an invalid length.
[  710.654874][T14645] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2546'.
[  714.276102][T14613] netlink: 'syz.0.2541': attribute type 3 has an invalid length.
[  714.285712][T14613] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.2541'.
[  715.650070][T14679] netlink: 'syz.4.2558': attribute type 2 has an invalid length.
[  716.217974][T14694] netlink: 'syz.0.2561': attribute type 3 has an invalid length.
[  716.272335][T14694] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2561'.
[  716.744280][T14704] device syzkaller0 entered promiscuous mode
[  720.194427][T14742] netlink: 'syz.3.2573': attribute type 29 has an invalid length.
[  720.246001][T14741] netlink: 'syz.3.2573': attribute type 3 has an invalid length.
[  720.308158][T14741] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2573'.
[  720.371695][T14744] netlink: 'syz.4.2574': attribute type 2 has an invalid length.
[  725.344817][T14751] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2575'.
[  725.757487][T14742] netlink: 'syz.3.2573': attribute type 29 has an invalid length.
[  726.171599][T14758] netlink: 'syz.3.2578': attribute type 21 has an invalid length.
[  726.199426][T14758] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2578'.
[  726.212442][T14758] netlink: 'syz.3.2578': attribute type 4 has an invalid length.
[  726.223945][T14762] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2580'.
[  726.239490][T14761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2579'.
[  726.257221][T14758] netlink: 'syz.3.2578': attribute type 5 has an invalid length.
[  726.267886][T14758] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2578'.
[  726.797446][T14755] netlink: 'syz.1.2577': attribute type 3 has an invalid length.
[  726.809449][T14755] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2577'.
[  727.416085][T14780] netlink: 'syz.4.2586': attribute type 2 has an invalid length.
[  727.841942][T14795] netlink: 'syz.0.2588': attribute type 21 has an invalid length.
[  727.854234][T14795] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2588'.
[  728.957946][T14815] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2591'.
[  729.049405][T14818] netlink: 105 bytes leftover after parsing attributes in process `syz.4.2591'.
[  729.058623][T14818] netlink: 105 bytes leftover after parsing attributes in process `syz.4.2591'.
[  729.853194][T14835] netlink: 'syz.0.2595': attribute type 3 has an invalid length.
[  729.960456][T14829] device syzkaller0 entered promiscuous mode
[  730.458676][T14854] netlink: 'syz.0.2602': attribute type 2 has an invalid length.
[  730.937772][T14865] netlink: 'syz.4.2604': attribute type 3 has an invalid length.
[  731.022854][T14865] __nla_validate_parse: 1 callbacks suppressed
[  731.022877][T14865] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2604'.
[  731.143499][T14866] netlink: 'syz.4.2604': attribute type 3 has an invalid length.
[  731.172320][T14866] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2604'.
[  733.565006][T14851] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2600'.
[  733.582622][T14873] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2606'.
[  735.321576][T14903] netlink: 'syz.0.2612': attribute type 3 has an invalid length.
[  735.370237][T14903] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2612'.
[  735.674827][T14917] netlink: 'syz.4.2617': attribute type 2 has an invalid length.
[  735.845431][T14910] delete_channel: no stack
[  737.957500][T14971] netlink: 'syz.3.2630': attribute type 3 has an invalid length.
[  738.024715][T14973] netlink: 'syz.4.2633': attribute type 2 has an invalid length.
[  738.104747][T14971] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2630'.
[  738.187720][T14979] netlink: 'syz.1.2634': attribute type 3 has an invalid length.
[  738.274313][T14979] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2634'.
[  739.051691][T14990] can: request_module (can-proto-0) failed.
[  740.458556][T15012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2641'.
[  740.490853][T15011] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2641'.
[  740.555833][T15011] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  741.171239][T15031] netlink: 'syz.0.2645': attribute type 3 has an invalid length.
[  741.181274][T15031] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2645'.
[  741.535645][T15039] netlink: 'syz.0.2650': attribute type 2 has an invalid length.
[  741.864031][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'.
[  742.074309][    C0] 
[  742.074317][    C0] ================================
[  742.074322][    C0] WARNING: inconsistent lock state
[  742.074329][    C0] syzkaller #0 Not tainted
[  742.074337][    C0] --------------------------------
[  742.074342][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  742.074349][    C0] syz.1.2653/15048 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  742.074366][    C0] ffff888027e68218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0
[  742.074416][    C0] {INITIAL USE} state was registered at:
[  742.074423][    C0]   lock_acquire+0x1bb/0x4a0
[  742.074442][    C0]   _raw_spin_lock+0x2a/0x40
[  742.074466][    C0]   htab_lock_bucket+0x179/0x2f0
[  742.074482][    C0]   htab_map_update_elem+0x21f/0xb20
[  742.074497][    C0]   bpf_map_update_value+0x59d/0x670
[  742.074515][    C0]   generic_map_update_batch+0x52e/0x7f0
[  742.074533][    C0]   bpf_map_do_batch+0x475/0x5f0
[  742.074552][    C0]   __sys_bpf+0x6f7/0x780
[  742.074570][    C0]   __x64_sys_bpf+0x78/0x90
[  742.074587][    C0]   do_syscall_64+0x4c/0xa0
[  742.074606][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.074623][    C0] irq event stamp: 1776
[  742.074628][    C0] hardirqs last  enabled at (1775): [<ffffffff8a2fec30>] exc_debug+0xf0/0x130
[  742.074652][    C0] hardirqs last disabled at (1776): [<ffffffff8a2febae>] exc_debug+0x6e/0x130
[  742.074674][    C0] softirqs last  enabled at (1268): [<ffffffff814f495b>] __irq_exit_rcu+0x13b/0x230
[  742.074692][    C0] softirqs last disabled at (1259): [<ffffffff814f495b>] __irq_exit_rcu+0x13b/0x230
[  742.074710][    C0] 
[  742.074710][    C0] other info that might help us debug this:
[  742.074714][    C0]  Possible unsafe locking scenario:
[  742.074714][    C0] 
[  742.074718][    C0]        CPU0
[  742.074721][    C0]        ----
[  742.074724][    C0]   lock(&htab->lockdep_key);
[  742.074734][    C0]   <Interrupt>
[  742.074737][    C0]     lock(&htab->lockdep_key);
[  742.074747][    C0] 
[  742.074747][    C0]  *** DEADLOCK ***
[  742.074747][    C0] 
[  742.074750][    C0] no locks held by syz.1.2653/15048.
[  742.074757][    C0] 
[  742.074757][    C0] stack backtrace:
[  742.074762][    C0] CPU: 0 PID: 15048 Comm: syz.1.2653 Not tainted syzkaller #0
[  742.074777][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  742.074786][    C0] Call Trace:
[  742.074792][    C0]  <#DB>
[  742.074871][    C0]  dump_stack_lvl+0x188/0x24e
[  742.074898][    C0]  ? show_regs_print_info+0x12/0x12
[  742.074924][    C0]  ? print_usage_bug+0x42a/0x690
[  742.074947][    C0]  ? verify_lock_unused+0x15/0x140
[  742.074970][    C0]  lock_acquire+0x2df/0x4a0
[  742.074994][    C0]  ? htab_lock_bucket+0x179/0x2f0
[  742.075014][    C0]  ? read_lock_is_recursive+0x10/0x10
[  742.075040][    C0]  ? perf_trace_lock_acquire+0x101/0x3f0
[  742.075062][    C0]  _raw_spin_lock+0x2a/0x40
[  742.075079][    C0]  ? htab_lock_bucket+0x179/0x2f0
[  742.075097][    C0]  htab_lock_bucket+0x179/0x2f0
[  742.075118][    C0]  ? htab_lru_map_delete_node+0x610/0x610
[  742.075138][    C0]  ? look_up_lock_class+0x75/0x140
[  742.075156][    C0]  ? verify_lock_unused+0x15/0x140
[  742.075178][    C0]  ? htab_map_hash+0x301/0x6d0
[  742.075199][    C0]  htab_map_delete_elem+0x197/0x5c0
[  742.075221][    C0]  ? htab_map_update_elem+0xb20/0xb20
[  742.075245][    C0]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[  742.075266][    C0]  bpf_overflow_handler+0x6d1/0x790
[  742.075288][    C0]  ? bpf_overflow_handler+0xd9/0x790
[  742.075307][    C0]  ? perf_swevent_overflow+0x230/0x230
[  742.075324][    C0]  ? bpf_overflow_handler+0x5ff/0x790
[  742.075344][    C0]  ? bpf_overflow_handler+0xd9/0x790
[  742.075364][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[  742.075390][    C0]  __perf_event_overflow+0x457/0x630
[  742.075417][    C0]  perf_swevent_overflow+0x19b/0x230
[  742.075440][    C0]  perf_swevent_event+0x458/0x570
[  742.075474][    C0]  ? perf_tp_event+0xc10/0xc10
[  742.075503][    C0]  perf_bp_event+0x311/0x3f0
[  742.075529][    C0]  ? perf_trace_lock_acquire+0x101/0x3f0
[  742.075548][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[  742.075588][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  742.075609][    C0]  ? read_lock_is_recursive+0x10/0x10
[  742.075636][    C0]  hw_breakpoint_exceptions_notify+0x14d/0x470
[  742.075662][    C0]  atomic_notifier_call_chain+0x17a/0x2b0
[  742.075680][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  742.075702][    C0]  notify_die+0x141/0x1a0
[  742.075722][    C0]  ? srcu_init_notifier_head+0x90/0x90
[  742.075749][    C0]  notify_debug+0x20/0x30
[  742.075769][    C0]  exc_debug+0xd9/0x130
[  742.075792][    C0]  asm_exc_debug+0x1a/0x40
[  742.075811][    C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  742.075851][    C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  742.075865][    C0] RSP: 0018:ffffc9000fd97d48 EFLAGS: 00050202
[  742.075879][    C0] RAX: ffffffff8415c301 RBX: 0000000000000048 RCX: 0000000000000004
[  742.075891][    C0] RDX: 0000000000000048 RSI: 0000200000000304 RDI: ffffc9000fd97e04
[  742.075903][    C0] RBP: 0000000000000000 R08: ffffc9000fd97e07 R09: 1ffff92001fb2fc0
[  742.075913][    C0] R10: dffffc0000000000 R11: fffff52001fb2fc1 R12: 00007fffffffefb8
[  742.075925][    C0] R13: 0000000000000048 R14: ffffc9000fd97dc0 R15: 00002000000002c0
[  742.075940][    C0]  ? _copy_from_user+0x21/0x170
[  742.075961][    C0]  </#DB>
[  742.075966][    C0]  <TASK>
[  742.075971][    C0]  _copy_from_user+0xf4/0x170
[  742.075989][    C0]  __sys_bpf+0x2ea/0x780
[  742.076012][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[  742.076043][    C0]  ? lock_chain_count+0x20/0x20
[  742.076070][    C0]  __x64_sys_bpf+0x78/0x90
[  742.076092][    C0]  do_syscall_64+0x4c/0xa0
[  742.076111][    C0]  ? clear_bhb_loop+0x60/0xb0
[  742.076130][    C0]  ? clear_bhb_loop+0x60/0xb0
[  742.076150][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  742.076169][    C0] RIP: 0033:0x7fd7d7b9e0d9
[  742.076182][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  742.076194][    C0] RSP: 002b:00007fd7d897e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  742.076210][    C0] RAX: ffffffffffffffda RBX: 00007fd7d7e26090 RCX: 00007fd7d7b9e0d9
[  742.076222][    C0] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a
[  742.076231][    C0] RBP: 00007fd7d7c35024 R08: 0000000000000000 R09: 0000000000000000
[  742.076241][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  742.076251][    C0] R13: 00007fd7d7e26128 R14: 00007fd7d7e26090 R15: 00007ffcac49d9b8
[  742.076270][    C0]  </TASK>
[  747.460685][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.467027][ T1279] ieee802154 phy1 wpan1: encryption failed: -22