last executing test programs:

4.11536774s ago: executing program 3 (id=1569):
r0 = socket$kcm(0x11, 0x6, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0)
socket$kcm(0x11, 0x6, 0x0) (async)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x40) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x83f}], 0x3}, 0x0) (async)

3.803640919s ago: executing program 3 (id=1572):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000000400, 0xf6103, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0xfdef)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005b80)}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033b29396ee35e0e5c5", @ANYRES8=r6], 0xfe33)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000070000000c40000000000000000000000f00000000000002040000000061d13b"], &(0x7f0000000280)=""/110, 0x28, 0x6e, 0x1, 0x3}, 0x28)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000001", @ANYRES64=r3], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r7, &(0x7f00000000c0)="d827d1", &(0x7f0000000040)=""/55}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200001100eaffb6030000ffffffc1850000001c00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x22}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xc, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x23)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0xffffffffffffffff)
socket$kcm(0x10, 0x100000000002, 0x4)

2.977296747s ago: executing program 3 (id=1578):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141607089f034d2f87e5fe0c0cab845013f2325f1a39014402038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0fe3461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)
recvmsg(0xffffffffffffffff, 0x0, 0x40)

2.392347972s ago: executing program 0 (id=1582):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000})
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x111950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x11082c, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80)
socketpair(0x9, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080))
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2000003, @local, 0x1}, 0x80, &(0x7f0000002540)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x48044)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x10, 0x5, 0x43a1bd76, 0x8, 0x10000000000009, 0x6, 0x2, 0x0, 0x8000, 0x0, 0x2009}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)

2.191960028s ago: executing program 2 (id=1583):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r1, 0x1, 0x9, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000400000791090000000000069010a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @flow_dissector}, 0x48)

1.909766364s ago: executing program 3 (id=1584):
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b0000f9ae873dffe954f8000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = socket$kcm(0x11, 0x2, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xa, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xa, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x894b, 0x0)
socketpair$unix(0x1, 0x6, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x6, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f0000000340), 0x4)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x4394)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x18}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x100000001}, 0x808, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x100000001}, 0x808, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={0x0, &(0x7f0000000c80)=""/200, 0xa8, 0xc8, 0x1, 0x81}, 0x28)
sendmsg$inet(r5, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="7f000001", @ANYRES64=r6], 0x230}, 0x480c1) (async)
sendmsg$inet(r5, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRESOCT=r3, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=<r7=>0x0, @ANYBLOB="7f000001", @ANYRES64=r6], 0x230}, 0x480c1)
socket$kcm(0x10, 0x3, 0x10) (async)
r8 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c024002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) (async)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000200000000000000000000000181100005f23bf4aafd25c45a36a295047944e2bad3aef1a65cd32fb20d3d5c3d5795b847798", @ANYRESOCT=0x0, @ANYRESHEX=r7, @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8ef8ff00000000bfa20000000000000702ffffb70300000a000000b7040000f80000008500000001000000579a675cb795"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000200000000000000000000000181100005f23bf4aafd25c45a36a295047944e2bad3aef1a65cd32fb20d3d5c3d5795b847798", @ANYRESOCT=0x0, @ANYRESHEX=r7, @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8ef8ff00000000bfa20000000000000702ffffb70300000a000000b7040000f80000008500000001000000579a675cb795"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10)

1.809400697s ago: executing program 2 (id=1585):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x6, 0x1, 0x4, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000811"], 0x50)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x3, 0x0, 0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb60200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.792960279s ago: executing program 1 (id=1586):
r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x2004c844)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b5, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x8000, 0x0, 0x9, 0x1, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4b)
sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000140)=@in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x4d, 0x0}, 0x4000080)
recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x12002)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='contention_end\x00')

1.673011205s ago: executing program 3 (id=1587):
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/67}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
close(0x3)
r1 = socket$kcm(0x18, 0x7, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x80047453, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4)
ioctl$TUNSETSNDBUF(r3, 0x400454d4, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0)
close(r4)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
close(0x3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.597360115s ago: executing program 1 (id=1588):
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$unix(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a020000001d0048007ab608ffff0af36504001a00380219bc060000070005251e61a2949a3651f60a84c92ad49380e78f6f38732006c911b3bdc4ed719ef6a1577a", 0x51}, {&(0x7f0000000480)="a58ec582de287deb6b5800", 0xb}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x22003, 0xc, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b3387dad256094bc7c308920fd2", 0x14}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000850000006a000000850000005000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, r4}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10)

1.55422306s ago: executing program 2 (id=1589):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000690000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x80, 0x70, 0x3, 0x84, 0x7f, 0x0, 0x1, 0x0, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x9}, 0x4008, 0x220, 0x9, 0x3, 0x1, 0xe, 0x4, 0x0, 0xbeec, 0x0, 0xd0a4}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x5)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000640)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb71*\xa6\xbb\xa7\xe2\xc0\xdc\xf9QF\x110Y3\x8b\x91\xb49q\xa1K\xb5\xe2\xe0\x82\b\xeb!\xb2\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rg^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\b\x00\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xea]\xb8\xa3;\xd8\xecAm\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xcd\xe8\xb2\x8eQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\fo%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xa2\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\xf2\xdb\x10~\x9a\x06\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd10j\t\xf0\x8c\xf6k\xe4\x8dS`\x9eS\xfe\xae.\xd7\xdcJ\xc5\xde8b\x89<\xba\xb6\x91mb\xefu\xf1\xca2.\xfd;Ql\x8c\xe4\x16\x9f\xc2\x9au\xdb\n\xb7\xc9\x89\xa1\x0e$\xec\x9b\xd7\x9a8\xe8\x19wD\xa4`J\xed\xa0_\x02\xf7\x9f\x894\x80\x85\x7f\x1dmCHj\xa2\x8d\xf7fP6\xd2\x19\xe5\x9c\xe04J%\xb2\v\x16\xc1C\xcf\xb3]O\xaa+\xd5\xb4\xbe\xb7!P\xe4:R`\xdd`\xac\xd3+\xa9\x14\x9c\xf85\xfa\r\f{\xa9\x19\xa1n\x9a\x02\xb9\xe0\xd7Z\x13\x9a\x81\v\x9dl\x04\xc4?\x8b{\xa9\xd6<\x1f\xf3\xad\xac\xca\x16\xd53\xc2\xf2\x80\xbdd\xf8\xbd\x85\xc8X\xf0(#\x1cc\xcc-\xa9\xa1\xf1\xa7e\x9f=Y+\x81\xda\x97G\'\x1c\a\xc0\xf7\xe0\x98\xeb\x8aZlI\x90\xf9\xf9\x12\xf0\x91\xd5g\x10\x8d{\x8c\x87\xc8\x13\xb2\xf5\x9bgd\x8d\xd6W\x89\x9a\xca/\x16 \xb9e\xe9\xba\xc6JF\x1fL>K\x17o\xdeUP\xd7ps\xe1\xa0~\x06\xe8\x82k\xc6\xed\xaa#|\x06\xbb\xac<u_\x9f\xef\x97\x94U\xb9\xd4\xea\xfb\xf3\xf5\x88\n\x98\x8a\x97\xb2(\xcc\xefhM\n\xeb\xf2\x9a\x03r\xc5\x15\xc6\xa4\xe7\xb2;\x89\x11\x92\xde\x0eN\xadEYg B\x87\xaea4\xbc@\xa1M+v\x83\xda\xf1\xfd\x99\xc6\x9e\xc0')
syz_clone(0x2000080, &(0x7f0000000000)="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", 0xfd, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="e36285c03fc6f4c6c4e10a21ff359e41b52f4d4d0de77d52983b6c62f053c8d94aff1723714ebc5cbfd909079513e548b4976fda87cc7f975bb154918d401e4c")

1.439365835s ago: executing program 1 (id=1590):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, 0x0, &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='contention_end\x00', r0}, 0x18)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'vlan1\x00', @multicast})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a2, &(0x7f0000000080))

1.436962885s ago: executing program 0 (id=1591):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080)
sendmsg(r5, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x6, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x31, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r8 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000de66478f727579dfbf12080000e40200000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r9, <r10=>0xffffffffffffffff}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x20, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7020000e23c00008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r11}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2c}, 0x94)
write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

1.265297217s ago: executing program 1 (id=1592):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f00000002c0)=0x100)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
recvmsg(0xffffffffffffffff, 0x0, 0x40)

1.24193405s ago: executing program 2 (id=1593):
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffc1) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) (async)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
write$cgroup_type(r2, &(0x7f00000001c0), 0x9) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000010000000050000002400000000040000000000ec0b01000000000000006ec4000002000000002e302e610000000000000000000000001c00000015b083fde127d3e093526ba2ae4833ddd5eb9232874793693141b6de92156edb5edf3230a7"], 0x0, 0x42, 0x0, 0x1}, 0x28)

1.117047706s ago: executing program 0 (id=1594):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={&(0x7f0000000300), 0x1f}, 0x40, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x40000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r1 = socket$kcm(0x28, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x28, 0x8, 0x0, 0xff79)
socket$kcm(0x10, 0x2, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x10f, 0x88, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00\x00'], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
write$cgroup_type(r4, 0x0, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0x0, 0x0}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x410000, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r7, 0x1000000}, 0x38)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4001, 0x0, @empty, 0xf5}, 0x80, 0x0}, 0x3004c041)
recvmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x10100)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x6, &(0x7f0000000100)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x8, 0xd6, &(0x7f0000000500)=""/214, 0x41000, 0x18, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2d120, r6, 0x0, &(0x7f0000000380)=[r4], 0x0, 0x10, 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000080), 0x0}, 0x20)

649.229147ms ago: executing program 2 (id=1595):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000}, 0x50) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)}, 0xffffffa9) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) (async)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, 0x0}, 0x3000c085)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/173, 0xad}], 0x1}, 0x2)
recvmsg$kcm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/92, 0x5c}], 0x1}, 0x0) (async)
socket$kcm(0xa, 0x2, 0x88) (async)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0xfffffffffffffffd}, 0x0, 0x0, 0x20000000, 0x0, 0x3, 0x8, 0xfffd, 0x0, 0x4, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)

639.209428ms ago: executing program 0 (id=1596):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x5, 0x84)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000040)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000080)='syzkaller\x00', 0xb32, 0xd2, &(0x7f0000000180)=""/210, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0xd, 0x8, 0x800}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94)
socket$kcm(0x29, 0x5, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r5 = perf_event_open$cgroup(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x1, 0x5, 0x3, 0x0, 0x9f, 0x22c8c, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x5, 0x0, @perf_bp={0x0, 0xd}, 0x1, 0x1714, 0x100, 0x6, 0x100000001, 0xf04, 0x5729, 0x0, 0xab3, 0x0, 0x3}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x4)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000005c0)={0x3, 0x80, 0xc, 0x58, 0x1, 0x5, 0x0, 0x80000001, 0x100, 0xa, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x400, 0x4, @perf_bp={0x0}, 0x101040, 0x7ff, 0x7f, 0x5, 0xf9, 0x1, 0x6ed, 0x0, 0x9, 0x0, 0x5})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r6 = socket$kcm(0x29, 0x2, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8)
ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r7 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r7, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r2, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
setsockopt$sock_attach_bpf(r1, 0x84, 0x21, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000020000000000000002000000850000002800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r8, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b9547ed387dbeb00009b22562e", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40004)

636.886118ms ago: executing program 1 (id=1597):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair(0x6, 0x1, 0x4, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000811"], 0x50)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x3, 0x0, 0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000000000000c3aaf0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb60200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

484.577648ms ago: executing program 3 (id=1598):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711093000000000095000800"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfd00, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00002d1b8d1c5f518100"/27, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x87}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x94)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x17, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9ae1}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa20f}, @ldst={0x1, 0x3, 0x3, 0x3, 0x8, 0xffffffffffffffe0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000007c0)='GPL\x00', 0xe79, 0xea, &(0x7f00000008c0)=""/234, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x9, 0x1, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000b00)=[r0, r6, r0, r4], &(0x7f0000000b40)=[{0x4, 0x5, 0xe, 0x8}, {0x3, 0x5, 0xf, 0x8}, {0x3, 0x1, 0xd, 0x8}, {0x2, 0x3, 0x3, 0xc}, {0x3, 0x4, 0x4, 0xc}, {0x2, 0x5, 0xf, 0xc}, {0x2, 0x1, 0x4, 0x7}, {0x1, 0x4, 0xf, 0x3}, {0x2, 0x3, 0x9, 0x5}, {0x1, 0x5, 0x9, 0x2}], 0x10, 0x7}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
write$cgroup_devices(r10, 0x0, 0x9)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000280)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x3d, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r13)
r14 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x8, 0x221, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x80, 0x0, 0x0, 0x4, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r15=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r15, &(0x7f0000000200)=ANY=[@ANYRES8=r13, @ANYRES8=r14], 0x12)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000f00000000000000", @ANYRES32, @ANYBLOB="040000000000000000000000000000000000003e", @ANYRES32=r11, @ANYRES32=r15, @ANYBLOB="03000000000000000400"/28], 0x50)

445.832343ms ago: executing program 1 (id=1599):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x2, 0x0, 0x0, 0x0, 0x10000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x8, 0x5, 0x6, 0x2, 0x0, 0x5, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002)
sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x40084)
close(r1)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a", 0x11}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000019"], 0xfe33)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r1, 0xc008744c, &(0x7f0000000180))

309.66351ms ago: executing program 0 (id=1600):
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x1e, 0x5, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r0], 0x20)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0xfffffffc}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000540)="f4000900062b2f25fe80000000000000dc8b2b8b816937dcef1258850f238466cc00007a000000ad6e91880b", 0x2c}], 0x1}, 0x0)

1.33015ms ago: executing program 0 (id=1601):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a4000140027c0000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea60864160af3653c000cc00400020208001e000300000307002100eab556d4938037e7860000000200ffffc6c953", 0x47}, {&(0x7f0000000000)="cfd69694f2be344a32bd33b8f3582c9c5188493c6c", 0x15}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20)
sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, 0xffffffffffffffff)

0s ago: executing program 2 (id=1602):
r0 = socket$kcm(0xa, 0x1, 0x106)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x7, 0x88)
close(0x3)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x106) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x7, 0x88) (async)
close(0x3) (async)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x2000000, @dev, 0x39}, 0x80, 0x0}, 0xe07e872420dfefca) (async)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, 0x0, 0x0) (async)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.226' (ED25519) to the list of known hosts.
syzkaller login: [   63.770002][ T5751] cgroup: Unknown subsys name 'net'
[   63.871438][ T5751] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.219051][ T5751] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   66.582089][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.591856][ T5768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.601280][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.609733][ T5768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.617640][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.625571][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.633822][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.641612][ T5768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.649892][ T5768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.657347][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.659282][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.666527][ T5768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.680203][ T5768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.687760][ T5768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.688322][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.717254][ T5768] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.725259][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.726175][ T5768] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.740307][ T5768] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.750183][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.758255][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.767597][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.775249][ T5768] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.782769][ T5768] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.129785][ T5762] chnl_net:caif_netlink_parms(): no params data found
[   67.272762][ T5761] chnl_net:caif_netlink_parms(): no params data found
[   67.331489][ T5760] chnl_net:caif_netlink_parms(): no params data found
[   67.364295][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.372044][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.379561][ T5762] bridge_slave_0: entered allmulticast mode
[   67.386925][ T5762] bridge_slave_0: entered promiscuous mode
[   67.401074][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.408333][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.415627][ T5762] bridge_slave_1: entered allmulticast mode
[   67.422700][ T5762] bridge_slave_1: entered promiscuous mode
[   67.433740][ T5763] chnl_net:caif_netlink_parms(): no params data found
[   67.534612][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.545976][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.553117][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.560965][ T5761] bridge_slave_0: entered allmulticast mode
[   67.568378][ T5761] bridge_slave_0: entered promiscuous mode
[   67.584067][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.593408][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.600812][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.608112][ T5761] bridge_slave_1: entered allmulticast mode
[   67.614782][ T5761] bridge_slave_1: entered promiscuous mode
[   67.700571][ T5762] team0: Port device team_slave_0 added
[   67.718512][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.738889][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.746143][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.753324][ T5763] bridge_slave_0: entered allmulticast mode
[   67.763636][ T5763] bridge_slave_0: entered promiscuous mode
[   67.771671][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.779120][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.786428][ T5760] bridge_slave_0: entered allmulticast mode
[   67.793181][ T5760] bridge_slave_0: entered promiscuous mode
[   67.801606][ T5762] team0: Port device team_slave_1 added
[   67.818570][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.837259][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.844589][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.852801][ T5763] bridge_slave_1: entered allmulticast mode
[   67.859701][ T5763] bridge_slave_1: entered promiscuous mode
[   67.874684][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.882675][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.890768][ T5760] bridge_slave_1: entered allmulticast mode
[   67.898310][ T5760] bridge_slave_1: entered promiscuous mode
[   67.949514][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.956676][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.983605][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.998770][ T5761] team0: Port device team_slave_0 added
[   68.005767][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.012726][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.039661][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.052668][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.065468][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.085799][ T5761] team0: Port device team_slave_1 added
[   68.093634][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.143909][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.151160][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.177436][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.191483][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.231640][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.239208][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.266161][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.287025][ T5763] team0: Port device team_slave_0 added
[   68.296603][ T5760] team0: Port device team_slave_0 added
[   68.325533][ T5763] team0: Port device team_slave_1 added
[   68.333623][ T5760] team0: Port device team_slave_1 added
[   68.352392][ T5762] hsr_slave_0: entered promiscuous mode
[   68.360109][ T5762] hsr_slave_1: entered promiscuous mode
[   68.434006][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.442254][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.468847][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.502774][ T5761] hsr_slave_0: entered promiscuous mode
[   68.509209][ T5761] hsr_slave_1: entered promiscuous mode
[   68.515576][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.523396][ T5761] Cannot create hsr debugfs directory
[   68.529476][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.537367][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.563360][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.574894][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.583317][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.609518][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.644692][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.651698][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.677631][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.717628][ T5082] Bluetooth: hci1: command tx timeout
[   68.726343][ T5760] hsr_slave_0: entered promiscuous mode
[   68.732522][ T5760] hsr_slave_1: entered promiscuous mode
[   68.740304][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.748037][ T5760] Cannot create hsr debugfs directory
[   68.830579][ T5763] hsr_slave_0: entered promiscuous mode
[   68.837451][ T5763] hsr_slave_1: entered promiscuous mode
[   68.843723][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.851453][ T5763] Cannot create hsr debugfs directory
[   68.875753][ T5768] Bluetooth: hci3: command tx timeout
[   68.875768][ T5765] Bluetooth: hci2: command tx timeout
[   68.887243][ T5082] Bluetooth: hci0: command tx timeout
[   69.150211][ T5762] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   69.161806][ T5762] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   69.173929][ T5762] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   69.183783][ T5762] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   69.243127][ T5761] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   69.272153][ T5761] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   69.289683][ T5761] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   69.310721][ T5761] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   69.374527][ T5760] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.390285][ T5760] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.429246][ T5760] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.440271][ T5760] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.488084][ T5763] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   69.500588][ T5763] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   69.510779][ T5763] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   69.521458][ T5763] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   69.603936][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.644543][ T5762] 8021q: adding VLAN 0 to HW filter on device team0
[   69.670284][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.677647][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.713314][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.745838][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.752926][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.784443][ T5760] 8021q: adding VLAN 0 to HW filter on device team0
[   69.804784][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.829575][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.836770][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.851870][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.859024][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.924841][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.968783][ T5761] 8021q: adding VLAN 0 to HW filter on device team0
[   70.000612][ T5763] 8021q: adding VLAN 0 to HW filter on device team0
[   70.024696][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.031913][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.063784][ T1129] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.071025][ T1129] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.096659][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.103783][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state
[   70.127171][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.134313][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[   70.352418][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.458141][ T5762] veth0_vlan: entered promiscuous mode
[   70.520513][ T5762] veth1_vlan: entered promiscuous mode
[   70.627087][ T5762] veth0_macvtap: entered promiscuous mode
[   70.650243][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.672713][ T5762] veth1_macvtap: entered promiscuous mode
[   70.710691][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.756837][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.779316][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.792035][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.800711][ T5768] Bluetooth: hci1: command tx timeout
[   70.811951][ T5760] veth0_vlan: entered promiscuous mode
[   70.835954][ T5762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.844835][ T5762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.854474][ T5762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.864738][ T5762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.884429][ T5760] veth1_vlan: entered promiscuous mode
[   70.906627][ T5763] veth0_vlan: entered promiscuous mode
[   70.956349][ T5768] Bluetooth: hci2: command tx timeout
[   70.962788][ T5768] Bluetooth: hci3: command tx timeout
[   70.969024][ T5082] Bluetooth: hci0: command tx timeout
[   70.977813][ T5763] veth1_vlan: entered promiscuous mode
[   70.992764][ T5761] veth0_vlan: entered promiscuous mode
[   71.044791][ T5761] veth1_vlan: entered promiscuous mode
[   71.083823][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.104074][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.147022][ T5760] veth0_macvtap: entered promiscuous mode
[   71.154694][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.162593][ T5763] veth0_macvtap: entered promiscuous mode
[   71.170474][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.182455][ T5761] veth0_macvtap: entered promiscuous mode
[   71.201717][ T5763] veth1_macvtap: entered promiscuous mode
[   71.226235][ T5760] veth1_macvtap: entered promiscuous mode
[   71.238906][ T5761] veth1_macvtap: entered promiscuous mode
[   71.292335][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.335031][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.347567][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.358617][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.371098][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.382215][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.392931][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.406503][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.424593][ T5763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.453538][ T5763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.467005][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.474817][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.486355][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.496320][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.507290][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.521036][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.534101][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.545286][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.559646][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.571464][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.585504][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.603356][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[   71.611383][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[   71.613873][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.631231][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.642016][    C1] hrtimer: interrupt took 29789 ns
[   71.644010][ T5854] netlink: 'syz.2.3': attribute type 10 has an invalid length.
[   71.660371][ T5854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'.
[   71.669846][ T5854] veth0_vlan: entered allmulticast mode
[   71.684305][ T5854] bridge0: port 3(veth0_vlan) entered blocking state
[   71.691371][ T5854] bridge0: port 3(veth0_vlan) entered disabled state
[   71.703362][ T5854] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   71.723712][ T5760] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.733730][ T5760] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.743694][ T5760] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.752705][ T5760] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.770069][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.781686][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.791792][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.802899][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.813378][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.823928][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.839818][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.848202][ T5763] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.857981][ T5763] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.867307][ T5763] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.876793][ T5763] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.889588][ T5855] syz.2.3 (5855) used greatest stack depth: 20528 bytes left
[   71.934504][ T5761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.946991][ T5761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.955987][ T5761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.965223][ T5761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.606944][ T5860] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.5'.
[   72.692451][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.709419][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.764374][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.780604][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.805379][ T3421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.813237][ T3421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.881995][ T5768] Bluetooth: hci1: command tx timeout
[   72.923006][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.945200][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.006427][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.023104][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.031406][ T3421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.042259][ T5768] Bluetooth: hci3: command tx timeout
[   73.048390][ T5768] Bluetooth: hci0: command tx timeout
[   73.054376][ T5768] Bluetooth: hci2: command tx timeout
[   73.063483][ T3421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.518917][ T5877] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   73.701398][ T5877] IPv6: Can't replace route, no match found
[   73.843275][ T5877] netlink: 'syz.0.8': attribute type 2 has an invalid length.
[   73.867708][ T5877] netlink: 'syz.0.8': attribute type 1 has an invalid length.
[   73.892644][ T5877] netlink: 'syz.0.8': attribute type 2 has an invalid length.
[   73.985357][ T5877] netlink: 156548 bytes leftover after parsing attributes in process `syz.0.8'.
[   74.955348][ T5768] Bluetooth: hci1: command tx timeout
[   75.111730][ T5884] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   75.116088][ T5768] Bluetooth: hci2: command tx timeout
[   75.126539][ T5765] Bluetooth: hci0: command tx timeout
[   75.131971][ T5765] Bluetooth: hci3: command tx timeout
[   76.120271][ T5906] Zero length message leads to an empty skb
[   76.661596][ T5915] netlink: 'syz.3.15': attribute type 10 has an invalid length.
[   76.685926][ T5915] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.15'.
[   76.724759][ T5910] netlink: 'syz.2.16': attribute type 46 has an invalid length.
[   76.754564][ T5916] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16'.
[   77.821849][ T5928] IPv6: Can't replace route, no match found
[   77.919124][ T5931] netlink: 'syz.1.21': attribute type 2 has an invalid length.
[   77.927554][ T5931] netlink: 'syz.1.21': attribute type 1 has an invalid length.
[   77.938072][ T5931] netlink: 'syz.1.21': attribute type 2 has an invalid length.
[   77.955328][ T5931] netlink: 156548 bytes leftover after parsing attributes in process `syz.1.21'.
[   78.006513][ T5937] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   79.139078][   T42] wlan1: Trigger new scan to find an IBSS to join
[   79.442267][ T5954] netlink: 'syz.3.27': attribute type 46 has an invalid length.
[   79.478258][ T5966] netlink: 'syz.0.28': attribute type 10 has an invalid length.
[   79.487071][ T5966] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.28'.
[   79.504252][ T5956] netlink: 128 bytes leftover after parsing attributes in process `syz.3.27'.
[   80.085124][   T42] wlan1: Trigger new scan to find an IBSS to join
[   81.754443][ T5996] IPv6: Can't replace route, no match found
[   82.029649][  T788] cfg80211: failed to load regulatory.db
[   82.044192][ T5991] netlink: 'syz.3.34': attribute type 2 has an invalid length.
[   82.070309][ T5991] netlink: 'syz.3.34': attribute type 1 has an invalid length.
[   82.100406][ T5991] netlink: 'syz.3.34': attribute type 2 has an invalid length.
[   82.108438][ T6002] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   82.120225][ T5991] netlink: 156548 bytes leftover after parsing attributes in process `syz.3.34'.
[   83.210758][ T6011] netlink: 'syz.0.38': attribute type 46 has an invalid length.
[   83.421263][ T6011] netlink: 128 bytes leftover after parsing attributes in process `syz.0.38'.
[   83.461663][ T6014] netlink: 'syz.1.39': attribute type 10 has an invalid length.
[   83.470417][ T6014] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.39'.
[   83.955970][ T6027] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.43'.
[   85.047191][   T42] wlan1: Trigger new scan to find an IBSS to join
[   85.176907][ T6033] netlink: 'syz.1.46': attribute type 10 has an invalid length.
[   85.184865][ T6033] netlink: 40 bytes leftover after parsing attributes in process `syz.1.46'.
[   85.194676][ T6033] veth0_vlan: entered allmulticast mode
[   85.212599][ T6033] bridge0: port 3(veth0_vlan) entered blocking state
[   85.222924][ T6033] bridge0: port 3(veth0_vlan) entered disabled state
[   85.250234][ T6033] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   85.306742][ T6036] IPv6: Can't replace route, no match found
[   85.404622][ T6036] netlink: 'syz.2.45': attribute type 2 has an invalid length.
[   85.422065][ T6036] netlink: 'syz.2.45': attribute type 1 has an invalid length.
[   85.431692][ T6036] netlink: 'syz.2.45': attribute type 2 has an invalid length.
[   85.453522][ T6036] netlink: 156548 bytes leftover after parsing attributes in process `syz.2.45'.
[   85.795525][ T6041] netlink: 'syz.3.56': attribute type 10 has an invalid length.
[   85.806391][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.3.56'.
[   85.818525][ T6041] veth0_vlan: entered allmulticast mode
[   85.839491][ T6041] bridge0: port 3(veth0_vlan) entered blocking state
[   85.856003][ T6041] bridge0: port 3(veth0_vlan) entered disabled state
[   85.922048][ T6041] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[   86.109211][ T6051] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[   87.220359][ T6087] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.53'.
[   87.957379][ T6089] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.58'.
[   87.993024][ T6095] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.063546][ T5768] Bluetooth: hci2: ISO packet for unknown connection handle 17
[   88.089389][ T6097] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   88.099213][ T6097] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.58'.
[   89.276203][ T6107] netlink: 'syz.3.64': attribute type 21 has an invalid length.
[   89.493618][ T6113] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.66'.
[   89.520437][ T6114] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.73'.
[   89.792996][ T6114] netlink: 'syz.1.73': attribute type 21 has an invalid length.
[   89.890782][ T6114] netlink: 'syz.1.73': attribute type 1 has an invalid length.
[   89.946151][ T6114] netlink: 144 bytes leftover after parsing attributes in process `syz.1.73'.
[   90.012075][ T6115] netlink: 'syz.1.73': attribute type 3 has an invalid length.
[   90.053141][ T6115] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.73'.
[   90.066988][ T6120] veth0_vlan: entered allmulticast mode
[   90.203249][ T6119] delete_channel: no stack
[   91.606581][ T6152] netlink: 184912 bytes leftover after parsing attributes in process `syz.2.77'.
[   92.205440][ T6175] netlink: 'syz.0.82': attribute type 10 has an invalid length.
[   92.298591][ T6175] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   92.469986][ T6191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.87'.
[   92.490667][ T6191] netlink: 60 bytes leftover after parsing attributes in process `syz.3.87'.
[   92.543833][ T6196] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.87'.
[   92.612680][ T6189] netlink: 60 bytes leftover after parsing attributes in process `syz.3.87'.
[   93.650359][ T6240] netlink: 16383 bytes leftover after parsing attributes in process `syz.2.101'.
[   99.124476][ T6257] syz.1.108 uses obsolete (PF_INET,SOCK_PACKET)
[   99.128053][ T6260] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[   99.146942][ T6260] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[   99.283450][ T6265] netlink: 'syz.0.110': attribute type 2 has an invalid length.
[   99.308477][ T6265] netlink: 'syz.0.110': attribute type 1 has an invalid length.
[   99.337334][ T6265] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.110'.
[   99.526210][ T6276] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[   99.622562][ T6276] netlink: 'syz.3.114': attribute type 10 has an invalid length.
[   99.654506][ T6276] macvlan0: entered promiscuous mode
[   99.660725][ T6276] macvlan0: entered allmulticast mode
[   99.885841][ T6288] netlink: 184912 bytes leftover after parsing attributes in process `syz.0.116'.
[  100.109840][ T6276] veth1_vlan: entered allmulticast mode
[  100.339584][ T6276] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  100.476514][ T6276] syz.3.114 (6276) used greatest stack depth: 19080 bytes left
[  100.644907][ T6294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'.
[  101.341158][ T6319] netlink: 'syz.3.123': attribute type 10 has an invalid length.
[  101.383392][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.004453][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.054126][ T6319] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  102.174576][ T6327] -1: renamed from syzkaller0
[  102.217996][ T6335] mac80211_hwsim hwsim3 O3�c��: renamed from wlan1 (while UP)
[  102.424432][ T6345] netlink: 184912 bytes leftover after parsing attributes in process `syz.3.129'.
[  105.519085][ T6394] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.142'.
[  105.571282][ T6394] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.142'.
[  105.649187][ T6393] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.142'.
[  105.795925][ T6396] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.142'.
[  106.647208][ T6409] netlink: 'syz.3.144': attribute type 1 has an invalid length.
[  106.661297][ T6409] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.144'.
[  106.671740][ T6409] netlink: 1 bytes leftover after parsing attributes in process `syz.3.144'.
[  106.748574][ T6413] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.146'.
[  106.852668][ T6417] netlink: 'syz.3.148': attribute type 9 has an invalid length.
[  106.862952][ T6417] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.148'.
[  107.256607][ T6430] syz.2.151[6430] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.256740][ T6430] syz.2.151[6430] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  107.294630][ T6430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.151'.
[  107.351163][ T6432] netlink: 'syz.0.153': attribute type 10 has an invalid length.
[  107.383582][ T6432] netlink: 55 bytes leftover after parsing attributes in process `syz.0.153'.
[  107.852338][ T6438] netlink: 'syz.1.155': attribute type 27 has an invalid length.
[  108.090957][ T6455] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  108.097883][ T6455] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  109.829860][ T6543] ��
: port 1(veth0_to_team) entered blocking state
[  109.925670][ T6543] ��
: port 1(veth0_to_team) entered disabled state
[  109.932637][ T6543] veth0_to_team: entered allmulticast mode
[  110.067425][ T6543] veth0_to_team: entered promiscuous mode
[  110.466800][ T6559] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[  110.620743][ T6559] team0: Port device dummy0 added
[  110.637151][ T6560] netlink: 'syz.1.172': attribute type 10 has an invalid length.
[  110.682824][ T6559] __nla_validate_parse: 1 callbacks suppressed
[  110.682845][ T6559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'.
[  111.095566][ T6560] team0: Port device dummy0 removed
[  111.111673][ T6560] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  111.131113][ T6559] netlink: 60 bytes leftover after parsing attributes in process `syz.1.172'.
[  113.817236][ T6639] netlink: 192 bytes leftover after parsing attributes in process `syz.2.198'.
[  114.273298][ T6654] netlink: 2 bytes leftover after parsing attributes in process `syz.1.204'.
[  114.290388][ T6654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.320638][ T6654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.331997][ T6654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.345703][ T6654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.356445][ T6654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  114.367673][ T6654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.383231][ T6654] batadv_slave_1: entered promiscuous mode
[  114.433305][ T6656] netlink: 'syz.1.204': attribute type 10 has an invalid length.
[  114.478954][ T6656] team0: Device veth1_macvtap failed to register rx_handler
[  114.584166][ T6661] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  114.899895][ T6672] sit0: entered allmulticast mode
[  115.006886][ T6676] bridge0: port 3(team0) entered blocking state
[  115.013366][ T6676] bridge0: port 3(team0) entered disabled state
[  115.036262][ T6676] team0: entered allmulticast mode
[  115.057811][ T6676] team_slave_0: entered allmulticast mode
[  115.063965][ T6676] team_slave_1: entered allmulticast mode
[  115.072720][ T6676] team0: entered promiscuous mode
[  115.079973][ T6676] team_slave_0: entered promiscuous mode
[  115.087757][ T6676] team_slave_1: entered promiscuous mode
[  115.097428][ T6676] bridge0: port 3(team0) entered blocking state
[  115.105064][ T6676] bridge0: port 3(team0) entered forwarding state
[  115.484374][ T6704] netlink: 'syz.1.219': attribute type 10 has an invalid length.
[  115.495393][ T6704] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.219'.
[  116.458219][ T6732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'.
[  116.470077][ T6732] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'.
[  116.491211][ T6728] netlink: 44 bytes leftover after parsing attributes in process `syz.0.227'.
[  116.513071][ T6733] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.229'.
[  116.567453][ T6733] openvswitch: netlink: Duplicate key (type 0).
[  117.330719][ T6746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.232'.
[  117.391299][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.571397][ T6746] bridge_slave_0 (unregistering): left allmulticast mode
[  117.586288][ T6746] bridge_slave_0 (unregistering): left promiscuous mode
[  117.604586][ T6746] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.142840][ T6797] netlink: 'syz.0.247': attribute type 33 has an invalid length.
[  119.153916][ T6797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.247'.
[  119.669392][ T6819] netlink: 188 bytes leftover after parsing attributes in process `syz.2.251'.
[  120.297291][ T6827] netlink: 14 bytes leftover after parsing attributes in process `syz.1.263'.
[  120.789638][ T6834] netlink: 112 bytes leftover after parsing attributes in process `syz.2.258'.
[  120.860595][ T6843] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.259'.
[  120.994374][ T6845] netlink: 'syz.3.260': attribute type 4 has an invalid length.
[  121.030062][ T6847] netlink: 'syz.3.260': attribute type 1 has an invalid length.
[  121.716549][ T6867] __nla_validate_parse: 2 callbacks suppressed
[  121.716568][ T6867] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.268'.
[  121.776020][ T6867] netlink: 8454 bytes leftover after parsing attributes in process `syz.1.268'.
[  122.336674][ T6867] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.268'.
[  123.246952][ T6898] netlink: 'syz.2.278': attribute type 4 has an invalid length.
[  123.265637][ T6898] netlink: 116 bytes leftover after parsing attributes in process `syz.2.278'.
[  123.728911][ T6914] netlink: 'syz.1.281': attribute type 33 has an invalid length.
[  123.773669][ T6914] netlink: 36 bytes leftover after parsing attributes in process `syz.1.281'.
[  124.191182][ T6927] netlink: 'syz.2.286': attribute type 2 has an invalid length.
[  124.199187][ T6927] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.286'.
[  124.331162][ T6935] Driver unsupported XDP return value 0 on prog  (id 448) dev N/A, expect packet loss!
[  124.931923][ T6951] TCP: TCP_TX_DELAY enabled
[  128.037256][ T6940] netlink: 'syz.0.288': attribute type 10 has an invalid length.
[  128.046977][ T6940] netlink: 55 bytes leftover after parsing attributes in process `syz.0.288'.
[  128.068983][ T6957] netlink: 'syz.1.293': attribute type 10 has an invalid length.
[  128.101296][ T6957] team0: Port device wlan1 added
[  128.298498][ T6967] netlink: 'syz.3.294': attribute type 33 has an invalid length.
[  128.307589][ T6967] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'.
[  128.371287][ T6963] netlink: 'syz.2.296': attribute type 10 has an invalid length.
[  128.425762][ T6963] macvlan0: entered promiscuous mode
[  128.431624][ T6963] macvlan0: entered allmulticast mode
[  128.615225][ T6963] veth1_vlan: entered allmulticast mode
[  128.660627][ T6963] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  129.226771][ T6991] netlink: 'syz.0.304': attribute type 153 has an invalid length.
[  129.234911][ T6991] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.304'.
[  129.279410][ T6993] netlink: 'syz.2.300': attribute type 4 has an invalid length.
[  129.304722][ T6993] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.300'.
[  130.708291][ T6982] syzkaller0: entered promiscuous mode
[  130.713787][ T6982] syzkaller0: entered allmulticast mode
[  131.033504][ T7009] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.307'.
[  131.057959][ T7009] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.307'.
[  131.076339][ T7005] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.307'.
[  131.097219][ T7005] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.307'.
[  131.131459][ T7012] sit0: entered promiscuous mode
[  131.151742][ T7012] sit0: entered allmulticast mode
[  132.295286][ T7020] netlink: 'syz.3.311': attribute type 10 has an invalid length.
[  132.344013][ T7020] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  132.526822][ T7043] netlink: 'syz.2.315': attribute type 4 has an invalid length.
[  132.534533][ T7043] netlink: 156 bytes leftover after parsing attributes in process `syz.2.315'.
[  132.584849][ T7043] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  132.695961][ T7048] netlink: 'syz.3.317': attribute type 3 has an invalid length.
[  132.721383][ T7048] netlink: 132 bytes leftover after parsing attributes in process `syz.3.317'.
[  133.011615][ T7054] netlink: 'syz.1.320': attribute type 10 has an invalid length.
[  133.064713][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  133.071303][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  133.081657][ T7054] team0: Device hsr_slave_0 failed to register rx_handler
[  133.165897][ T7059] syz.2.322[7059] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  133.166018][ T7059] syz.2.322[7059] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  133.215074][ T7059] __nla_validate_parse: 1 callbacks suppressed
[  133.215093][ T7059] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.322'.
[  133.289259][ T7059] netlink: 48 bytes leftover after parsing attributes in process `syz.2.322'.
[  133.740739][ T7081] netlink: 'syz.2.325': attribute type 10 has an invalid length.
[  133.838139][ T7081] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  133.870586][ T7083] netlink: 'syz.1.328': attribute type 21 has an invalid length.
[  133.891978][ T7083] netlink: 156 bytes leftover after parsing attributes in process `syz.1.328'.
[  134.718219][ T7111] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.337'.
[  134.734611][ T5768] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17
[  134.734658][ T5768] Bluetooth: hci3: Ignoring connect complete event for invalid link type
[  135.157296][ T7125] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.342'.
[  135.206843][ T7125] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.342'.
[  135.355815][ T7131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  135.363273][ T7131] IPv6: NLM_F_CREATE should be set when creating new route
[  135.370798][ T7131] IPv6: NLM_F_CREATE should be set when creating new route
[  135.378355][ T7131] IPv6: NLM_F_CREATE should be set when creating new route
[  138.081867][ T7143] netlink: 'syz.0.341': attribute type 10 has an invalid length.
[  138.161644][ T7143] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  138.948546][ T7163] netlink: 'syz.1.352': attribute type 1 has an invalid length.
[  138.969570][ T7163] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.352'.
[  139.779577][ T7168] netlink: 'syz.0.354': attribute type 10 has an invalid length.
[  139.816055][ T7168] netlink: 40 bytes leftover after parsing attributes in process `syz.0.354'.
[  139.831969][ T7175] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.357'.
[  140.869722][ T7208] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.366'.
[  140.972717][ T7215] netlink: 'syz.1.368': attribute type 21 has an invalid length.
[  140.984184][ T7215] netlink: 128 bytes leftover after parsing attributes in process `syz.1.368'.
[  140.998786][ T7215] netlink: 'syz.1.368': attribute type 4 has an invalid length.
[  141.505846][ T7231] netlink: 'syz.0.371': attribute type 2 has an invalid length.
[  141.532084][ T7230] netlink: 'syz.0.371': attribute type 2 has an invalid length.
[  141.555711][ T7231] netlink: 'syz.0.371': attribute type 2 has an invalid length.
[  141.573430][ T7230] netlink: 'syz.0.371': attribute type 153 has an invalid length.
[  141.582997][ T7230] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.371'.
[  141.767546][ T7241] syz.1.375[7241] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  141.767715][ T7241] syz.1.375[7241] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  141.885394][ T7250] netlink: 'syz.2.376': attribute type 10 has an invalid length.
[  141.950632][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.2.376'.
[  141.985263][ T7250] team0: entered promiscuous mode
[  142.007381][ T7250] team_slave_0: entered promiscuous mode
[  142.013284][ T7250] team_slave_1: entered promiscuous mode
[  142.057490][ T7250] team0: entered allmulticast mode
[  142.093194][ T7250] team_slave_0: entered allmulticast mode
[  142.129565][ T7250] team_slave_1: entered allmulticast mode
[  142.167907][ T7250] bridge0: port 1(team0) entered blocking state
[  142.174329][ T7250] bridge0: port 1(team0) entered disabled state
[  142.198025][ T7250] bridge0: port 1(team0) entered blocking state
[  142.204627][ T7250] bridge0: port 1(team0) entered forwarding state
[  142.475509][ T7255] netlink: 830 bytes leftover after parsing attributes in process `syz.1.378'.
[  142.488406][ T7255] netlink: 'syz.1.378': attribute type 10 has an invalid length.
[  142.510356][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.526184][ T7255] bridge_slave_1: left allmulticast mode
[  142.539398][ T7255] bridge_slave_1: left promiscuous mode
[  142.565776][ T7255] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.363331][ T7301] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.451022][ T7304] netlink: 'syz.1.389': attribute type 29 has an invalid length.
[  144.460077][ T7304] netlink: 'syz.1.389': attribute type 29 has an invalid length.
[  144.505831][ T7304] netlink: 'syz.1.389': attribute type 29 has an invalid length.
[  144.722248][ T7309] netlink: 144 bytes leftover after parsing attributes in process `syz.2.399'.
[  144.763754][ T7313] netlink: 'syz.1.392': attribute type 10 has an invalid length.
[  145.419873][ T7313] macvlan0: entered promiscuous mode
[  145.490336][ T7313] macvlan0: entered allmulticast mode
[  145.540203][ T7313] veth1_vlan: entered allmulticast mode
[  145.568778][ T7313] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  145.797972][ T7332] netlink: 196 bytes leftover after parsing attributes in process `syz.2.398'.
[  145.875630][ T7335] netlink: 'syz.1.400': attribute type 9 has an invalid length.
[  145.890593][ T7332] netlink: 'syz.2.398': attribute type 29 has an invalid length.
[  145.895601][ T7335] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.400'.
[  145.921853][ T7332] netlink: 'syz.2.398': attribute type 29 has an invalid length.
[  146.028511][ T7333] netlink: 'syz.2.398': attribute type 29 has an invalid length.
[  146.227152][ T7337] netlink: 'syz.2.398': attribute type 29 has an invalid length.
[  146.237314][ T7340] netlink: 'syz.1.400': attribute type 9 has an invalid length.
[  146.247407][ T7340] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.400'.
[  146.280340][ T7334] delete_channel: no stack
[  148.025863][ T7378] sock: sock_timestamping_bind_phc: sock not bind to device
[  148.110473][ T7380] netlink: 176 bytes leftover after parsing attributes in process `syz.0.416'.
[  148.684862][ T7411] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.384156][ T7418] netlink: 'syz.0.426': attribute type 2 has an invalid length.
[  150.391961][ T7418] netlink: 'syz.0.426': attribute type 8 has an invalid length.
[  150.399636][ T7418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.426'.
[  150.417559][ T7420] netlink: 'syz.3.425': attribute type 39 has an invalid length.
[  150.744494][ T7438] netlink: 3787 bytes leftover after parsing attributes in process `syz.2.430'.
[  151.261803][ T7464] netlink: 144 bytes leftover after parsing attributes in process `syz.1.438'.
[  151.510108][ T7475] bond_slave_1: mtu less than device minimum
[  151.596165][ T7479] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.442'.
[  152.329741][ T7500] netlink: 'syz.3.452': attribute type 15 has an invalid length.
[  152.337893][ T7500] netlink: 'syz.3.452': attribute type 7 has an invalid length.
[  153.378537][ T7535] netlink: 61959 bytes leftover after parsing attributes in process `syz.1.461'.
[  153.408308][ T7535] tc_dump_action: action bad kind
[  154.159720][ T7547] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.465'.
[  154.186126][ T7547] netlink: zone id is out of range
[  154.201995][ T7547] netlink: zone id is out of range
[  154.238189][ T7547] netlink: zone id is out of range
[  154.268738][ T7547] netlink: zone id is out of range
[  154.296300][ T7547] netlink: zone id is out of range
[  154.312811][ T7547] netlink: del zone limit has 8 unknown bytes
[  154.548462][ T7557] netlink: 'syz.2.467': attribute type 3 has an invalid length.
[  154.603482][ T7557] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.467'.
[  154.811294][ T7567] netlink: 'syz.1.469': attribute type 21 has an invalid length.
[  154.949524][ T7571] syzkaller0: entered promiscuous mode
[  154.966191][ T7571] syzkaller0: entered allmulticast mode
[  155.003922][ T7571] netlink: 'syz.0.472': attribute type 1 has an invalid length.
[  155.034329][ T7571] netlink: 'syz.0.472': attribute type 4 has an invalid length.
[  155.058364][ T7571] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.472'.
[  159.222290][ T7586] netlink: 830 bytes leftover after parsing attributes in process `syz.3.477'.
[  159.535400][ T7613] FAULT_INJECTION: forcing a failure.
[  159.535400][ T7613] name failslab, interval 1, probability 0, space 0, times 1
[  159.586953][ T7613] CPU: 0 PID: 7613 Comm: syz.0.483 Not tainted syzkaller #0
[  159.594284][ T7613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  159.604357][ T7613] Call Trace:
[  159.607646][ T7613]  <TASK>
[  159.610594][ T7613]  dump_stack_lvl+0x16c/0x230
[  159.615329][ T7613]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  159.621492][ T7613]  ? show_regs_print_info+0x20/0x20
[  159.626692][ T7613]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  159.632849][ T7613]  should_fail_ex+0x39d/0x4d0
[  159.637524][ T7613]  should_failslab+0x9/0x20
[  159.642017][ T7613]  slab_pre_alloc_hook+0x59/0x310
[  159.647034][ T7613]  ? kvmalloc_node+0x70/0x180
[  159.651697][ T7613]  ? kvmalloc_node+0x70/0x180
[  159.656364][ T7613]  __kmem_cache_alloc_node+0x53/0x260
[  159.661730][ T7613]  ? kvmalloc_node+0x70/0x180
[  159.666399][ T7613]  __kmalloc_node+0xa4/0x230
[  159.670984][ T7613]  kvmalloc_node+0x70/0x180
[  159.675484][ T7613]  page_pool_create+0x1eb/0x5c0
[  159.680330][ T7613]  bpf_test_run_xdp_live+0x1c1/0x1a40
[  159.685701][ T7613]  ? 0xffffffffa00044c0
[  159.689857][ T7613]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  159.695743][ T7613]  ? lockdep_hardirqs_on+0x98/0x150
[  159.700936][ T7613]  ? xdp_convert_md_to_buff+0x330/0x330
[  159.706493][ T7613]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  159.712736][ T7613]  ? _copy_from_user+0xa5/0xe0
[  159.717490][ T7613]  ? bpf_test_init+0x134/0x150
[  159.722249][ T7613]  ? xdp_convert_md_to_buff+0x5b/0x330
[  159.727703][ T7613]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  159.732989][ T7613]  ? dev_put+0x80/0x80
[  159.737061][ T7613]  ? dev_put+0x80/0x80
[  159.741123][ T7613]  bpf_prog_test_run+0x321/0x390
[  159.746139][ T7613]  __sys_bpf+0x440/0x800
[  159.750375][ T7613]  ? bpf_link_show_fdinfo+0x350/0x350
[  159.755750][ T7613]  ? lock_chain_count+0x20/0x20
[  159.760591][ T7613]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  159.766572][ T7613]  __x64_sys_bpf+0x7c/0x90
[  159.770987][ T7613]  do_syscall_64+0x55/0xb0
[  159.775403][ T7613]  ? clear_bhb_loop+0x40/0x90
[  159.780071][ T7613]  ? clear_bhb_loop+0x40/0x90
[  159.784740][ T7613]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  159.790622][ T7613] RIP: 0033:0x7f018a38f749
[  159.795027][ T7613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  159.814650][ T7613] RSP: 002b:00007f018b191038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  159.823068][ T7613] RAX: ffffffffffffffda RBX: 00007f018a5e5fa0 RCX: 00007f018a38f749
[  159.831031][ T7613] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  159.838996][ T7613] RBP: 00007f018b191090 R08: 0000000000000000 R09: 0000000000000000
[  159.846959][ T7613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  159.854923][ T7613] R13: 00007f018a5e6038 R14: 00007f018a5e5fa0 R15: 00007fff7d9f7878
[  159.862896][ T7613]  </TASK>
[  159.906469][ T7613] page_pool_create() gave up with errno -12
[  160.456175][ T7622] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  161.729635][ T7626] netlink: 'syz.1.487': attribute type 10 has an invalid length.
[  161.758092][ T7626] veth1_vlan: left allmulticast mode
[  162.303539][ T7636] netlink: 132 bytes leftover after parsing attributes in process `syz.2.491'.
[  164.238716][ T7652] netlink: 'syz.0.489': attribute type 10 has an invalid length.
[  164.293012][ T7652] team0: Device veth1_macvtap failed to register rx_handler
[  166.570046][ T7664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.498'.
[  166.625577][ T7669] bridge_slave_0: left allmulticast mode
[  166.631513][ T7669] bridge_slave_0: left promiscuous mode
[  166.642593][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.100356][ T7695] netlink: 'syz.3.506': attribute type 4 has an invalid length.
[  168.111027][ T7695] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.506'.
[  168.380828][ T7708] netlink: 'syz.2.511': attribute type 21 has an invalid length.
[  168.495161][ T7708] netlink: 128 bytes leftover after parsing attributes in process `syz.2.511'.
[  168.504237][ T7708] netlink: 'syz.2.511': attribute type 4 has an invalid length.
[  169.085046][ T7708] netlink: 'syz.2.511': attribute type 5 has an invalid length.
[  169.092753][ T7708] netlink: 3 bytes leftover after parsing attributes in process `syz.2.511'.
[  169.483993][ T7724] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.515'.
[  169.501191][ T7724] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.515'.
[  169.521230][ T7724] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.515'.
[  169.536307][ T7724] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.515'.
[  169.663431][ T7732] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.518'.
[  169.861648][ T7740] netlink: 'syz.3.521': attribute type 21 has an invalid length.
[  169.885041][ T7740] IPv6: NLM_F_CREATE should be specified when creating new route
[  169.893602][ T7740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  169.901153][ T7740] IPv6: NLM_F_CREATE should be set when creating new route
[  169.908866][ T7740] IPv6: NLM_F_CREATE should be set when creating new route
[  170.273363][ T7750] netlink: 'syz.2.525': attribute type 2 has an invalid length.
[  170.288615][ T7750] netlink: 'syz.2.525': attribute type 8 has an invalid length.
[  170.298331][ T7750] netlink: 132 bytes leftover after parsing attributes in process `syz.2.525'.
[  170.313980][ T7722] delete_channel: no stack
[  170.395388][ T7752] team0: left allmulticast mode
[  170.400313][ T7752] team_slave_0: left allmulticast mode
[  170.485133][ T7752] team_slave_1: left allmulticast mode
[  170.490682][ T7752] team0: left promiscuous mode
[  170.558442][ T7752] team_slave_0: left promiscuous mode
[  170.564066][ T7752] team_slave_1: left promiscuous mode
[  170.599755][ T7752] bridge0: port 3(team0) entered disabled state
[  172.295951][ T7752] bridge_slave_1: left allmulticast mode
[  172.314094][ T7752] bridge_slave_1: left promiscuous mode
[  172.331552][ T7752] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.357213][ T7752] bridge_slave_0: left allmulticast mode
[  172.363565][ T7752] bridge_slave_0: left promiscuous mode
[  172.379293][ T7752] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.508935][ T7767] netlink: 'syz.3.527': attribute type 4 has an invalid length.
[  172.517008][ T7767] __nla_validate_parse: 1 callbacks suppressed
[  172.517021][ T7767] netlink: 152 bytes leftover after parsing attributes in process `syz.3.527'.
[  172.637121][ T7767] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  172.973396][ T7789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.533'.
[  173.742777][ T7817] netlink: 'syz.3.544': attribute type 27 has an invalid length.
[  173.806822][ T7817] netlink: 'syz.3.544': attribute type 10 has an invalid length.
[  173.919229][ T7817] team0: Port device wlan1 added
[  174.381642][ T5768] Bluetooth: hci0: ISO packet for unknown connection handle 62
[  174.994393][ T7857] netlink: 'syz.2.554': attribute type 21 has an invalid length.
[  175.015360][ T7857] netlink: 'syz.2.554': attribute type 4 has an invalid length.
[  175.251658][ T5768] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11
[  175.260348][ T7869] syzkaller0: entered promiscuous mode
[  175.274988][ T7869] syzkaller0: entered allmulticast mode
[  175.637006][ T7883] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.562'.
[  175.788661][ T7881] delete_channel: no stack
[  176.115979][ T7901] netlink: 'syz.0.567': attribute type 28 has an invalid length.
[  176.124586][ T7901] netlink: 'syz.0.567': attribute type 4 has an invalid length.
[  176.148827][ T7901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.567'.
[  177.108783][ T7914] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.570'.
[  177.982544][ T7896] netlink: 'syz.2.566': attribute type 3 has an invalid length.
[  177.990586][ T7896] netlink: 152 bytes leftover after parsing attributes in process `syz.2.566'.
[  178.215637][ T7925] netlink: 'syz.1.572': attribute type 2 has an invalid length.
[  178.223360][ T7925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.572'.
[  178.679473][ T7926] FAULT_INJECTION: forcing a failure.
[  178.679473][ T7926] name failslab, interval 1, probability 0, space 0, times 0
[  178.692578][ T7926] CPU: 0 PID: 7926 Comm: syz.3.573 Not tainted syzkaller #0
[  178.699893][ T7926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  178.709999][ T7926] Call Trace:
[  178.713315][ T7926]  <TASK>
[  178.716633][ T7926]  dump_stack_lvl+0x16c/0x230
[  178.721349][ T7926]  ? show_regs_print_info+0x20/0x20
[  178.726567][ T7926]  ? load_image+0x3b0/0x3b0
[  178.731072][ T7926]  ? xdp_test_run_init_page+0xc1/0x450
[  178.736523][ T7926]  ? __asan_memcpy+0x40/0x70
[  178.741109][ T7926]  should_fail_ex+0x39d/0x4d0
[  178.745793][ T7926]  should_failslab+0x9/0x20
[  178.750310][ T7926]  slab_pre_alloc_hook+0x59/0x310
[  178.755345][ T7926]  kmem_cache_alloc_bulk+0x52/0x5b0
[  178.760561][ T7926]  bpf_test_run_xdp_live+0x1604/0x1a40
[  178.766479][ T7926]  ? 0xffffffffa00044c0
[  178.770643][ T7926]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  178.776567][ T7926]  ? bpf_test_run_xdp_live+0x452/0x1a40
[  178.782127][ T7926]  ? xdp_convert_md_to_buff+0x330/0x330
[  178.787859][ T7926]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  178.794097][ T7926]  ? _copy_from_user+0xa5/0xe0
[  178.798854][ T7926]  ? bpf_test_init+0x134/0x150
[  178.803629][ T7926]  ? xdp_convert_md_to_buff+0x5b/0x330
[  178.809122][ T7926]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  178.814443][ T7926]  ? dev_put+0x80/0x80
[  178.818508][ T7926]  ? dev_put+0x80/0x80
[  178.822562][ T7926]  bpf_prog_test_run+0x321/0x390
[  178.827499][ T7926]  __sys_bpf+0x440/0x800
[  178.831726][ T7926]  ? bpf_link_show_fdinfo+0x350/0x350
[  178.837094][ T7926]  ? lock_chain_count+0x20/0x20
[  178.841931][ T7926]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  178.847926][ T7926]  __x64_sys_bpf+0x7c/0x90
[  178.852348][ T7926]  do_syscall_64+0x55/0xb0
[  178.856755][ T7926]  ? clear_bhb_loop+0x40/0x90
[  178.861508][ T7926]  ? clear_bhb_loop+0x40/0x90
[  178.866178][ T7926]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  178.872062][ T7926] RIP: 0033:0x7f1652b8f749
[  178.876466][ T7926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.896071][ T7926] RSP: 002b:00007f1653a98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  178.904496][ T7926] RAX: ffffffffffffffda RBX: 00007f1652de5fa0 RCX: 00007f1652b8f749
[  178.912458][ T7926] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  178.920430][ T7926] RBP: 00007f1653a98090 R08: 0000000000000000 R09: 0000000000000000
[  178.928387][ T7926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  178.936349][ T7926] R13: 00007f1652de6038 R14: 00007f1652de5fa0 R15: 00007ffe939b2b48
[  178.944319][ T7926]  </TASK>
[  179.104501][ T7939] netlink: 'syz.1.576': attribute type 49 has an invalid length.
[  179.128387][ T7939] netlink: 'syz.1.576': attribute type 49 has an invalid length.
[  179.377099][ T7941] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.578'.
[  179.395395][ T7941] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  179.503032][ T7952] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.581'.
[  179.987112][ T7978] netlink: 'syz.2.582': attribute type 39 has an invalid length.
[  180.358349][ T7978] veth0_macvtap: left promiscuous mode
[  180.705451][ T7996] tap0: tun_chr_ioctl cmd 1074025677
[  180.724386][ T7996] tap0: linktype set to 1
[  180.989001][ T8010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.596'.
[  181.013255][ T8011] netlink: 132 bytes leftover after parsing attributes in process `syz.3.596'.
[  181.226052][ T8017] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.597'.
[  181.235956][ T8017] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.597'.
[  181.246814][ T8014] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.597'.
[  181.484252][ T8023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.599'.
[  182.234340][ T8037] netlink: 'syz.2.604': attribute type 3 has an invalid length.
[  184.853254][ T8043] __nla_validate_parse: 7 callbacks suppressed
[  184.853273][ T8043] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.604'.
[  185.174560][ T8054] netlink: 'syz.3.609': attribute type 2 has an invalid length.
[  185.193352][ T8054] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.609'.
[  185.376951][ T8068] netlink: 'syz.0.613': attribute type 2 has an invalid length.
[  185.385193][ T8068] netlink: 'syz.0.613': attribute type 8 has an invalid length.
[  185.393064][ T8068] netlink: 132 bytes leftover after parsing attributes in process `syz.0.613'.
[  185.578837][ T8071] tap0: tun_chr_ioctl cmd 1074025675
[  185.584369][ T8071] tap0: persist enabled
[  185.648053][ T8071] tap1: tun_chr_ioctl cmd 1074025677
[  185.672700][ T8071] tap1: linktype set to 778
[  185.687474][ T8071] tap0: tun_chr_ioctl cmd 1074025675
[  185.703238][ T8071] tap0: persist enabled
[  188.835831][ T8102] netlink: 'syz.1.623': attribute type 10 has an invalid length.
[  188.886294][ T8102] veth0_vlan: left allmulticast mode
[  188.961436][ T8102] veth0_vlan: left promiscuous mode
[  189.001991][ T8102] veth0_vlan: entered promiscuous mode
[  189.029440][ T8102] team0: Device veth0_vlan failed to register rx_handler
[  189.098995][ T8112] macsec0: entered promiscuous mode
[  189.116417][ T8112] macsec0: entered allmulticast mode
[  189.121762][ T8112] veth1_macvtap: entered allmulticast mode
[  189.485107][ T8111] can: request_module (can-proto-0) failed.
[  189.497969][ T8119] netlink: 'syz.1.627': attribute type 10 has an invalid length.
[  190.176236][ T8133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.631'.
[  190.204600][ T8133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.631'.
[  190.251606][ T8133] netlink: 60 bytes leftover after parsing attributes in process `syz.0.631'.
[  190.455148][ T8138] netlink: 'syz.0.631': attribute type 10 has an invalid length.
[  190.539653][ T8138] 8021q: adding VLAN 0 to HW filter on device team0
[  190.626062][ T8138] bond0: (slave team0): Enslaving as an active interface with an up link
[  190.804376][ T8142] netlink: 14 bytes leftover after parsing attributes in process `syz.2.632'.
[  191.190989][ T8151] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  191.223892][ T8151] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  191.436571][ T5774] Bluetooth: hci1: command 0x0406 tx timeout
[  191.442652][ T5775] Bluetooth: hci2: command 0x0406 tx timeout
[  191.453035][ T5775] Bluetooth: hci3: command 0x0406 tx timeout
[  191.458104][ T5082] Bluetooth: hci0: command 0x0406 tx timeout
[  191.752745][ T8166] netlink: 'syz.2.639': attribute type 10 has an invalid length.
[  191.768758][ T8166] veth1_vlan: left allmulticast mode
[  192.011553][ T8173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.035093][ T8173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.058480][ T8173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.075097][ T8173] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.317063][ T8174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.640'.
[  192.350320][ T8179] netlink: 'syz.3.641': attribute type 33 has an invalid length.
[  192.382471][ T8179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.641'.
[  192.874079][ T8200] netlink: 172 bytes leftover after parsing attributes in process `syz.3.649'.
[  193.741850][ T8207] netlink: 'syz.2.651': attribute type 10 has an invalid length.
[  194.484836][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  194.492401][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  195.040190][ T8221] pim6reg1: entered allmulticast mode
[  195.807493][ T8228] syzkaller0: entered promiscuous mode
[  195.813142][ T8228] syzkaller0: entered allmulticast mode
[  195.822808][ T8228] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  196.406681][ T8243] netlink: 'syz.2.662': attribute type 10 has an invalid length.
[  197.629721][ T8268] IPv6: Can't replace route, no match found
[  197.697477][ T8271] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  197.760284][ T8268] netlink: 'syz.3.670': attribute type 10 has an invalid length.
[  200.713370][ T8268] team0: Port device wlan1 removed
[  200.719487][ T8268] wlan1: mtu less than device minimum
[  200.735424][ T8268] bond0: (slave wlan1): Error -22 calling dev_set_mtu
[  200.907134][ T8287] C: renamed from team_slave_0
[  201.249790][ T8287] netlink: 'syz.2.673': attribute type 3 has an invalid length.
[  201.295474][ T8287] netlink: 152 bytes leftover after parsing attributes in process `syz.2.673'.
[  201.342782][ T8287] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  201.433113][ T8290] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  201.453838][ T8290] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  201.472792][ T8291] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  201.499401][ T8295] netlink: 'syz.1.675': attribute type 10 has an invalid length.
[  201.688326][ T8300] FAULT_INJECTION: forcing a failure.
[  201.688326][ T8300] name failslab, interval 1, probability 0, space 0, times 0
[  201.701265][ T8300] CPU: 1 PID: 8300 Comm: syz.3.677 Not tainted syzkaller #0
[  201.708598][ T8300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  201.718684][ T8300] Call Trace:
[  201.721987][ T8300]  <TASK>
[  201.724930][ T8300]  dump_stack_lvl+0x16c/0x230
[  201.729640][ T8300]  ? lock_chain_count+0x20/0x20
[  201.734507][ T8300]  ? show_regs_print_info+0x20/0x20
[  201.739711][ T8300]  ? load_image+0x3b0/0x3b0
[  201.744217][ T8300]  ? lockdep_hardirqs_on+0x98/0x150
[  201.749409][ T8300]  ? xdp_test_run_init_page+0xc1/0x450
[  201.754863][ T8300]  ? __asan_memcpy+0x40/0x70
[  201.759454][ T8300]  should_fail_ex+0x39d/0x4d0
[  201.764242][ T8300]  should_failslab+0x9/0x20
[  201.768744][ T8300]  slab_pre_alloc_hook+0x59/0x310
[  201.773767][ T8300]  kmem_cache_alloc_bulk+0x52/0x5b0
[  201.778968][ T8300]  bpf_test_run_xdp_live+0x1604/0x1a40
[  201.784424][ T8300]  ? bpf_dispatcher_change_prog+0xa76/0xcc0
[  201.790320][ T8300]  ? bpf_test_run_xdp_live+0x452/0x1a40
[  201.795860][ T8300]  ? xdp_convert_md_to_buff+0x330/0x330
[  201.801416][ T8300]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  201.807647][ T8300]  ? _copy_from_user+0xa5/0xe0
[  201.812403][ T8300]  ? bpf_test_init+0x134/0x150
[  201.817158][ T8300]  ? xdp_convert_md_to_buff+0x5b/0x330
[  201.822610][ T8300]  bpf_prog_test_run_xdp+0x76c/0xfa0
[  201.827905][ T8300]  ? dev_put+0x80/0x80
[  201.831993][ T8300]  ? dev_put+0x80/0x80
[  201.836142][ T8300]  bpf_prog_test_run+0x321/0x390
[  201.841076][ T8300]  __sys_bpf+0x440/0x800
[  201.845312][ T8300]  ? bpf_link_show_fdinfo+0x350/0x350
[  201.850686][ T8300]  ? lock_chain_count+0x20/0x20
[  201.855537][ T8300]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  201.861530][ T8300]  __x64_sys_bpf+0x7c/0x90
[  201.865941][ T8300]  do_syscall_64+0x55/0xb0
[  201.870351][ T8300]  ? clear_bhb_loop+0x40/0x90
[  201.875035][ T8300]  ? clear_bhb_loop+0x40/0x90
[  201.879706][ T8300]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  201.885594][ T8300] RIP: 0033:0x7f1652b8f749
[  201.890005][ T8300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  201.909601][ T8300] RSP: 002b:00007f1653a98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  201.918007][ T8300] RAX: ffffffffffffffda RBX: 00007f1652de5fa0 RCX: 00007f1652b8f749
[  201.925968][ T8300] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a
[  201.933934][ T8300] RBP: 00007f1653a98090 R08: 0000000000000000 R09: 0000000000000000
[  201.942327][ T8300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  201.950288][ T8300] R13: 00007f1652de6038 R14: 00007f1652de5fa0 R15: 00007ffe939b2b48
[  201.958259][ T8300]  </TASK>
[  202.869694][ T8322] netlink: 60 bytes leftover after parsing attributes in process `syz.1.683'.
[  202.939827][ T8324] netlink: 'syz.1.683': attribute type 10 has an invalid length.
[  202.950156][ T8320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.682'.
[  202.972356][ T8324] netlink: 164 bytes leftover after parsing attributes in process `syz.1.683'.
[  202.999911][ T8320] netlink: 60 bytes leftover after parsing attributes in process `syz.3.682'.
[  203.070125][ T8329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.682'.
[  203.162399][ T8331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.682'.
[  203.437876][ T8338] netlink: 'syz.1.688': attribute type 153 has an invalid length.
[  203.468101][ T8336] netlink: 'syz.2.687': attribute type 10 has an invalid length.
[  203.485075][ T8338] netlink: 'syz.1.688': attribute type 1 has an invalid length.
[  203.492768][ T8338] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.688'.
[  204.914470][ T8379] netlink: 'syz.0.699': attribute type 10 has an invalid length.
[  204.933050][ T8376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'.
[  205.001791][ T8376] netlink: 60 bytes leftover after parsing attributes in process `syz.2.698'.
[  205.687325][ T8409] lo: entered promiscuous mode
[  205.784598][ T8413] syzkaller0: entered promiscuous mode
[  205.795287][ T8413] syzkaller0: entered allmulticast mode
[  206.029455][ T8419] netlink: 'syz.1.712': attribute type 10 has an invalid length.
[  206.326644][ T3421] tipc: Subscription rejected, illegal request
[  206.523551][ T8441] __nla_validate_parse: 32 callbacks suppressed
[  206.523578][ T8441] netlink: 36 bytes leftover after parsing attributes in process `syz.3.720'.
[  206.565091][ T8441] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  207.479990][ T8470] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.726'.
[  207.489329][ T8468] netlink: 'syz.0.725': attribute type 10 has an invalid length.
[  207.506268][ T8470] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  207.524986][ T8470] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  208.371629][ T8506] netlink: 'syz.3.735': attribute type 10 has an invalid length.
[  208.396069][ T8506] netlink: 'syz.3.735': attribute type 10 has an invalid length.
[  208.406192][ T8506] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.735'.
[  208.429105][ T8506] openvswitch: netlink: Message has 4 unknown bytes.
[  208.452574][ T8509] netlink: 'syz.0.736': attribute type 10 has an invalid length.
[  208.647674][ T8517] netlink: 'syz.2.739': attribute type 21 has an invalid length.
[  208.673433][ T8517] netlink: 'syz.2.739': attribute type 6 has an invalid length.
[  208.711659][ T8517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.739'.
[  208.722207][ T8513] netlink: 'syz.3.738': attribute type 4 has an invalid length.
[  208.735040][ T8513] netlink: 152 bytes leftover after parsing attributes in process `syz.3.738'.
[  208.758357][ T8521] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.740'.
[  208.805663][ T8513] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  208.889105][ T8523] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.741'.
[  209.303967][ T8529] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.744'.
[  210.546060][ T8543] netlink: 'syz.0.748': attribute type 21 has an invalid length.
[  210.713641][ T8554] syz.0.752[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  210.713768][ T8554] syz.0.752[8554] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  210.992297][ T8567] netlink: 'syz.3.756': attribute type 10 has an invalid length.
[  211.017867][ T8567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.756'.
[  211.029376][ T8567] dummy0: entered promiscuous mode
[  211.863014][ T8597] netlink: 'syz.1.762': attribute type 21 has an invalid length.
[  211.878382][ T8597] netlink: 128 bytes leftover after parsing attributes in process `syz.1.762'.
[  211.890439][ T8597] netlink: 3 bytes leftover after parsing attributes in process `syz.1.762'.
[  212.164110][ T8605] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.766'.
[  212.192437][ T8608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.767'.
[  212.199986][ T8605] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.766'.
[  212.214524][ T8608] netlink: 60 bytes leftover after parsing attributes in process `syz.2.767'.
[  212.234027][ T8605] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.766'.
[  212.250451][ T8609] netlink: 60 bytes leftover after parsing attributes in process `syz.2.767'.
[  212.252878][ T8605] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.766'.
[  212.276895][ T8605] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.766'.
[  212.496821][ T8605] validate_nla: 38 callbacks suppressed
[  212.496837][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.517804][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.528628][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.561546][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.597862][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.619480][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.651395][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.668764][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.698842][ T8605] netlink: 'syz.1.766': attribute type 1 has an invalid length.
[  212.700657][ T8618] netlink: 'syz.2.770': attribute type 10 has an invalid length.
[  212.872951][ T8624] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  213.317594][ T8624] syzkaller0: entered promiscuous mode
[  213.323754][ T8624] syzkaller0: entered allmulticast mode
[  217.599407][ T8668] validate_nla: 23 callbacks suppressed
[  217.599425][ T8668] netlink: 'syz.0.784': attribute type 1 has an invalid length.
[  217.616855][ T8668] __nla_validate_parse: 63 callbacks suppressed
[  217.616878][ T8668] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.784'.
[  217.692205][ T8668] netlink: 39927 bytes leftover after parsing attributes in process `syz.0.784'.
[  217.844601][ T8672] netlink: 'syz.2.785': attribute type 10 has an invalid length.
[  218.800640][ T8686] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.791'.
[  218.982690][ T8694] netlink: 'syz.2.794': attribute type 10 has an invalid length.
[  219.306260][ T8699] netlink: 'syz.1.787': attribute type 10 has an invalid length.
[  220.653082][ T8729] netlink: 'syz.1.804': attribute type 10 has an invalid length.
[  221.313814][ T8736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  221.324703][ T8736] hsr0: entered promiscuous mode
[  221.330472][ T8736] hsr0: entered allmulticast mode
[  221.336162][ T8736] hsr_slave_0: entered allmulticast mode
[  221.341825][ T8736] hsr_slave_1: entered allmulticast mode
[  221.535699][ T8743] netlink: 'syz.1.808': attribute type 12 has an invalid length.
[  221.562194][ T8743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.808'.
[  221.642230][ T8743] netlink: 'syz.1.808': attribute type 21 has an invalid length.
[  221.656179][ T8748] netlink: 'syz.0.815': attribute type 10 has an invalid length.
[  222.334105][ T8773] netlink: 188 bytes leftover after parsing attributes in process `syz.1.813'.
[  225.966217][ T8797] netlink: 'syz.3.820': attribute type 10 has an invalid length.
[  225.988218][ T8797] veth1_vlan: left allmulticast mode
[  226.641565][ T8811] macsec0: entered promiscuous mode
[  226.659312][ T8811] macsec0: entered allmulticast mode
[  226.664795][ T8811] veth1_macvtap: entered allmulticast mode
[  226.922543][ T8825] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.829'.
[  226.968834][ T8824] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.829'.
[  226.985134][ T8825] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  226.990134][ T8824] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  227.038280][ T8828] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.831'.
[  227.477012][ T8839] netlink: 'syz.0.833': attribute type 21 has an invalid length.
[  227.485348][ T8839] netlink: 128 bytes leftover after parsing attributes in process `syz.0.833'.
[  227.494379][ T8839] netlink: 'syz.0.833': attribute type 4 has an invalid length.
[  227.502973][ T8839] netlink: 'syz.0.833': attribute type 5 has an invalid length.
[  227.545136][ T8839] netlink: 3 bytes leftover after parsing attributes in process `syz.0.833'.
[  227.710552][ T8845] netlink: 'syz.1.834': attribute type 10 has an invalid length.
[  228.098106][ T8850] veth1_macvtap: left allmulticast mode
[  228.104010][ T8850] macsec0: left promiscuous mode
[  228.126505][ T8850] macsec0: left allmulticast mode
[  228.159809][ T8859] macsec0: entered promiscuous mode
[  228.166167][ T8859] macsec0: entered allmulticast mode
[  228.197216][ T8859] veth1_macvtap: entered allmulticast mode
[  228.379115][ T8869] netlink: 'syz.3.841': attribute type 10 has an invalid length.
[  228.428747][ T8869] veth1_macvtap: left promiscuous mode
[  228.710439][ T8875] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.844'.
[  229.213395][ T8888] syzkaller0: entered promiscuous mode
[  229.240943][ T8888] syzkaller0: entered allmulticast mode
[  229.271930][ T8882] netlink: 'syz.3.846': attribute type 21 has an invalid length.
[  229.302847][ T8882] netlink: 100 bytes leftover after parsing attributes in process `syz.3.846'.
[  231.884113][ T8897] netlink: 'syz.2.850': attribute type 10 has an invalid length.
[  231.902130][ T8906] hsr0: entered promiscuous mode
[  231.966475][ T8906] hsr0: entered allmulticast mode
[  231.971676][ T8906] hsr_slave_0: entered allmulticast mode
[  231.981152][ T8906] hsr_slave_1: entered allmulticast mode
[  231.992382][ T8913] sctp: [Deprecated]: syz.2.853 (pid 8913) Use of struct sctp_assoc_value in delayed_ack socket option.
[  231.992382][ T8913] Use struct sctp_sack_info instead
[  232.089950][ T8913] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.853'.
[  234.490828][ T8975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  234.561288][ T8975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.871'.
[  234.742998][ T8988] netlink: 'syz.3.874': attribute type 21 has an invalid length.
[  234.886508][ T8995] ��
: port 1(veth0_to_bridge) entered blocking state
[  234.893534][ T8995] ��
: port 1(veth0_to_bridge) entered disabled state
[  234.911133][ T8995] veth0_to_bridge: entered allmulticast mode
[  234.926333][ T8995] veth0_to_bridge: entered promiscuous mode
[  235.773144][ T9021] netlink: 'syz.3.882': attribute type 10 has an invalid length.
[  236.660539][ T9024] netlink: 'syz.2.883': attribute type 10 has an invalid length.
[  236.739214][ T9026] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.885'.
[  237.113313][ T9026] netlink: 'syz.3.885': attribute type 2 has an invalid length.
[  237.185550][ T9026] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.885'.
[  237.214541][ T9030] netlink: 'syz.0.884': attribute type 3 has an invalid length.
[  237.244034][ T9030] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.884'.
[  240.259996][ T9045] tun0: tun_chr_ioctl cmd 1074025675
[  240.275082][ T9045] tun0: persist enabled
[  240.292082][ T9045] tun0: tun_chr_ioctl cmd 2148553947
[  240.305628][ T9045] tun0: tun_chr_ioctl cmd 1074025675
[  240.322135][ T9045] tun0: persist disabled
[  240.727113][ T9049] netlink: 'syz.0.891': attribute type 4 has an invalid length.
[  240.800387][ T9049] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.891'.
[  241.293090][ T9064] netlink: 'syz.0.895': attribute type 10 has an invalid length.
[  241.334702][ T9062] netlink: 'syz.2.896': attribute type 10 has an invalid length.
[  241.860045][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.879601][ T9062] bridge_slave_1: left allmulticast mode
[  241.885750][ T9062] bridge_slave_1: left promiscuous mode
[  241.892135][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.926488][ T9062] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  242.161586][ T9075] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.898'.
[  242.523097][ T9075] netlink: 'syz.0.898': attribute type 2 has an invalid length.
[  242.555364][ T9075] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.898'.
[  242.599624][ T9080] netlink: 'syz.3.900': attribute type 2 has an invalid length.
[  242.651524][ T9080] netlink: 132 bytes leftover after parsing attributes in process `syz.3.900'.
[  243.110910][ T9079] netlink: 'syz.2.901': attribute type 21 has an invalid length.
[  243.131495][ T9079] netlink: 100 bytes leftover after parsing attributes in process `syz.2.901'.
[  243.439149][ T9087] syzkaller0: entered promiscuous mode
[  243.459449][ T9087] syzkaller0: entered allmulticast mode
[  246.613779][ T9106] syzkaller0: entered promiscuous mode
[  246.619418][ T9106] syzkaller0: entered allmulticast mode
[  246.633183][ T9113] netlink: 'syz.3.908': attribute type 10 has an invalid length.
[  246.892395][ T9126] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.912'.
[  247.432143][ T9126] netlink: 'syz.2.912': attribute type 2 has an invalid length.
[  247.451587][ T9126] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.912'.
[  249.179220][ T9131] netlink: 176 bytes leftover after parsing attributes in process `syz.0.921'.
[  249.190663][ T9137] netlink: 'syz.2.914': attribute type 10 has an invalid length.
[  249.201209][ T9137] netlink: 168 bytes leftover after parsing attributes in process `syz.2.914'.
[  249.226132][ T9137] syz_tun: entered promiscuous mode
[  249.231487][ T9137] syz_tun: entered allmulticast mode
[  249.237934][ T9137] team0: Port device syz_tun added
[  249.655738][ T9154] netlink: 'syz.0.922': attribute type 21 has an invalid length.
[  249.669717][ T9154] netlink: 100 bytes leftover after parsing attributes in process `syz.0.922'.
[  250.010201][ T9160] netlink: 'syz.0.924': attribute type 10 has an invalid length.
[  250.018694][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.924'.
[  250.030089][ T9160] dummy0: entered promiscuous mode
[  250.037750][ T9160] dummy0: entered allmulticast mode
[  250.056509][ T9160] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  250.600775][ T9193] netlink: 'syz.0.934': attribute type 6 has an invalid length.
[  250.608789][ T9193] netlink: 76 bytes leftover after parsing attributes in process `syz.0.934'.
[  250.817002][ T9199] netlink: 'syz.2.937': attribute type 3 has an invalid length.
[  250.825226][ T9199] netlink: 78232 bytes leftover after parsing attributes in process `syz.2.937'.
[  251.546852][ T9220] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  251.608304][ T9220] netlink: 'syz.0.942': attribute type 9 has an invalid length.
[  251.616498][ T9220] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.942'.
[  251.832174][ T9225] netlink: 'syz.3.943': attribute type 10 has an invalid length.
[  252.144349][ T9240] netlink: 'syz.0.949': attribute type 29 has an invalid length.
[  252.165678][ T9240] netlink: 'syz.0.949': attribute type 29 has an invalid length.
[  252.385243][ T9246] netlink: 'syz.0.949': attribute type 10 has an invalid length.
[  252.421142][ T9243] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.950'.
[  252.444484][ T9254] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.953'.
[  252.468914][ T9243] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.950'.
[  252.719763][ T9264] dummy0: entered promiscuous mode
[  252.729907][ T9264] dummy0: entered allmulticast mode
[  252.741688][ T9264] bridge0: port 2(dummy0) entered blocking state
[  252.755466][ T9264] bridge0: port 2(dummy0) entered disabled state
[  252.803854][ T9264] bridge0: port 2(dummy0) entered blocking state
[  252.810813][ T9264] bridge0: port 2(dummy0) entered forwarding state
[  252.992692][ T9279] openvswitch: netlink: Key type 4112 is out of range max 32
[  254.562870][ T9323] __nla_validate_parse: 4 callbacks suppressed
[  254.562899][ T9323] netlink: 2 bytes leftover after parsing attributes in process `syz.1.971'.
[  254.623232][ T9325] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.975'.
[  254.632982][ T9327] netlink: 3 bytes leftover after parsing attributes in process `syz.3.976'.
[  254.642347][ T9322] validate_nla: 10 callbacks suppressed
[  254.642384][ T9322] netlink: 'syz.2.974': attribute type 39 has an invalid length.
[  254.912862][ T9332] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.977'.
[  255.380875][ T9345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.982'.
[  255.407751][ T9341] netlink: 'syz.2.980': attribute type 10 has an invalid length.
[  255.522604][ T5765] Bluetooth: hci2: ISO packet for unknown connection handle 1854
[  255.698122][ T9346] netlink: 'syz.3.981': attribute type 10 has an invalid length.
[  255.792105][ T9362] lo: entered allmulticast mode
[  255.949245][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  255.955827][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  256.226522][ T9374] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.990'.
[  256.242999][ T9374] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.990'.
[  256.264049][ T9374] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.990'.
[  256.281535][ T9374] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.990'.
[  256.306640][ T9374] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.990'.
[  256.953046][ T9392] netlink: 'syz.2.997': attribute type 29 has an invalid length.
[  256.965513][ T9392] netlink: 'syz.2.997': attribute type 29 has an invalid length.
[  256.975444][ T9390] netlink: 'syz.3.996': attribute type 10 has an invalid length.
[  256.987240][ T9392] netlink: 'syz.2.997': attribute type 29 has an invalid length.
[  257.007357][ T9392] netlink: 'syz.2.997': attribute type 29 has an invalid length.
[  257.435954][ T9398] netlink: 'syz.1.999': attribute type 10 has an invalid length.
[  257.718987][ T9409] netlink: 'syz.0.1002': attribute type 21 has an invalid length.
[  260.137981][ T9420] __nla_validate_parse: 1 callbacks suppressed
[  260.137998][ T9420] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1005'.
[  260.238185][ T9420] netlink: 'syz.1.1005': attribute type 10 has an invalid length.
[  260.419300][ T9420] team0: Port device wlan1 removed
[  260.963202][ T9438] netlink: 'syz.0.1010': attribute type 10 has an invalid length.
[  262.046021][ T9450] netlink: 'syz.0.1013': attribute type 10 has an invalid length.
[  262.068712][ T9451] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1014'.
[  263.621636][ T9480] netlink: 'syz.1.1023': attribute type 10 has an invalid length.
[  263.817606][ T9483] netlink: 'syz.2.1024': attribute type 10 has an invalid length.
[  264.436684][ T9487] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1025'.
[  265.055737][ T9507] netlink: 'syz.3.1031': attribute type 1 has an invalid length.
[  265.105060][ T9507] netlink: 'syz.3.1031': attribute type 4 has an invalid length.
[  265.135352][ T9507] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1031'.
[  265.887253][ T9524] netlink: 'syz.1.1035': attribute type 10 has an invalid length.
[  268.602180][ T9535] netlink: 'syz.0.1039': attribute type 9 has an invalid length.
[  268.641205][ T9539] syzkaller0: entered promiscuous mode
[  268.675251][ T9535] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1039'.
[  268.708710][ T9539] syzkaller0: entered allmulticast mode
[  268.835730][ T9545] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  269.109653][ T9549] netlink: 'syz.2.1043': attribute type 10 has an invalid length.
[  269.157662][ T9549] bridge0: port 1(team0) entered disabled state
[  269.183803][ T9549] team0: left allmulticast mode
[  269.189756][ T9549] C: left allmulticast mode
[  269.194505][ T9549] team_slave_1: left allmulticast mode
[  269.207320][ T9549] syz_tun: left allmulticast mode
[  269.213971][ T9549] team0: left promiscuous mode
[  269.223321][ T9549] C: left promiscuous mode
[  269.229411][ T9549] team_slave_1: left promiscuous mode
[  269.238088][ T9549] syz_tun: left promiscuous mode
[  269.248867][ T9549] bridge0: port 1(team0) entered disabled state
[  269.333255][ T9549] 8021q: adding VLAN 0 to HW filter on device team0
[  269.350362][ T9549] bond0: (slave team0): Enslaving as an active interface with an up link
[  271.603319][ T9569] netlink: 'syz.0.1048': attribute type 10 has an invalid length.
[  272.240772][ T9596] netlink: 'syz.1.1056': attribute type 1 has an invalid length.
[  272.254000][ T9597] ref_ctr_offset mismatch. inode: 0x5de offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  272.290990][ T9596] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1056'.
[  272.659705][ T9611] netlink: 'syz.0.1062': attribute type 21 has an invalid length.
[  272.675038][ T9611] netlink: 'syz.0.1062': attribute type 6 has an invalid length.
[  272.682862][ T9611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1062'.
[  272.708369][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1061'.
[  272.734188][ T9616] netlink: 'syz.2.1063': attribute type 10 has an invalid length.
[  272.810816][ T9617] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1061'.
[  274.155919][ T9655] netlink: 'syz.2.1075': attribute type 10 has an invalid length.
[  274.199587][ T9650] delete_channel: no stack
[  274.350822][ T9662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1077'.
[  275.608210][ T9693] netlink: 'syz.2.1088': attribute type 3 has an invalid length.
[  275.618865][ T9693] netlink: 'syz.2.1088': attribute type 8 has an invalid length.
[  275.627769][ T9693] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.1088'.
[  275.628961][ T9692] netlink: 'syz.3.1087': attribute type 10 has an invalid length.
[  276.807027][ T9713] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1094'.
[  276.940943][ T9724] netlink: 'syz.2.1097': attribute type 10 has an invalid length.
[  276.956933][ T9724] veth0_vlan: left promiscuous mode
[  276.962981][ T9724] veth0_vlan: entered promiscuous mode
[  276.970911][ T9724] team0: Device veth0_vlan failed to register rx_handler
[  277.110250][ T9728] netlink: 'syz.2.1099': attribute type 10 has an invalid length.
[  277.219339][ T9732] netlink: 'syz.1.1100': attribute type 10 has an invalid length.
[  277.232638][ T9732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1100'.
[  277.266009][ T9732] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  277.300744][ T9732] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1100'.
[  277.645228][ T9741] can: request_module (can-proto-0) failed.
[  277.691798][ T9746] netlink: 'syz.3.1105': attribute type 10 has an invalid length.
[  277.758652][ T9755] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1105'.
[  278.101974][ T9771] netlink: 'syz.3.1111': attribute type 1 has an invalid length.
[  278.661607][ T9800] lo: entered promiscuous mode
[  278.695321][ T9800] lo: left allmulticast mode
[  278.995517][ T9811] netlink: 'syz.0.1119': attribute type 29 has an invalid length.
[  279.004161][ T9811] netlink: 'syz.0.1119': attribute type 29 has an invalid length.
[  279.608965][ T9821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1123'.
[  280.716047][ T9840] netlink: 'syz.3.1128': attribute type 21 has an invalid length.
[  280.787605][ T9815] syz.2.1121 (9815) used greatest stack depth: 18536 bytes left
[  281.045060][ T9850] netlink: 'syz.3.1130': attribute type 10 has an invalid length.
[  282.797885][ T9879] ip6_vti0: mtu greater than device maximum
[  284.008735][ T9889] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1141'.
[  284.447424][ T9896] netlink: 'syz.3.1142': attribute type 10 has an invalid length.
[  288.528126][ T9932] netlink: 'syz.1.1156': attribute type 10 has an invalid length.
[  289.581659][ T9957] netlink: 'syz.0.1163': attribute type 10 has an invalid length.
[  289.589656][ T9957] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1163'.
[  289.798153][ T9967] netlink: 'syz.2.1165': attribute type 10 has an invalid length.
[  289.813948][ T9967] veth0_vlan: left allmulticast mode
[  289.843098][ T9967] veth0_vlan: left promiscuous mode
[  289.859630][ T9967] veth0_vlan: entered promiscuous mode
[  289.903424][ T9967] team0: Device veth0_vlan failed to register rx_handler
[  290.122287][ T9973] netlink: 'syz.1.1168': attribute type 10 has an invalid length.
[  290.204530][ T9989] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1173'.
[  290.255452][ T9989] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.1173'.
[  290.542853][ T9996] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1174'.
[  290.703367][T10001] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1176'.
[  290.721510][T10001] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1176'.
[  290.767182][T10008] netlink: 'syz.1.1178': attribute type 10 has an invalid length.
[  290.776340][T10008] team0: Device wlan1 is of different type
[  290.789496][T10007] netlink: 'syz.1.1178': attribute type 10 has an invalid length.
[  290.798608][T10006] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1179'.
[  290.816135][T10007] team0: Device wlan1 is of different type
[  290.829455][T10012] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1179'.
[  290.843230][T10009] macvtap0: refused to change device tx_queue_len
[  291.009066][T10019] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1182'.
[  291.020074][T10017] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1181'.
[  291.283733][T10025] netlink: 'syz.0.1183': attribute type 10 has an invalid length.
[  292.576963][T10053] netlink: 'syz.2.1191': attribute type 21 has an invalid length.
[  292.598915][T10053] netlink: 'syz.2.1191': attribute type 11 has an invalid length.
[  293.018675][T10055] C: renamed from team_slave_0 (while UP)
[  293.340081][T10061] netlink: 'syz.3.1194': attribute type 6 has an invalid length.
[  293.516276][T10073] syzkaller0: entered promiscuous mode
[  293.522420][T10073] syzkaller0: entered allmulticast mode
[  293.661409][T10076] netlink: 'syz.1.1197': attribute type 10 has an invalid length.
[  294.665330][T10103] netlink: 'syz.0.1206': attribute type 3 has an invalid length.
[  294.679185][T10103] __nla_validate_parse: 5 callbacks suppressed
[  294.679198][T10103] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1206'.
[  294.739359][T10103] netlink: 'syz.0.1206': attribute type 27 has an invalid length.
[  294.767679][T10103] netlink: 'syz.0.1206': attribute type 4 has an invalid length.
[  294.803871][T10103] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1206'.
[  294.947978][T10110] netlink: 'syz.2.1209': attribute type 10 has an invalid length.
[  295.454187][T10116] syzkaller0: entered promiscuous mode
[  295.468617][T10116] syzkaller0: entered allmulticast mode
[  295.557777][T10128] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1214'.
[  295.609635][T10128] openvswitch: netlink: Flow actions attr not present in new flow.
[  295.671524][T10130] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.1215'.
[  295.706955][T10133] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1214'.
[  295.788064][T10133] openvswitch: netlink: Flow actions attr not present in new flow.
[  295.932933][T10136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1216'.
[  296.111919][ T5765] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  296.114787][T10140] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1218'.
[  297.920446][T10169] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1225'.
[  298.248856][T10181] wg2: entered promiscuous mode
[  298.253880][T10181] wg2: entered allmulticast mode
[  299.827016][T10208] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1238'.
[  299.903480][T10211] netlink: 'syz.3.1241': attribute type 21 has an invalid length.
[  299.918151][T10211] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1241'.
[  299.927548][T10211] openvswitch: netlink: Flow key attr not present in new flow.
[  299.941693][T10211] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1241'.
[  300.135869][T10216] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1243'.
[  300.308002][T10222] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1244'.
[  300.331015][T10218] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1244'.
[  309.272937][T10237] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1249'.
[  309.380294][T10238] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1249'.
[  309.605025][T10247] netlink: 'syz.1.1253': attribute type 21 has an invalid length.
[  309.624783][T10247] IPv6: NLM_F_CREATE should be specified when creating new route
[  309.633642][T10247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  309.641202][T10247] IPv6: NLM_F_CREATE should be set when creating new route
[  309.649289][T10247] IPv6: NLM_F_CREATE should be set when creating new route
[  309.656880][T10247] IPv6: NLM_F_CREATE should be set when creating new route
[  309.713600][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1254'.
[  310.129560][T10263] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1256'.
[  310.261490][T10258] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1256'.
[  310.351422][T10265] netlink: 'syz.1.1259': attribute type 10 has an invalid length.
[  310.666964][T10283] netlink: 'syz.3.1262': attribute type 10 has an invalid length.
[  310.692626][T10283] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1262'.
[  310.746943][T10283] team0: entered promiscuous mode
[  310.752377][T10283] C: entered promiscuous mode
[  310.758607][T10283] team_slave_1: entered promiscuous mode
[  310.766794][T10283] team0: entered allmulticast mode
[  310.772430][T10283] C: entered allmulticast mode
[  310.777865][T10283] team_slave_1: entered allmulticast mode
[  310.789692][T10283] bridge0: port 3(team0) entered blocking state
[  310.808851][T10283] bridge0: port 3(team0) entered disabled state
[  310.834540][T10283] bridge0: port 3(team0) entered blocking state
[  310.841592][T10283] bridge0: port 3(team0) entered forwarding state
[  311.174265][T10302] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  311.199761][T10304] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1269'.
[  311.593937][T10315] netlink: 'syz.0.1272': attribute type 10 has an invalid length.
[  311.620881][T10318] netlink: 'syz.2.1273': attribute type 10 has an invalid length.
[  312.323721][T10325] netlink: 'syz.0.1275': attribute type 27 has an invalid length.
[  312.334950][T10328] netlink: 'syz.1.1276': attribute type 9 has an invalid length.
[  312.354945][T10328] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1276'.
[  312.517669][T10335] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  312.555994][T10326] delete_channel: no stack
[  312.719437][T10339] netlink: 'syz.3.1280': attribute type 13 has an invalid length.
[  312.737881][T10339] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1280'.
[  312.756351][T10339] syz_tun: refused to change device tx_queue_len
[  313.088664][T10357] netlink: 'syz.3.1285': attribute type 10 has an invalid length.
[  313.173186][T10357] bond0: (slave bond_slave_0): Releasing backup interface
[  313.287701][T10362] netlink: 'syz.0.1286': attribute type 10 has an invalid length.
[  313.377994][T10357] delete_channel: no stack
[  313.543937][T10375] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  315.969235][T10426] validate_nla: 1 callbacks suppressed
[  315.969253][T10426] netlink: 'syz.3.1305': attribute type 10 has an invalid length.
[  316.926923][T10443] netlink: 'syz.1.1310': attribute type 10 has an invalid length.
[  316.934793][T10443] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1310'.
[  316.969129][T10443] bond0: entered promiscuous mode
[  316.974213][T10443] bond_slave_0: entered promiscuous mode
[  316.997962][T10443] bond_slave_1: entered promiscuous mode
[  317.003715][T10443] dummy0: entered promiscuous mode
[  317.376867][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.383306][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.930463][T10480] netlink: 'syz.3.1319': attribute type 29 has an invalid length.
[  318.426142][T10480] netlink: 'syz.3.1319': attribute type 29 has an invalid length.
[  318.463635][T10489] netlink: 'syz.2.1317': attribute type 10 has an invalid length.
[  318.597676][T10489] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1317'.
[  318.765985][T10489] bond0: entered promiscuous mode
[  318.771064][T10489] bond_slave_0: entered promiscuous mode
[  318.856317][T10489] bond_slave_1: entered promiscuous mode
[  318.862345][T10489] bridge_slave_1: entered promiscuous mode
[  318.966675][T10489] team0: entered promiscuous mode
[  318.987099][T10489] C: entered promiscuous mode
[  319.008270][T10489] team_slave_1: entered promiscuous mode
[  319.035953][T10489] syz_tun: entered promiscuous mode
[  319.077980][T10489] bridge0: port 1(bond0) entered blocking state
[  319.084477][T10489] bridge0: port 1(bond0) entered disabled state
[  319.105561][T10489] bond0: entered allmulticast mode
[  319.110738][T10489] bond_slave_0: entered allmulticast mode
[  319.125055][T10489] bond_slave_1: entered allmulticast mode
[  319.135327][T10489] bridge_slave_1: entered allmulticast mode
[  319.141271][T10489] team0: entered allmulticast mode
[  319.166682][T10489] C: entered allmulticast mode
[  319.171545][T10489] team_slave_1: entered allmulticast mode
[  319.185095][T10489] syz_tun: entered allmulticast mode
[  319.201129][T10489] bridge0: port 1(bond0) entered blocking state
[  319.207588][T10489] bridge0: port 1(bond0) entered forwarding state
[  319.779572][T10526] netlink: 'syz.1.1328': attribute type 1 has an invalid length.
[  319.907478][T10531] netlink: 'syz.0.1330': attribute type 16 has an invalid length.
[  319.935276][T10531] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1330'.
[  320.491643][T10569] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1341'.
[  320.584630][T10566] syzkaller0: left promiscuous mode
[  320.592212][T10566] syzkaller0: left allmulticast mode
[  321.029594][T10598] netlink: 'syz.2.1349': attribute type 10 has an invalid length.
[  321.042986][T10598] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  321.097182][T10604] lo: left promiscuous mode
[  321.101825][T10604] lo: entered allmulticast mode
[  321.122259][T10604] lo: entered promiscuous mode
[  321.130849][T10604] lo: left allmulticast mode
[  321.293363][T10609] netlink: 'syz.0.1352': attribute type 6 has an invalid length.
[  321.329591][T10609] netlink: 'syz.0.1352': attribute type 6 has an invalid length.
[  321.446532][T10618] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1355'.
[  321.522075][T10622] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1357'.
[  321.558241][T10622] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1357'.
[  321.583888][T10622] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1357'.
[  321.612606][T10622] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1357'.
[  321.940810][T10635] raw_sendmsg: syz.1.1360 forgot to set AF_INET. Fix it!
[  322.047102][T10638] netlink: 'syz.0.1359': attribute type 10 has an invalid length.
[  325.944080][T10641] netlink: 'syz.1.1361': attribute type 21 has an invalid length.
[  325.953773][T10641] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1361'.
[  325.969255][T10661] macvlan1: entered promiscuous mode
[  325.974757][T10661] macvlan1: entered allmulticast mode
[  325.980339][T10661] veth1_vlan: entered allmulticast mode
[  326.136074][T10672] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1367'.
[  326.173562][T10669] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1367'.
[  326.204812][T10677] netlink: 'syz.1.1369': attribute type 21 has an invalid length.
[  326.225179][T10677] netlink: 'syz.1.1369': attribute type 30 has an invalid length.
[  326.246122][T10675] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1368'.
[  326.262416][T10675] tc_dump_action: action bad kind
[  326.453169][T10686] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  326.460508][T10686] IPv6: NLM_F_CREATE should be set when creating new route
[  326.467841][T10686] IPv6: NLM_F_CREATE should be set when creating new route
[  326.475135][T10686] IPv6: NLM_F_CREATE should be set when creating new route
[  327.551140][T10698] netlink: 'syz.1.1375': attribute type 10 has an invalid length.
[  327.940271][T10709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1380'.
[  328.149597][T10722] netlink: 'syz.0.1383': attribute type 10 has an invalid length.
[  330.861664][T10739] netlink: 'syz.0.1388': attribute type 10 has an invalid length.
[  331.204997][T10748] netlink: 'syz.1.1387': attribute type 20 has an invalid length.
[  331.327033][T10759] netlink: 'syz.0.1392': attribute type 39 has an invalid length.
[  331.339232][T10759] veth0_macvtap: left promiscuous mode
[  331.450065][T10764] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1394'.
[  331.574042][T10767] netlink: 'syz.2.1395': attribute type 3 has an invalid length.
[  331.591629][T10767] netlink: 'syz.2.1395': attribute type 3 has an invalid length.
[  331.600755][T10767] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1395'.
[  331.612663][T10767] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  332.181066][T10787] netlink: 'syz.3.1401': attribute type 10 has an invalid length.
[  332.296057][T10789] netlink: 'syz.2.1402': attribute type 3 has an invalid length.
[  332.422779][T10789] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1402'.
[  332.836188][T10796] netlink: 'syz.1.1404': attribute type 4 has an invalid length.
[  332.909173][T10801] netlink: 'syz.1.1404': attribute type 10 has an invalid length.
[  332.965041][T10801] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1404'.
[  333.308167][T10801] veth0_macvtap: left promiscuous mode
[  333.934465][T10840] netlink: 'syz.1.1415': attribute type 10 has an invalid length.
[  334.094000][T10852] netlink: 'syz.1.1419': attribute type 10 has an invalid length.
[  334.111086][T10852] 8021q: adding VLAN 0 to HW filter on device team0
[  334.133857][T10852] team0: entered promiscuous mode
[  334.139445][T10852] team_slave_0: entered promiscuous mode
[  334.145774][T10852] team_slave_1: entered promiscuous mode
[  334.152718][T10852] bond0: (slave team0): Enslaving as an active interface with an up link
[  334.274538][T10862] hsr0: VLAN not yet supported
[  334.316919][T10821] syz.2.1411 (10821) used greatest stack depth: 17128 bytes left
[  334.491147][T10871] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1425'.
[  334.560707][T10872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1422'.
[  334.582709][T10872] batadv0: entered promiscuous mode
[  334.593773][T10872] batadv0: entered allmulticast mode
[  334.606740][T10872] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  334.785093][T10883] tap0: tun_chr_ioctl cmd 1074025675
[  334.790437][T10883] tap0: persist enabled
[  334.979792][T10894] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1431'.
[  335.466099][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1434'.
[  335.486859][T10905] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  335.674637][T10913] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1436'.
[  335.685146][T10913] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  335.958687][T10937] delete_channel: no stack
[  335.975166][T10937] delete_channel: no stack
[  336.203430][T10949] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1445'.
[  336.227435][T10949] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  337.231713][T10981] syzkaller0: entered promiscuous mode
[  337.259782][T10981] syzkaller0: entered allmulticast mode
[  337.272555][T10984] validate_nla: 15 callbacks suppressed
[  337.272606][T10984] netlink: 'syz.1.1456': attribute type 10 has an invalid length.
[  337.567555][T11006] netlink: 'syz.0.1461': attribute type 27 has an invalid length.
[  337.585148][T11006] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1461'.
[  339.089031][T11000] netlink: 'syz.1.1460': attribute type 21 has an invalid length.
[  339.631986][T11027] netlink: 'syz.3.1469': attribute type 10 has an invalid length.
[  339.777187][T11033] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1470'.
[  339.812477][T11036] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1471'.
[  339.838446][T11033] netlink: 'syz.1.1470': attribute type 10 has an invalid length.
[  339.968146][T11033] veth1_macvtap (unregistering): left allmulticast mode
[  340.397956][T11047] netlink: 'syz.0.1475': attribute type 8 has an invalid length.
[  340.445277][T11047] netlink: 'syz.0.1475': attribute type 6 has an invalid length.
[  340.485277][T11047] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1475'.
[  340.735312][T11056] syzkaller0: entered promiscuous mode
[  340.741706][T11056] syzkaller0: entered allmulticast mode
[  341.372773][T11067] netlink: 'syz.3.1480': attribute type 10 has an invalid length.
[  341.756742][T11087] netlink: 'syz.0.1486': attribute type 12 has an invalid length.
[  341.780520][T11087] netlink: 'syz.0.1486': attribute type 11 has an invalid length.
[  341.804933][T11087] netlink: 188816 bytes leftover after parsing attributes in process `syz.0.1486'.
[  341.833021][T11090] netlink: 'syz.0.1486': attribute type 21 has an invalid length.
[  341.847758][T11090] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1486'.
[  342.273215][T11109] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1493'.
[  343.193024][T11137] validate_nla: 1 callbacks suppressed
[  343.193056][T11137] netlink: 'syz.1.1504': attribute type 3 has an invalid length.
[  343.231106][T11135] netlink: 'syz.2.1503': attribute type 10 has an invalid length.
[  343.251814][T11137] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1504'.
[  344.166586][T11153] netlink: 'syz.1.1508': attribute type 153 has an invalid length.
[  344.175300][T11153] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1508'.
[  344.554191][ T5765] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  344.708596][T11174] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1515'.
[  344.736363][T11182] netlink: 'syz.1.1517': attribute type 29 has an invalid length.
[  344.745282][T11177] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1515'.
[  344.776660][T11182] netlink: 'syz.1.1517': attribute type 29 has an invalid length.
[  344.796525][T11182] netlink: 'syz.1.1517': attribute type 29 has an invalid length.
[  344.806012][T11182] netlink: 'syz.1.1517': attribute type 29 has an invalid length.
[  344.957202][T11190] netlink: 'syz.2.1518': attribute type 10 has an invalid length.
[  345.098689][T11195] delete_channel: no stack
[  345.377598][T11200] netlink: 'syz.1.1517': attribute type 29 has an invalid length.
[  346.433246][T11221] netlink: 'syz.2.1527': attribute type 2 has an invalid length.
[  346.456313][T11221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1527'.
[  347.067133][T11243] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1531'.
[  347.097172][T11243] veth0_to_bond: entered promiscuous mode
[  347.262729][T11246] bond0: (slave bond_slave_0): Releasing backup interface
[  347.350884][T11248] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1533'.
[  347.381097][T11248] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1533'.
[  347.404567][T11249] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1533'.
[  347.421702][T11248] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1533'.
[  347.443916][T11251] syz.2.1534[11251] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  347.444054][T11251] syz.2.1534[11251] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  347.493850][T11251] syz.2.1534[11251] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  347.545017][T11251] syz.2.1534[11251] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  348.263752][T11276] validate_nla: 6 callbacks suppressed
[  348.263769][T11276] netlink: 'syz.3.1541': attribute type 10 has an invalid length.
[  348.315031][T11276] __nla_validate_parse: 2 callbacks suppressed
[  348.315047][T11276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'.
[  348.374517][T11276] netlink: 'syz.3.1541': attribute type 10 has an invalid length.
[  348.423713][T11276] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'.
[  348.711109][T11284] netlink: 'syz.2.1546': attribute type 39 has an invalid length.
[  349.397791][T11302] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1549'.
[  350.622981][T11341] netlink: 'syz.1.1561': attribute type 39 has an invalid length.
[  351.517360][T11363] syz.3.1565[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  351.517507][T11363] syz.3.1565[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  351.556157][T11363] Q�6��\b��Y�4��: renamed from lo (while UP)
[  351.963330][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1567'.
[  351.992598][T11370] netlink: 'syz.2.1567': attribute type 10 has an invalid length.
[  352.031333][T11369] netlink: 'syz.0.1568': attribute type 10 has an invalid length.
[  352.656318][T11381] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1572'.
[  353.644908][T11405] netlink: 'syz.3.1578': attribute type 10 has an invalid length.
[  354.444285][T11422] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1584'.
[  354.813399][T11435] lo: entered allmulticast mode
[  355.841649][T11465] netlink: 'syz.3.1598': attribute type 10 has an invalid length.
[  355.883179][T11465] bridge0: port 3(team0) entered disabled state
[  355.923011][T11465] team0: left allmulticast mode
[  355.935642][T11465] C: left allmulticast mode
[  355.942129][T11465] team_slave_1: left allmulticast mode
[  355.974027][T11465] team0: left promiscuous mode
[  355.979931][T11465] C: left promiscuous mode
[  355.989875][T11465] team_slave_1: left promiscuous mode
[  355.996234][T11465] bridge0: port 3(team0) entered disabled state
[  356.151224][T11465] 8021q: adding VLAN 0 to HW filter on device team0
[  356.204251][T11465] bond0: (slave team0): Enslaving as an active interface with an up link
[  356.415891][T11477] netlink: 'syz.0.1601': attribute type 21 has an invalid length.
[  356.691707][T11480] ------------[ cut here ]------------
[  356.697905][T11480] WARNING: CPU: 0 PID: 11480 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470
[  356.708085][T11480] Modules linked in:
[  356.712036][T11480] CPU: 0 PID: 11480 Comm: syz.2.1602 Not tainted syzkaller #0
[  356.719760][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  356.730000][T11480] RIP: 0010:perf_pending_task+0x35c/0x470
[  356.735901][T11480] Code: ff 84 db 75 14 e8 e4 42 d6 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 42 d6 ff e8 ab 33 51 ff eb e5 e8 c4 42 d6 ff <0f> 0b e9 f3 fe ff ff e8 b8 42 d6 ff 48 c7 c7 b0 d2 dc 8c 4c 89 f6
[  356.755672][T11480] RSP: 0018:ffffc9000426f9e0 EFLAGS: 00010293
[  356.761778][T11480] RAX: ffffffff81af683c RBX: ffff888049e19098 RCX: ffff888028b78000
[  356.770206][T11480] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  356.778818][T11480] RBP: 0000000000000001 R08: ffffffff8e4a39ef R09: 1ffffffff1c9473d
[  356.787456][T11480] R10: dffffc0000000000 R11: fffffbfff1c9473e R12: ffff888028b78000
[  356.796236][T11480] R13: ffff88805cd2dd30 R14: ffff888049e18e58 R15: 1ffff110093c31cb
[  356.804253][T11480] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  356.813327][T11480] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  356.820083][T11480] CR2: 0000000000000000 CR3: 000000001b76a000 CR4: 00000000003506f0
[  356.828272][T11480] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300
[  356.836382][T11480] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  356.844385][T11480] Call Trace:
[  356.847763][T11480]  <TASK>
[  356.850725][T11480]  task_work_run+0x1ce/0x250
[  356.855477][T11480]  ? task_work_cancel+0x240/0x240
[  356.860557][T11480]  do_exit+0x90b/0x23c0
[  356.864761][T11480]  ? cgroup_freezing+0x20/0x340
[  356.869804][T11480]  ? lock_chain_count+0x20/0x20
[  356.874687][T11480]  ? put_task_struct+0xc0/0xc0
[  356.879619][T11480]  ? preempt_schedule_common+0x82/0xc0
[  356.885195][T11480]  ? preempt_schedule+0xab/0xc0
[  356.890082][T11480]  ? schedule_preempt_disabled+0x20/0x20
[  356.895942][T11480]  do_group_exit+0x21b/0x2d0
[  356.900581][T11480]  get_signal+0x12fc/0x1400
[  356.905232][T11480]  arch_do_signal_or_restart+0x9c/0x7b0
[  356.910817][T11480]  ? get_sigframe_size+0x20/0x20
[  356.916043][T11480]  ? exit_to_user_mode_loop+0x3b/0x110
[  356.921540][T11480]  exit_to_user_mode_loop+0x70/0x110
[  356.926953][T11480]  exit_to_user_mode_prepare+0xf6/0x180
[  356.932533][T11480]  syscall_exit_to_user_mode+0x1a/0x50
[  356.938168][T11480]  do_syscall_64+0x61/0xb0
[  356.942643][T11480]  ? clear_bhb_loop+0x40/0x90
[  356.947538][T11480]  ? clear_bhb_loop+0x40/0x90
[  356.952241][T11480]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  356.958606][T11480] RIP: 0033:0x7f7ba2f8f749
[  356.963047][T11480] Code: Unable to access opcode bytes at 0x7f7ba2f8f71f.
[  356.970345][T11480] RSP: 002b:00007f7ba3dae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  356.978955][T11480] RAX: ffffffffffffffa2 RBX: 00007f7ba31e5fa0 RCX: 00007f7ba2f8f749
[  356.987080][T11480] RDX: 0000000000000088 RSI: 0000000000000007 RDI: 000000000000000a
[  356.995195][T11480] RBP: 00007f7ba3013f91 R08: 0000000000000000 R09: 0000000000000000
[  357.003197][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  357.011361][T11480] R13: 00007f7ba31e6038 R14: 00007f7ba31e5fa0 R15: 00007fff447ba7f8
[  357.019515][T11480]  </TASK>
[  357.022558][T11480] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  357.029852][T11480] CPU: 0 PID: 11480 Comm: syz.2.1602 Not tainted syzkaller #0
[  357.037327][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  357.047405][T11480] Call Trace:
[  357.050702][T11480]  <TASK>
[  357.053649][T11480]  dump_stack_lvl+0x16c/0x230
[  357.058354][T11480]  ? show_regs_print_info+0x20/0x20
[  357.063578][T11480]  ? load_image+0x3b0/0x3b0
[  357.068133][T11480]  panic+0x2c0/0x710
[  357.072076][T11480]  ? bpf_jit_dump+0xd0/0xd0
[  357.076627][T11480]  __warn+0x2e0/0x470
[  357.080645][T11480]  ? perf_pending_task+0x35c/0x470
[  357.085782][T11480]  ? perf_pending_task+0x35c/0x470
[  357.090923][T11480]  report_bug+0x2be/0x4f0
[  357.095286][T11480]  ? perf_pending_task+0x35c/0x470
[  357.100447][T11480]  ? perf_pending_task+0x35c/0x470
[  357.105587][T11480]  ? perf_pending_task+0x35e/0x470
[  357.110820][T11480]  handle_bug+0xcf/0x120
[  357.115087][T11480]  exc_invalid_op+0x1a/0x50
[  357.119621][T11480]  asm_exc_invalid_op+0x1a/0x20
[  357.124497][T11480] RIP: 0010:perf_pending_task+0x35c/0x470
[  357.130252][T11480] Code: ff 84 db 75 14 e8 e4 42 d6 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 42 d6 ff e8 ab 33 51 ff eb e5 e8 c4 42 d6 ff <0f> 0b e9 f3 fe ff ff e8 b8 42 d6 ff 48 c7 c7 b0 d2 dc 8c 4c 89 f6
[  357.149882][T11480] RSP: 0018:ffffc9000426f9e0 EFLAGS: 00010293
[  357.155977][T11480] RAX: ffffffff81af683c RBX: ffff888049e19098 RCX: ffff888028b78000
[  357.163981][T11480] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  357.171973][T11480] RBP: 0000000000000001 R08: ffffffff8e4a39ef R09: 1ffffffff1c9473d
[  357.179966][T11480] R10: dffffc0000000000 R11: fffffbfff1c9473e R12: ffff888028b78000
[  357.187963][T11480] R13: ffff88805cd2dd30 R14: ffff888049e18e58 R15: 1ffff110093c31cb
[  357.195970][T11480]  ? perf_pending_task+0x35c/0x470
[  357.201132][T11480]  task_work_run+0x1ce/0x250
[  357.205762][T11480]  ? task_work_cancel+0x240/0x240
[  357.210822][T11480]  do_exit+0x90b/0x23c0
[  357.215002][T11480]  ? cgroup_freezing+0x20/0x340
[  357.219881][T11480]  ? lock_chain_count+0x20/0x20
[  357.224755][T11480]  ? put_task_struct+0xc0/0xc0
[  357.229562][T11480]  ? preempt_schedule_common+0x82/0xc0
[  357.235052][T11480]  ? preempt_schedule+0xab/0xc0
[  357.239917][T11480]  ? schedule_preempt_disabled+0x20/0x20
[  357.245560][T11480]  do_group_exit+0x21b/0x2d0
[  357.250153][T11480]  get_signal+0x12fc/0x1400
[  357.254670][T11480]  arch_do_signal_or_restart+0x9c/0x7b0
[  357.260220][T11480]  ? get_sigframe_size+0x20/0x20
[  357.265169][T11480]  ? exit_to_user_mode_loop+0x3b/0x110
[  357.270624][T11480]  exit_to_user_mode_loop+0x70/0x110
[  357.275906][T11480]  exit_to_user_mode_prepare+0xf6/0x180
[  357.281444][T11480]  syscall_exit_to_user_mode+0x1a/0x50
[  357.286900][T11480]  do_syscall_64+0x61/0xb0
[  357.291303][T11480]  ? clear_bhb_loop+0x40/0x90
[  357.295982][T11480]  ? clear_bhb_loop+0x40/0x90
[  357.300652][T11480]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  357.306536][T11480] RIP: 0033:0x7f7ba2f8f749
[  357.310938][T11480] Code: Unable to access opcode bytes at 0x7f7ba2f8f71f.
[  357.317946][T11480] RSP: 002b:00007f7ba3dae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[  357.326354][T11480] RAX: ffffffffffffffa2 RBX: 00007f7ba31e5fa0 RCX: 00007f7ba2f8f749
[  357.334312][T11480] RDX: 0000000000000088 RSI: 0000000000000007 RDI: 000000000000000a
[  357.342269][T11480] RBP: 00007f7ba3013f91 R08: 0000000000000000 R09: 0000000000000000
[  357.350227][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  357.358187][T11480] R13: 00007f7ba31e6038 R14: 00007f7ba31e5fa0 R15: 00007fff447ba7f8
[  357.366171][T11480]  </TASK>
[  357.369526][T11480] Kernel Offset: disabled
[  357.373844][T11480] Rebooting in 86400 seconds..