last executing test programs:

1m27.197782576s ago: executing program 0 (id=6353):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94)
r1 = socket$kcm(0x2, 0x3, 0x2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8b06, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYBLOB="0200000001"], 0x50)
r6 = syz_clone(0x6002000, &(0x7f00000002c0)="b232fccc22fc9d0563306d06cf", 0xd, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000005c0)="c7f1c73dbb905e73ee8a4608e2a3f952593690dec7373bb0993c77818a3be431c47a96d61a8c057c46fb4a00c17119cdfa6bb4f855f8cfe3ef")
r7 = perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0xa, 0xb, 0x96, 0x1, 0x0, 0x5f, 0x0, 0x4dc578a75f055249, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x5, 0x6, 0x7, 0x8, 0x0, 0xfff7, 0x0, 0x81, 0x0, 0x8000}, r6, 0x0, r3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000600)=@sco, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/47, 0x2f}, {&(0x7f0000000700)=""/62, 0x3e}, {&(0x7f0000000740)=""/39, 0x27}, {&(0x7f0000000840)=""/172, 0xac}], 0x4, &(0x7f0000000940)=""/237, 0xed}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x42)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
socket$kcm(0xa, 0x2, 0x3a)
ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYBLOB="7b72549c8365fc22882fcfb0702820e16ba53a354a91aa", @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRES8=r1, @ANYRES32=r1, @ANYRES32=r0], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f00000006c0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

1m26.598487651s ago: executing program 1 (id=6359):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x352, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r0, @ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600"], 0x48) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_devices(r5, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8)
openat$cgroup_netprio_ifpriomap(r5, &(0x7f0000000180), 0x2, 0x0) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=<r6=>0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}, 0x40) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, <r8=>0x0}, 0x0) (async)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000280)={0x80000000, <r9=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=r9, 0x4) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, r3, 0x0, 0x4, &(0x7f0000000380)='GPL\x00'}, 0x30) (async)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r0, r6, 0x3, 0x2020, 0x4, @void, @void, @value=r8}, 0x20) (async)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r4, 0x0, 0x4, &(0x7f0000000200)='GPL\x00', <r10=>0x0}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup=r5, r2, 0x38, 0x2d, 0xffffffffffffffff, @void, @void, @void, @value=r10, r7}, 0x20) (async)
openat$cgroup_ro(r5, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f913a3c92b", 0x14}], 0x1}, 0x0) (async, rerun: 32)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) (rerun: 32)

1m26.536197452s ago: executing program 3 (id=6361):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000080000000800008776bc003fc4c60000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)={'a', ' *:* ', 'm\x00'}, 0x8) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000400fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x75, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0xe, 0x1, 0x10187, r0, 0x5, '\x00', r4, r5, 0x2, 0x5, 0x0, 0x0, @void, @value, @value=r3}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000200000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1m26.489037293s ago: executing program 1 (id=6362):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000700b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

1m26.485312613s ago: executing program 0 (id=6363):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000e0000", @ANYRES32], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xb, 0x2000000000000216, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b70300000000000085000000060004001681000000000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async)
perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="18050000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b7030000000000008500000019000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xdd, &(0x7f0000000340)=""/221}, 0x94) (async)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async)
syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TUNGETVNETLE(r3, 0x8004745a, &(0x7f0000000180)) (async)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) (async)
syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
close(0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYRESHEX=r3], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xc}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={<r6=>0x0, 0x0})
close(r6) (async)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x22005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xc) (async)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)

1m26.347189987s ago: executing program 1 (id=6365):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000), 0x4)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000940)}, 0x100)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000100)=r7, 0x8)
setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000100)=r5, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r8, 0x0, &(0x7f00000005c0)=""/104}, 0x20)
socket$kcm(0xa, 0x2, 0x3a)
r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00')
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x1f000801}, 0x40)
perf_event_open$cgroup(&(0x7f0000000700)={0x4, 0x80, 0xf3, 0x3, 0xf1, 0x3, 0x0, 0xad, 0x943, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7ff, 0x5}, 0x10aaa4, 0x0, 0x5, 0x9, 0x0, 0x7ff, 0x5, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0xd, r0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)

1m26.284193738s ago: executing program 3 (id=6366):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x2, 0x1000, 0xffff8001, 0x10100, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x50)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x400})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(0x3)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0x19, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r9)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)=ANY=[@ANYRES32=r9, @ANYRES32=r5, @ANYBLOB="060000001000000000000000", @ANYRES32=r0, @ANYBLOB="b005dd363578621713a70c4ab8234754174304bbf590975ce6034e79614d5dfb2ded8c6650b451ca", @ANYRES64=0x0], 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1e000000ffffff7f06000000ff01000000000000", @ANYRES32=0x1, @ANYBLOB='m\a\x00'/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="0200000403000000000000000b0000000000000000df0d0000000000"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r10, &(0x7f0000000000), &(0x7f0000000040)=""/76, 0x20}, 0x20)

1m26.100985853s ago: executing program 1 (id=6367):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008510000002000000200a0000000000009500007b0000000085000000130000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x7, 0x92, &(0x7f0000000240)=""/146}, 0x80)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2d, 'freezer'}, {0x2b, 'blkio'}]}, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
sendmsg$tipc(r0, &(0x7f0000000600)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x10, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x40094}, 0x4004)
openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0)

1m26.072537053s ago: executing program 0 (id=6368):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003b000b05d25a806c8c6394f90224fc60100005000a0002", 0x1b}], 0x1}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1, 0x0, &(0x7f0000000040)='%', 0x0, 0x0, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x50)

1m26.054914044s ago: executing program 2 (id=6369):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

1m25.892742497s ago: executing program 2 (id=6370):
r0 = socket$kcm(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1100000000000000004003000100"/23, @ANYRES32=0x0, @ANYBLOB="ac1414bbe000000100bef35f0000001c00000000faffffff068f0208000000ed75bb282e1e9d90eba48f5120c61c254e303281bdcf93b529fc", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000"], 0x98}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff12, 0x7, 0xff, 0xfa, 0x7, 0x0, 0x800ea, 0x102d0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x6}, 0xc001, 0x10040, 0xfffffffc, 0x4, 0x10001, 0x3, 0xa33, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="003fa82d16cee402195c000000000000000000000000000000030000"], 0x48)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r5, r3, 0x0, 0x1, 0xfffffffffffffffe}, 0x17)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305828, &(0x7f0000000040))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000ac0)="f40009f6052b8825fe800400921d16b2081438378e831b76bdd4d5fefcc51d950370d0d5367720903ca93026", 0x2c}], 0x1}, 0x20040000)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)=0x20000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7e93, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffc39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)

1m25.892228988s ago: executing program 3 (id=6371):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400007, 0x0, @perf_bp={0x0, 0x4}, 0x4404, 0x9, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x9)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x1000, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000006000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="2200000000030000000000000000000000000000c212d20a21c926", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r5}, 0x20)
close(0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000280)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f510882e4b34ee9f6ada188b104ba36e8acbd7bafe39b32f957da45c2743017545fd61667d36d58952de0cdbacb3abc549e1001bf6d9b19f9a353bb84bd152e04c061c691b514d6f1b36a8895424ce210a4cd75d537443a2791dc68e9fff510358f7586d3b73ed04223e683adf6a1c79d3bc92aa595cc6167", 0xa91}], 0x3}, 0x0)
perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)

1m25.745207601s ago: executing program 0 (id=6372):
perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0xa0800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000000), 0x2}, 0x100274, 0xca, 0x0, 0x4, 0x8, 0x100, 0xffff, 0x0, 0x10000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8902, &(0x7f0000000080)) (async)
sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc)
close(r1) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000006d255ed25d2378c630ea4921ddf40cdccd930d6eb9dab4730fd36b037284e7d685b030356b1aca9b26a722104120e6458d0fcb83957b8dc1cd2881a7f6d263fead68fc468256d7a6c368bf18f64201f11250aa852f52789434cf569a84ac13cad026f4c8f2a5d798d4b91c4d33fa96ee92aa8f57303ed61f8d2bbff830b00fb48901f2b04ec3866dfbcc1d8f8f0323619e5829e8c1cc9de8a1700fd5856077545896962dd586ccb504a9a64036dd58b3fee606942cbf9d9a69edaba2daa13423d899293a2e5238c35d37095ca0817d8587b5e1921c42c19c50f12e84fad9501a4de61166f80f3273a2f2b7c39b8be33c7f34d0533aba78", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x2)

1m25.606395435s ago: executing program 3 (id=6373):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x88, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@cgroup=r0, r2, 0x1, 0x2000, r0, @value=r0}, 0x20)
recvmsg(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

1m25.514234877s ago: executing program 2 (id=6374):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xe4}, 0x0, 0x80000, 0x1, 0x3, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000004c452b0006"], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000020000000000000803000000000000000000000d00000000010000000000000c02000000002e2e"], 0x0, 0x40}, 0x28)
close(r2)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff)

1m25.497159578s ago: executing program 1 (id=6375):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000004800912579b8a885d7e9fa080a"], 0xfe33)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000400000008000000010000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x10, 0x3, 0x10)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x6b, 0x1, 0x1, 0x9b}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@bloom_filter={0x1e, 0x9ad, 0x7f, 0x4, 0x1000, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xe68}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x102}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1280001000002020000000000080005007a010401a80016002000034004020000035c0461c900004f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c811dc0c1cd706ff2f41398d8e7369039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x20014000)

1m25.39261455s ago: executing program 0 (id=6376):
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)=@can={0x1d, <r0=>0x0}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/147, 0x93}], 0x1, &(0x7f00000002c0)=""/180, 0xb4}, 0x60)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0xa, 0x2, 0x3a)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1e0000000900000005000000376200000a000700", @ANYRES32=r3, @ANYBLOB="0900006cb132000080007f28d0e80000cdb626dfedf708cb95b262d906afbc3191b4c8f918cd1275e1d8b03ae856230a4ade5229a9905819bd45371066b47454cd01a1873b7fed054aa76a1012251c2ba2fd1c0940ef440a8ba570c109e17f465be708bd3667ae4f3cd0d13e12275fdbe209dc4a4b20458916a115b9558bd4a14f7e781a564aba", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000005000000040000000700"/24, @ANYRES32=r5, @ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfcbf, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdbd, 0x0, 0x0, 0x10, 0x1}, 0x23)
sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000000)=@nfc_llcp={0xa, 0x0, 0xfd04, 0x0, 0x0, 0x2, "be4606a105888c642c13334c199f91732d139d84b4ad52d055d6d5ae3b981ffc48ca221108c4d3aa623010eab68d9504eb0034ea00000001f000", 0x2a}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000001340)="a00041020eae4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x24008114)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x9c, 0x8}, {0x6, 0x0, 0x0, 0x3}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000540)}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_skb}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x9}, 0x94)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [<r10=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080))
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)={@fallback=r6, r6, 0x1c, 0x0, 0x0, @void, @value=r10}, 0x20)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000003c0), 0x2, 0x0)

1m25.161497575s ago: executing program 2 (id=6377):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xc8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x87d1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="240000002d006bcd9e3f17aa04001b0000010000ffffffff000000000000ff7f00000002", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000000400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1m24.926157801s ago: executing program 3 (id=6378):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc)

1m24.744590076s ago: executing program 0 (id=6379):
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0xc5, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
socket$kcm(0x10, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40))
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffd7b}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000d00)="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"/1317, 0x525}, {&(0x7f00000005c0)="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", 0x4a9}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a", 0x4a}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f8000000000000000b01000003000000b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3496137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5e900000000000028000000", @ANYRESDEC], 0x1c8}, 0x4000c010)

1m24.735774286s ago: executing program 2 (id=6380):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%+9llu \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f00000000c0)="eee24cd3479e9ca23f664c8ace2be34e9d60e356e574cfffc46ad9ae2d4982fcb313a9ca713dbedbe676716e542e2c001f3b5d7f9fa1f193d9da31bcf9c8b7a8d892f91e2a80d02b55a4325dc583c4ccfb9e0f5991a7a1c7535a5a7f1374a8447945bb36d1611990e63efdc20bc0d13a8cbc419be825413149e5f8a1c7f8b6a9ed61ecd754ba2dd044d06f4cbd05886dc4127a7e15c000a737f7f999"}, 0x20) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4d) (async, rerun: 32)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a118001500060014000300001208003f00410100000000a8001600a400014020000900feffff7f3626feffff94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cea5d0ab06f4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a00000000000", 0xd8}], 0x1}, 0x0)

1m24.57886716s ago: executing program 3 (id=6381):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xf, &(0x7f0000000040)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = socket$kcm(0x29, 0x7, 0x0)
recvmsg(r2, &(0x7f0000004000)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/118, 0x76}, {&(0x7f0000003dc0)=""/132, 0x84}, {&(0x7f0000003e80)=""/65, 0x41}, {&(0x7f0000003f00)=""/71, 0x47}], 0x7}, 0x12040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b0000009500848a00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x12, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

1m24.452861403s ago: executing program 2 (id=6382):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r2, 0x0, 0x40002182)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004100054cc6a119e30c80a843015a35400c0002000200002037153e370c04018006041a004500ac377653c6de2a7c31f4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000800000516c006c154938456646efee34b951a078932502bdbcf6c6b8d226dc64f5b1a0718d687ed8934d4780bae8ba0a55a6c130214043ff8ad5084a642a4d4aac02e408ff3af4be00"/159, 0x9f}, {&(0x7f0000000a40)="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", 0x396}], 0x2}, 0x10049014)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8918, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5}, {0x2000000, 0x5, 0xffffffff, 0x2}, {0x2000, 0x2, 0x1000a, 0x5}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000014000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000000000013000000000000000000000027249e1d199afde05b87d551701bd43d9a93765b988f9f37e77a599e9be8ef4e19cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r7, 0x0, 0x84}, 0x38)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x8a7, 0x1}, 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000"], 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)

1m23.516756055s ago: executing program 1 (id=6383):
r0 = socket$kcm(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1100000000000000004003000100"/23, @ANYRES32=0x0, @ANYBLOB="ac1414bbe000000100bef35f0000001c00000000faffffff068f0208000000ed75bb282e1e9d90eba48f5120c61c254e303281bdcf93b529fc", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000"], 0x98}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff12, 0x7, 0xff, 0xfa, 0x7, 0x0, 0x800ea, 0x102d0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x6}, 0xc001, 0x10040, 0xfffffffc, 0x4, 0x10001, 0x3, 0xa33, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="003fa82d16cee402195c000000000000000000000000000000030000"], 0x48)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r5, r3, 0x0, 0x1, 0xfffffffffffffffe}, 0x17)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305828, &(0x7f0000000040))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000ac0)="f40009f6052b8825fe800400921d16b2081438378e831b76bdd4d5fefcc51d950370d0d5367720903ca93026", 0x2c}], 0x1}, 0x20040000)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)=0x20000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7e93, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffc39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)

1m1.781321915s ago: executing program 32 (id=6379):
r0 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000140)={0x2, 0xc5, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
socket$kcm(0x10, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40))
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)}, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffd7b}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000d00)="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"/1317, 0x525}, {&(0x7f00000005c0)="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", 0x4a9}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f8d90000004f0c0400010000000062d95800000000000101871edd0000a69d35a2ff7f4708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a", 0x4a}], 0x1}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f8000000000000000b01000003000000b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3496137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5e900000000000028000000", @ANYRESDEC], 0x1c8}, 0x4000c010)

1m1.58899835s ago: executing program 33 (id=6383):
r0 = socket$kcm(0x2c, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0), 0x161)
sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="1100000000000000004003000100"/23, @ANYRES32=0x0, @ANYBLOB="ac1414bbe000000100bef35f0000001c00000000faffffff068f0208000000ed75bb282e1e9d90eba48f5120c61c254e303281bdcf93b529fc", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000"], 0x98}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, r1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)}, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff12, 0x7, 0xff, 0xfa, 0x7, 0x0, 0x800ea, 0x102d0, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7, 0x6}, 0xc001, 0x10040, 0xfffffffc, 0x4, 0x10001, 0x3, 0xa33, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="003fa82d16cee402195c000000000000000000000000000000030000"], 0x48)
r3 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r5, r3, 0x0, 0x1, 0xfffffffffffffffe}, 0x17)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305828, &(0x7f0000000040))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0)
r8 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000ac0)="f40009f6052b8825fe800400921d16b2081438378e831b76bdd4d5fefcc51d950370d0d5367720903ca93026", 0x2c}], 0x1}, 0x20040000)
ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40305829, &(0x7f0000000040)=0x20000)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7e93, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffc39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)

1m1.465419213s ago: executing program 34 (id=6382):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0x0)
r2 = socket$kcm(0x2a, 0x2, 0x0)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg(r2, 0x0, 0x40002182)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004100054cc6a119e30c80a843015a35400c0002000200002037153e370c04018006041a004500ac377653c6de2a7c31f4a918505e7a19ff6dc6a3cb9708b9469405009c8e000000800000516c006c154938456646efee34b951a078932502bdbcf6c6b8d226dc64f5b1a0718d687ed8934d4780bae8ba0a55a6c130214043ff8ad5084a642a4d4aac02e408ff3af4be00"/159, 0x9f}, {&(0x7f0000000a40)="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", 0x396}], 0x2}, 0x10049014)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8918, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8"], 0xfe33)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0xfffffffe, 0x5}, {0x2000000, 0x5, 0xffffffff, 0x2}, {0x2000, 0x2, 0x1000a, 0x5}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000014000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000000000013000000000000000000000027249e1d199afde05b87d551701bd43d9a93765b988f9f37e77a599e9be8ef4e19cf", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x800, r7, 0x0, 0x84}, 0x38)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x4, 0x2, 0x8a7, 0x1}, 0x50)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002f0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000"], 0x0}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)

0s ago: executing program 35 (id=6381):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xf, &(0x7f0000000040)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r2 = socket$kcm(0x29, 0x7, 0x0)
recvmsg(r2, &(0x7f0000004000)={&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f00000006c0)=""/226, 0xe2}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/118, 0x76}, {&(0x7f0000003dc0)=""/132, 0x84}, {&(0x7f0000003e80)=""/65, 0x41}, {&(0x7f0000003f00)=""/71, 0x47}], 0x7}, 0x12040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff)
r3 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='GPL\x00'}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008b0000009500848a00000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x12, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000100))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

: entered allmulticast mode
[  862.064340][T21228] syz_tun: entered allmulticast mode
[  862.084537][T21228] bridge0: port 3(team0) entered blocking state
[  862.096305][T21228] bridge0: port 3(team0) entered disabled state
[  862.131379][T21228] bridge0: port 3(team0) entered blocking state
[  862.137888][T21228] bridge0: port 3(team0) entered forwarding state
[  862.664533][T21255] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4560'.
[  862.713594][T21254] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4560'.
[  862.959016][T21264] netlink: 'syz.2.4564': attribute type 39 has an invalid length.
[  863.015633][T21268] netlink: 'syz.3.4565': attribute type 2 has an invalid length.
[  863.106771][T21269] netlink: 'syz.0.4563': attribute type 1 has an invalid length.
[  863.134798][T21269] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.4563'.
[  864.358037][T21276] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4566'.
[  865.199303][T21276] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4566'.
[  865.238895][T21279] netlink: 'syz.1.4566': attribute type 10 has an invalid length.
[  865.254813][T21279] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4566'.
[  865.292604][T21279] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  865.339474][T21279] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  865.488518][T21279] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  865.662964][T21292] netlink: 'syz.3.4571': attribute type 21 has an invalid length.
[  865.800097][T21292] netlink: 'syz.3.4571': attribute type 1 has an invalid length.
[  865.833336][T21299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4574'.
[  865.854275][T21299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4574'.
[  865.904920][T21299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4574'.
[  866.131373][T21308] netlink: 'syz.0.4577': attribute type 21 has an invalid length.
[  866.200301][T21308] netlink: 'syz.0.4577': attribute type 1 has an invalid length.
[  866.228622][T21313] tun0: tun_chr_ioctl cmd 1074025681
[  866.508841][T21323] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4584'.
[  866.627823][T21329] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4586'.
[  866.742055][T21335] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4589'.
[  867.118347][T21351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4595'.
[  867.133898][T21351] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4595'.
[  867.475081][T21359] TCP: TCP_TX_DELAY enabled
[  868.334572][T21390] -: renamed from syzkaller0
[  869.030634][T21424] netlink: 'syz.3.4621': attribute type 10 has an invalid length.
[  869.101038][T21427] netlink: 'syz.2.4620': attribute type 1 has an invalid length.
[  869.259772][T21431] netlink: 'syz.1.4623': attribute type 10 has an invalid length.
[  869.460844][T21439] cgroup: fork rejected by pids controller in /syz0
[  870.000495][T21560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  870.080512][T21565] netlink: 'syz.1.4634': attribute type 5 has an invalid length.
[  870.205433][ T7678] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.226407][T21567] bridge0: port 3(team0) entered disabled state
[  870.250317][T21567] bridge_slave_1: left allmulticast mode
[  870.273263][T21567] bridge_slave_1: left promiscuous mode
[  870.279147][T21567] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.303006][T21567] bridge_slave_0: left allmulticast mode
[  870.309008][T21567] bridge_slave_0: left promiscuous mode
[  870.320176][T21567] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.386891][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  870.394272][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  870.522903][ T7678] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.545856][T21566] delete_channel: no stack
[  870.635408][ T7678] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.804010][ T7678] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  870.975993][T21585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  870.992605][T21585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  871.003187][T21585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  871.020469][T21585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  871.044884][T21585] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  871.057821][T21585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  871.227530][T21593] __nla_validate_parse: 4 callbacks suppressed
[  871.227545][T21593] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4643'.
[  872.354935][T21582] chnl_net:caif_netlink_parms(): no params data found
[  872.521868][T21648] netlink: 763 bytes leftover after parsing attributes in process `syz.3.4656'.
[  872.804734][T21657] netlink: 'syz.1.4658': attribute type 29 has an invalid length.
[  872.852924][T21657] netlink: 'syz.1.4658': attribute type 29 has an invalid length.
[  872.884855][T21582] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.892119][T21582] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.899966][T21582] bridge_slave_0: entered allmulticast mode
[  872.907334][T21582] bridge_slave_0: entered promiscuous mode
[  872.919791][T21660] netlink: 'syz.1.4658': attribute type 29 has an invalid length.
[  872.952143][T21582] bridge0: port 2(bridge_slave_1) entered blocking state
[  872.976382][T21582] bridge0: port 2(bridge_slave_1) entered disabled state
[  872.992774][T21582] bridge_slave_1: entered allmulticast mode
[  873.010645][T21582] bridge_slave_1: entered promiscuous mode
[  873.068054][T21670] netlink: 'syz.3.4661': attribute type 2 has an invalid length.
[  873.076212][T21670] netlink: 'syz.3.4661': attribute type 1 has an invalid length.
[  873.084215][T21657] netlink: 'syz.1.4658': attribute type 29 has an invalid length.
[  873.084694][T21670] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4661'.
[  873.101597][   T51] Bluetooth: hci0: command tx timeout
[  873.177540][T21582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.252823][T21582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.419798][T21582] team0: Port device team_slave_0 added
[  873.476832][T21582] team0: Port device team_slave_1 added
[  873.590176][T21681] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  873.618359][T21582] batman_adv: batadv0: Adding interface: batadv_slave_0
[  873.626702][T21582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  873.656109][T21582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  873.713180][ T7678] hsr_slave_0: left promiscuous mode
[  873.719749][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  873.728121][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_0
[  873.738173][ T7678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  873.748456][ T7678] batman_adv: batadv0: Removing interface: batadv_slave_1
[  873.771310][ T7678] veth1_macvtap: left promiscuous mode
[  873.784010][ T7678] veth0_macvtap: left promiscuous mode
[  873.796019][ T7678] veth1_vlan: left promiscuous mode
[  873.806684][ T7678] veth0_vlan: left promiscuous mode
[  874.955955][T21582] batman_adv: batadv0: Adding interface: batadv_slave_1
[  874.962944][T21582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  875.010089][T21582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  875.154336][T21582] hsr_slave_0: entered promiscuous mode
[  875.173488][   T51] Bluetooth: hci0: command tx timeout
[  875.186386][T21582] hsr_slave_1: entered promiscuous mode
[  875.215240][T21582] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  875.225676][T21582] Cannot create hsr debugfs directory
[  875.368301][T21707] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4669'.
[  875.481102][T21713] validate_nla: 2 callbacks suppressed
[  875.481115][T21713] netlink: 'syz.3.4670': attribute type 27 has an invalid length.
[  875.630399][T21713] bond0: (slave bond_slave_0): Releasing backup interface
[  875.672489][T21713] bond_slave_0 (unregistering): left promiscuous mode
[  875.692379][T21713] bond_slave_0 (unregistering): left allmulticast mode
[  875.916449][T21733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4674'.
[  876.012229][T21733] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4674'.
[  876.465224][T21756] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4679'.
[  876.692697][T21582] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  876.752209][T21767] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4682'.
[  876.766909][T21582] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  876.792651][T21582] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  876.807093][T21764] netlink: 'syz.2.4682': attribute type 21 has an invalid length.
[  876.835618][T21582] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  877.072839][T21582] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.184404][T21582] 8021q: adding VLAN 0 to HW filter on device team0
[  877.254590][   T51] Bluetooth: hci0: command tx timeout
[  877.267864][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state
[  877.275108][ T7690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  877.298902][T21784] netlink: 'syz.1.4687': attribute type 10 has an invalid length.
[  877.330204][T21785] netlink: 'syz.1.4687': attribute type 10 has an invalid length.
[  877.370154][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state
[  877.377413][ T7690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  877.574081][T21797] sctp: [Deprecated]: syz.1.4689 (pid 21797) Use of int in max_burst socket option deprecated.
[  877.574081][T21797] Use struct sctp_assoc_value instead
[  877.628236][T21797] netlink: 'syz.1.4689': attribute type 29 has an invalid length.
[  877.674240][T21797] netlink: 'syz.1.4689': attribute type 29 has an invalid length.
[  877.749135][T21802] netlink: 'syz.1.4689': attribute type 29 has an invalid length.
[  877.832810][T21797] netlink: 'syz.1.4689': attribute type 29 has an invalid length.
[  877.870440][T21797] netlink: 'syz.1.4689': attribute type 29 has an invalid length.
[  878.148464][T21806] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4690'.
[  878.193695][T21806] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.4690'.
[  878.202987][T21806] tipc: Started in network mode
[  878.215763][T21806] tipc: Node identity b, cluster identity 73
[  878.222099][T21806] tipc: Node number set to 11
[  878.273675][T21582] 8021q: adding VLAN 0 to HW filter on device batadv0
[  878.402428][T21582] veth0_vlan: entered promiscuous mode
[  878.447648][T21582] veth1_vlan: entered promiscuous mode
[  878.627273][T21582] veth0_macvtap: entered promiscuous mode
[  878.669375][T21582] veth1_macvtap: entered promiscuous mode
[  878.764262][T21582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  878.821364][T21582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.852568][T21582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  878.875288][T21582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.897822][T21582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  878.917581][T21582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  878.938261][T21582] batman_adv: batadv0: Interface activated: batadv_slave_0
[  878.978183][T21582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  879.005004][T21582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.028684][T21582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  879.058781][T21582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.070732][T21582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  879.089379][T21582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.118618][T21582] batman_adv: batadv0: Interface activated: batadv_slave_1
[  879.159106][T21582] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  879.213256][T21582] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  879.222021][T21582] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  879.236919][T21582] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  879.334797][   T51] Bluetooth: hci0: command tx timeout
[  879.482307][ T7678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.506255][ T7678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.582506][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.624746][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.904495][T21865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4701'.
[  879.952400][T21857] netlink: 'syz.1.4700': attribute type 39 has an invalid length.
[  880.153714][T21873] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  880.674438][T21856] delete_channel: no stack
[  880.988308][T21585] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  881.022718][T21585] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  881.031422][T21585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  881.048731][T21585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  881.063412][T21585] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  881.071051][T21585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  881.801977][ T7695] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  881.869153][T21917] sock: sock_timestamping_bind_phc: sock not bind to device
[  881.944576][ T7695] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  882.040491][T21920] mac80211_hwsim hwsim59 wlan1: entered allmulticast mode
[  882.106224][ T7695] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.094489][T21585] Bluetooth: hci3: command tx timeout
[  883.220574][T21936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4715'.
[  883.249269][T21936] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4715'.
[  883.334814][ T7695] batman_adv: batadv0: Removing interface: netdevsim0
[  883.354506][ T7695] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  883.698205][T21947] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4719'.
[  883.728148][T21892] chnl_net:caif_netlink_parms(): no params data found
[  883.855937][T21947] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4719'.
[  884.286168][T21972] netlink: zone id is out of range
[  884.313203][T21972] netlink: set zone limit has 8 unknown bytes
[  884.468496][T21892] bridge0: port 1(bridge_slave_0) entered blocking state
[  884.485151][T21892] bridge0: port 1(bridge_slave_0) entered disabled state
[  884.510212][T21892] bridge_slave_0: entered allmulticast mode
[  884.529718][T21892] bridge_slave_0: entered promiscuous mode
[  884.558217][T21892] bridge0: port 2(bridge_slave_1) entered blocking state
[  884.570697][T21892] bridge0: port 2(bridge_slave_1) entered disabled state
[  884.579800][T21892] bridge_slave_1: entered allmulticast mode
[  884.601003][T21892] bridge_slave_1: entered promiscuous mode
[  884.761451][T21892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  884.785808][T21892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  884.942332][T21987] syzkaller0: entered promiscuous mode
[  884.950395][T21987] syzkaller0: entered allmulticast mode
[  884.962589][T21892] team0: Port device team_slave_0 added
[  885.006468][T21892] team0: Port device team_slave_1 added
[  885.173400][T21585] Bluetooth: hci3: command tx timeout
[  887.253666][T21585] Bluetooth: hci3: command tx timeout
[  887.445677][T21892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  887.452668][T21892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  887.519586][T21892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  887.592517][T21892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  887.604159][T21892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  887.656357][T21892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  887.852632][T21892] hsr_slave_0: entered promiscuous mode
[  887.859925][T21892] hsr_slave_1: entered promiscuous mode
[  887.869117][T21892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  887.877323][T21892] Cannot create hsr debugfs directory
[  888.377481][ T7695] bond0: (slave wlan1): Releasing backup interface
[  888.764360][T22047] netlink: 'syz.3.4737': attribute type 33 has an invalid length.
[  888.818803][T22047] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4737'.
[  888.834803][ T7695] hsr_slave_0: left promiscuous mode
[  888.844312][ T7695] hsr_slave_1: left promiscuous mode
[  888.851197][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  888.873499][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  888.908229][ T7695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  888.933799][ T7695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  888.951100][ T7695] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  888.960677][T22053] netlink: 'syz.1.4739': attribute type 29 has an invalid length.
[  888.961356][ T7695] batman_adv: batadv0: Removing interface: veth0_vlan
[  888.978926][ T7695] bridge_slave_0: left allmulticast mode
[  888.984901][ T7695] bridge_slave_0: left promiscuous mode
[  888.990887][ T7695] bridge0: port 1(bridge_slave_0) entered disabled state
[  889.050411][ T7695] veth1_macvtap: left promiscuous mode
[  889.064116][ T7695] veth1_vlan: left promiscuous mode
[  889.069504][ T7695] veth0_vlan: left promiscuous mode
[  889.333156][T21585] Bluetooth: hci3: command tx timeout
[  890.427974][ T7695] team0 (unregistering): Port device team_slave_1 removed
[  890.492675][ T7695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  890.562928][ T7695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  890.890805][ T7695] team0 (unregistering): Port device bond0 removed
[  890.927054][ T7695] bond0 (unregistering): Released all slaves
[  891.033309][T22053] netlink: 'syz.1.4739': attribute type 29 has an invalid length.
[  891.322631][T21892] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  891.385838][T21892] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  891.472934][T21892] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  891.518260][T21892] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  891.858294][T21892] 8021q: adding VLAN 0 to HW filter on device bond0
[  892.169590][T21892] 8021q: adding VLAN 0 to HW filter on device team0
[  892.289548][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state
[  892.296800][ T7690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  892.373680][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state
[  892.380906][ T7690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  892.611099][T21892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  893.047608][T21892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  893.055129][T22110] sctp: [Deprecated]: syz.1.4745 (pid 22110) Use of struct sctp_assoc_value in delayed_ack socket option.
[  893.055129][T22110] Use struct sctp_sack_info instead
[  893.186899][T21892] veth0_vlan: entered promiscuous mode
[  893.229308][T21892] veth1_vlan: entered promiscuous mode
[  893.317853][T21892] veth0_macvtap: entered promiscuous mode
[  893.360518][T21892] veth1_macvtap: entered promiscuous mode
[  893.388056][T21892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  893.404479][T21892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.421980][T21892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  893.442538][T21892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.460279][T21892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  893.488803][T21892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.535047][T21892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  893.596504][T21892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.620969][T21892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.638911][T21892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.659905][T21892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.679833][T21892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  893.703974][T21892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  893.722890][T21892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  893.765774][T21892] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  893.809084][T21892] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  893.853005][T21892] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  893.873135][T21892] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  894.151494][ T7690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.176178][ T7690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  894.231796][T22150] netlink: 'syz.1.4761': attribute type 10 has an invalid length.
[  894.279314][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  894.305591][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  895.556060][T22201] mac80211_hwsim hwsim61 wlan1: entered allmulticast mode
[  896.032467][T22226] netlink: 'syz.1.4780': attribute type 10 has an invalid length.
[  896.080139][T22226] netlink: 'syz.1.4780': attribute type 10 has an invalid length.
[  896.103340][T22226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4780'.
[  896.650863][T22248] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.4785'.
[  896.868146][T22258] netlink: 'syz.0.4786': attribute type 3 has an invalid length.
[  896.908616][T22258] netlink: 'syz.0.4786': attribute type 1 has an invalid length.
[  896.934417][T22258] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4786'.
[  898.204673][T22303] netlink: 'syz.2.4797': attribute type 10 has an invalid length.
[  898.374932][T22307] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4799'.
[  898.476203][T22303] 8021q: adding VLAN 0 to HW filter on device bond0
[  898.545854][T22303] team0: Port device bond0 added
[  899.255083][T22331] netlink: 'syz.0.4806': attribute type 4 has an invalid length.
[  899.262894][T22331] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4806'.
[  899.759301][T22344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4813'.
[  899.787589][T22344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4813'.
[  899.855417][T22344] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.4813'.
[  900.288691][T22353] sctp: [Deprecated]: syz.1.4817 (pid 22353) Use of int in maxseg socket option.
[  900.288691][T22353] Use struct sctp_assoc_value instead
[  901.217134][T22380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4825'.
[  901.226989][T22380] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4825'.
[  901.294132][T22380] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.4825'.
[  903.740148][T22424] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4843'.
[  903.742721][T22428] netlink: 'syz.0.4844': attribute type 29 has an invalid length.
[  903.762144][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'.
[  903.771851][T22424] hsr_slave_0: left promiscuous mode
[  903.790547][T22424] hsr_slave_1: left promiscuous mode
[  903.861594][T22428] netlink: 'syz.0.4844': attribute type 29 has an invalid length.
[  903.869700][T22428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4844'.
[  904.153325][T22438] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4857'.
[  904.194908][T22438] hsr_slave_0: left promiscuous mode
[  904.239660][T22438] hsr_slave_1: left promiscuous mode
[  907.159608][T22470] netlink: 'syz.1.4856': attribute type 29 has an invalid length.
[  907.188093][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4856'.
[  907.199315][T22470] netlink: 'syz.1.4856': attribute type 29 has an invalid length.
[  907.257357][T22470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4856'.
[  907.827295][T22483] netlink: 'syz.0.4860': attribute type 10 has an invalid length.
[  908.252566][T22483] 8021q: adding VLAN 0 to HW filter on device bond0
[  908.318369][T22483] team0: Port device bond0 added
[  908.527258][T22495] netlink: 'syz.0.4868': attribute type 39 has an invalid length.
[  908.620447][T22502] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  908.892330][T22508] syzkaller0: entered promiscuous mode
[  908.897955][T22508] syzkaller0: entered allmulticast mode
[  908.910798][T22508] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  908.993485][T22494] delete_channel: no stack
[  909.269873][T22529] netlink: 'syz.2.4881': attribute type 4 has an invalid length.
[  909.280646][T22529] netlink: 'syz.2.4881': attribute type 16 has an invalid length.
[  909.328450][T22529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4881'.
[  909.340662][T22530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4879'.
[  909.695632][T22539] netlink: 'syz.1.4884': attribute type 2 has an invalid length.
[  909.708544][T22539] netlink: 'syz.1.4884': attribute type 9 has an invalid length.
[  909.717289][T22539] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4884'.
[  909.993431][T22548] netlink: 'syz.0.4888': attribute type 21 has an invalid length.
[  910.023543][T22548] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4888'.
[  910.731534][T22565] netlink: 'syz.3.4894': attribute type 5 has an invalid length.
[  910.836129][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  910.848171][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  910.860138][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  910.876297][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  910.886752][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  910.894446][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  910.947413][ T7690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.077635][ T7690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.146780][ T7690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.311716][ T7690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  911.477421][T22566] chnl_net:caif_netlink_parms(): no params data found
[  911.896902][T22566] bridge0: port 1(bridge_slave_0) entered blocking state
[  911.920710][T22566] bridge0: port 1(bridge_slave_0) entered disabled state
[  911.953647][T22566] bridge_slave_0: entered allmulticast mode
[  911.960457][T22566] bridge_slave_0: entered promiscuous mode
[  911.992734][T22566] bridge0: port 2(bridge_slave_1) entered blocking state
[  912.016802][T22566] bridge0: port 2(bridge_slave_1) entered disabled state
[  912.024664][T22566] bridge_slave_1: entered allmulticast mode
[  912.031991][T22566] bridge_slave_1: entered promiscuous mode
[  912.536573][T22566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  912.585854][T22566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  912.908796][T22566] team0: Port device team_slave_0 added
[  912.936622][   T51] Bluetooth: hci1: command tx timeout
[  913.019690][T22566] team0: Port device team_slave_1 added
[  913.160133][T22566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  913.180666][T22566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  913.232730][T22566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.285251][T22566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  913.302386][T22566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  913.383271][T22566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  913.688291][T22566] hsr_slave_0: entered promiscuous mode
[  913.702495][T22566] hsr_slave_1: entered promiscuous mode
[  914.937542][T22686] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4919'.
[  915.021887][   T51] Bluetooth: hci1: command tx timeout
[  915.257173][T22686] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.4919'.
[  915.438126][ T7690] bond0: (slave wlan1): Releasing backup interface
[  915.481691][T22702] syzkaller0: entered promiscuous mode
[  915.495357][T22702] syzkaller0: entered allmulticast mode
[  917.096794][   T51] Bluetooth: hci1: command tx timeout
[  917.551022][ T7690] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  917.558747][ T7690] batman_adv: batadv0: Removing interface: batadv_slave_0
[  917.594301][ T7690] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  917.601768][ T7690] batman_adv: batadv0: Removing interface: batadv_slave_1
[  917.626224][ T7690] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  917.638414][ T7690] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  917.650339][ T7690] bridge_slave_0: left promiscuous mode
[  917.658494][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.687753][ T7690] veth1_macvtap: left promiscuous mode
[  917.695732][ T7690] veth0_macvtap: left promiscuous mode
[  917.701279][ T7690] veth1_vlan: left promiscuous mode
[  918.054478][ T7690] bond0 (unregistering): (slave geneve0): Releasing backup interface
[  918.512616][ T7690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  918.604998][ T7690] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  918.830829][ T7690] bond0 (unregistering): Released all slaves
[  918.939027][T22730] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.4927'.
[  918.978053][T22566] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  919.010954][T22566] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  919.038498][T22566] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  919.133539][T22566] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  919.183671][   T51] Bluetooth: hci1: command tx timeout
[  919.347858][T22566] 8021q: adding VLAN 0 to HW filter on device bond0
[  919.542579][T22566] 8021q: adding VLAN 0 to HW filter on device team0
[  919.562125][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state
[  919.569368][ T7678] bridge0: port 1(bridge_slave_0) entered forwarding state
[  919.630749][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state
[  919.637994][ T7678] bridge0: port 2(bridge_slave_1) entered forwarding state
[  920.170521][T22566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  920.340029][T22566] veth0_vlan: entered promiscuous mode
[  920.440219][T22566] veth1_vlan: entered promiscuous mode
[  921.038553][T22566] veth0_macvtap: entered promiscuous mode
[  921.194870][T22566] veth1_macvtap: entered promiscuous mode
[  921.358922][T22566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  921.369756][T22566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  921.398349][T22566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  921.417510][T22566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  921.428022][T22566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  921.439967][T22566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  921.478492][T22566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  921.554294][T22566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  921.577765][T22566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  921.597248][T22566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  921.613178][T22566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  921.633267][T22566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  921.653564][T22566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  921.685179][T22566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  921.756895][T22566] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  921.775169][T22566] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  921.796513][T22566] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  921.810919][T22566] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  922.129645][ T7689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  922.159206][ T7689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  922.287895][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  922.319342][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  922.331234][T22828] netlink: 'syz.2.4950': attribute type 9 has an invalid length.
[  922.351944][T22828] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4950'.
[  923.261346][T22855] netlink: 'syz.1.4957': attribute type 9 has an invalid length.
[  923.277217][T22855] netlink: 'syz.1.4957': attribute type 23 has an invalid length.
[  923.290872][T22855] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.4957'.
[  924.184315][T22879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4961'.
[  924.223558][T22879] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4961'.
[  924.292049][T22887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4961'.
[  924.599572][T22892] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4961'.
[  926.599150][T22900] netlink: 'syz.3.4967': attribute type 29 has an invalid length.
[  926.632461][T22900] netlink: 'syz.3.4967': attribute type 29 has an invalid length.
[  926.706662][T22900] netlink: 'syz.3.4967': attribute type 29 has an invalid length.
[  926.813808][T22901] netlink: 'syz.3.4967': attribute type 29 has an invalid length.
[  927.091431][T22903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  927.146774][T22908] pim6reg1: entered promiscuous mode
[  927.153355][T22908] pim6reg1: entered allmulticast mode
[  929.080653][T22939] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4983'.
[  929.113570][T22939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  929.454178][T22953] netlink: 'syz.3.4987': attribute type 10 has an invalid length.
[  929.645881][ T7689] tipc: Subscription rejected, illegal request
[  929.985291][T22971] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4993'.
[  930.039237][T22970] netlink: 'syz.2.4994': attribute type 5 has an invalid length.
[  930.342108][T22976] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.4996'.
[  931.336142][T22989] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5001'.
[  931.367122][T23001] netlink: 200944 bytes leftover after parsing attributes in process `syz.0.5006'.
[  931.383312][T23001] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  931.395494][T22999] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5005'.
[  931.410715][T22999] openvswitch: netlink: Key type 29 is not supported
[  931.584028][T23008] bridge0: port 2(bridge_slave_1) entered disabled state
[  931.591651][T23008] bridge0: port 1(bridge_slave_0) entered disabled state
[  931.644081][T23008] bridge0: entered allmulticast mode
[  931.818132][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  931.824678][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  932.224857][T23030] netlink: 'syz.2.5014': attribute type 10 has an invalid length.
[  932.306328][T23030] team0: Port device macvlan0 added
[  932.563440][T23037] �: port 1(team0) entered blocking state
[  932.571979][T23037] �: port 1(team0) entered disabled state
[  933.392440][T23071] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5025'.
[  934.725200][T23114] sit0: entered allmulticast mode
[  935.297703][T23118] mac80211_hwsim hwsim63 wlan1: entered allmulticast mode
[  935.782176][T23136] netlink: 'syz.3.5046': attribute type 15 has an invalid length.
[  935.807736][T23136] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5046'.
[  935.878491][T23140] netlink: 'syz.1.5045': attribute type 10 has an invalid length.
[  936.075018][T23140] 8021q: adding VLAN 0 to HW filter on device bond0
[  936.082789][T23140] team0: Port device bond0 added
[  937.268566][T23169] netlink: 'syz.1.5056': attribute type 2 has an invalid length.
[  937.287012][T23169] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5056'.
[  937.807385][T23196] netlink: 'syz.0.5063': attribute type 21 has an invalid length.
[  937.823492][T23196] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5063'.
[  939.425087][T23228] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.5072'.
[  939.525371][T23231] netlink: 'syz.3.5075': attribute type 21 has an invalid length.
[  939.543592][T23231] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5075'.
[  939.573682][T23233] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.5077'.
[  939.590278][T23236] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5078'.
[  939.612976][T23233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  939.620561][T23233] IPv6: NLM_F_CREATE should be set when creating new route
[  939.628197][T23233] IPv6: NLM_F_CREATE should be set when creating new route
[  939.635711][T23233] IPv6: NLM_F_CREATE should be set when creating new route
[  939.938867][T23240] netlink: 'syz.1.5081': attribute type 16 has an invalid length.
[  939.960055][T23240] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5081'.
[  939.988264][T23240] veth1_macvtap: entered allmulticast mode
[  941.507607][T23285] bridge_slave_1: left allmulticast mode
[  941.523306][T23285] bridge_slave_1: left promiscuous mode
[  941.534847][T23285] bridge0: port 2(bridge_slave_1) entered disabled state
[  941.562066][T23285] bridge_slave_0: left allmulticast mode
[  941.569630][T23285] bridge_slave_0: left promiscuous mode
[  941.588470][T23285] bridge0: port 1(bridge_slave_0) entered disabled state
[  942.016079][T23307] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.5101'.
[  942.060633][T23307] netlink: 'syz.3.5101': attribute type 1 has an invalid length.
[  942.086420][T23307] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.5101'.
[  943.430890][T23373] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5123'.
[  943.471882][T23379] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.5123'.
[  943.644648][T23386] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.5125'.
[  943.865618][T23393] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5131'.
[  944.379225][T23414] netlink: 'syz.2.5139': attribute type 29 has an invalid length.
[  944.459047][T23414] netlink: 'syz.2.5139': attribute type 29 has an invalid length.
[  944.657391][T23419] netlink: 'syz.2.5139': attribute type 39 has an invalid length.
[  946.108743][T23475] netlink: 'syz.1.5152': attribute type 10 has an invalid length.
[  946.190515][T23475] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  946.244356][T23483] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.5157'.
[  946.989199][T23504] syz.3.5163: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  947.008411][T23504] CPU: 0 PID: 23504 Comm: syz.3.5163 Not tainted syzkaller #0
[  947.015920][T23504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  947.025989][T23504] Call Trace:
[  947.029274][T23504]  <TASK>
[  947.032196][T23504]  dump_stack_lvl+0x18c/0x250
[  947.036872][T23504]  ? show_regs_print_info+0x20/0x20
[  947.042080][T23504]  ? load_image+0x420/0x420
[  947.046614][T23504]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  947.053032][T23504]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  947.059537][T23504]  warn_alloc+0x246/0x340
[  947.063875][T23504]  ? stack_trace_save+0xaa/0x100
[  947.068818][T23504]  ? zone_watermark_ok_safe+0x230/0x230
[  947.074364][T23504]  ? kasan_set_track+0x5f/0x70
[  947.079131][T23504]  ? kasan_set_track+0x4e/0x70
[  947.083892][T23504]  ? __kasan_kmalloc+0x8f/0xa0
[  947.088656][T23504]  ? xsk_init_queue+0xad/0x100
[  947.093427][T23504]  ? xsk_setsockopt+0x4c9/0x750
[  947.098275][T23504]  ? do_sock_setsockopt+0x175/0x1a0
[  947.103506][T23504]  ? __x64_sys_setsockopt+0x182/0x200
[  947.108877][T23504]  __vmalloc_node_range+0x129/0x1320
[  947.114192][T23504]  ? free_vm_area+0x50/0x50
[  947.118705][T23504]  vmalloc_user+0x74/0x80
[  947.123035][T23504]  ? xskq_create+0xbf/0x170
[  947.127536][T23504]  xskq_create+0xbf/0x170
[  947.131861][T23504]  xsk_init_queue+0xad/0x100
[  947.136455][T23504]  xsk_setsockopt+0x4c9/0x750
[  947.141137][T23504]  ? xsk_poll+0x670/0x670
[  947.145473][T23504]  ? __fget_files+0x28/0x460
[  947.150080][T23504]  ? aa_sock_opt_perm+0x74/0x100
[  947.155024][T23504]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  947.160573][T23504]  ? security_socket_setsockopt+0x7e/0xa0
[  947.166289][T23504]  ? xsk_poll+0x670/0x670
[  947.170624][T23504]  do_sock_setsockopt+0x175/0x1a0
[  947.175648][T23504]  ? __fdget+0x180/0x210
[  947.179890][T23504]  __x64_sys_setsockopt+0x182/0x200
[  947.185089][T23504]  do_syscall_64+0x55/0xb0
[  947.189513][T23504]  ? clear_bhb_loop+0x40/0x90
[  947.194188][T23504]  ? clear_bhb_loop+0x40/0x90
[  947.198862][T23504]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  947.204753][T23504] RIP: 0033:0x7f2b2cd9e0d9
[  947.209165][T23504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  947.228866][T23504] RSP: 002b:00007f2b2dc82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  947.237288][T23504] RAX: ffffffffffffffda RBX: 00007f2b2d025fa0 RCX: 00007f2b2cd9e0d9
[  947.245275][T23504] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009
[  947.253257][T23504] RBP: 00007f2b2ce35024 R08: 0000000000000004 R09: 0000000000000000
[  947.261244][T23504] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  947.269323][T23504] R13: 00007f2b2d026038 R14: 00007f2b2d025fa0 R15: 00007fffba8e3938
[  947.277331][T23504]  </TASK>
[  947.354449][T23504] Mem-Info:
[  947.357664][T23504] active_anon:11958 inactive_anon:0 isolated_anon:0
[  947.357664][T23504]  active_file:18336 inactive_file:40301 isolated_file:0
[  947.357664][T23504]  unevictable:768 dirty:182 writeback:0
[  947.357664][T23504]  slab_reclaimable:10995 slab_unreclaimable:95018
[  947.357664][T23504]  mapped:25913 shmem:1361 pagetables:679
[  947.357664][T23504]  sec_pagetables:0 bounce:0
[  947.357664][T23504]  kernel_misc_reclaimable:0
[  947.357664][T23504]  free:1329793 free_pcp:13778 free_cma:0
[  947.497769][T23504] Node 0 active_anon:47732kB inactive_anon:0kB active_file:73344kB inactive_file:161004kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99552kB dirty:728kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10676kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no
[  947.589928][T23504] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  947.660081][T23504] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  947.705103][T23504] lowmem_reserve[]: 0 2521 2522 2522 2522
[  947.786500][T23504] Node 0 DMA32 free:1411552kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:47392kB inactive_anon:0kB active_file:73344kB inactive_file:160180kB unevictable:1536kB writepending:728kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:33492kB local_pcp:19280kB free_cma:0kB
[  947.906360][T23504] lowmem_reserve[]: 0 0 0 0 0
[  947.921027][T23504] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB
[  947.976328][T23504] lowmem_reserve[]: 0 0 0 0 0
[  947.998010][T23504] Node 1 Normal free:3891572kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21344kB local_pcp:9912kB free_cma:0kB
[  948.060316][T23504] lowmem_reserve[]: 0 0 0 0 0
[  948.075815][T23504] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  948.108718][T23504] Node 0 DMA32: 326*4kB (UME) 245*8kB (UE) 206*16kB (UME) 1285*32kB (UME) 1809*64kB (UME) 531*128kB (UME) 105*256kB (UM) 34*512kB (UME) 25*1024kB (UME) 12*2048kB (UME) 265*4096kB (UM) = 1411328kB
[  948.163257][T23504] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  948.215583][T23504] Node 1 Normal: 195*4kB (UME) 57*8kB (UME) 44*16kB (UME) 39*32kB (UME) 20*64kB (UE) 4*128kB (UME) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3891572kB
[  948.276497][T23504] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  948.294487][T23535] netlink: 'syz.1.5169': attribute type 9 has an invalid length.
[  948.308954][T23504] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  948.318926][T23535] netlink: 'syz.1.5169': attribute type 23 has an invalid length.
[  948.338844][T23535] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.5169'.
[  948.350649][T23504] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  948.377317][T23504] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  948.403179][T23504] 59998 total pagecache pages
[  948.414765][T23504] 0 pages in swap cache
[  948.424857][T23504] Free swap  = 124428kB
[  948.434638][T23504] Total swap = 124996kB
[  948.445662][T23536] netlink: 'syz.1.5169': attribute type 10 has an invalid length.
[  948.463570][T23504] 2097051 pages RAM
[  948.478397][T23504] 0 pages HighMem/MovableOnly
[  948.484737][T23536] hsr0: entered promiscuous mode
[  948.489784][T23504] 416958 pages reserved
[  948.504317][T23504] 0 pages cma reserved
[  948.510470][T23536] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  948.541896][T23536] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  948.559974][T23536] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  948.574842][T23536] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  948.880987][T23538] netlink: 'syz.2.5171': attribute type 10 has an invalid length.
[  949.142551][T23538] team0: Port device geneve1 added
[  949.187301][T23539] netlink: 'syz.2.5171': attribute type 10 has an invalid length.
[  949.396507][T23554] netlink: 'syz.1.5174': attribute type 27 has an invalid length.
[  949.435579][T23554] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5174'.
[  950.026509][T23560] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5176'.
[  950.582805][T23577] sctp: [Deprecated]: syz.3.5185 (pid 23577) Use of int in maxseg socket option.
[  950.582805][T23577] Use struct sctp_assoc_value instead
[  951.074105][T23594] netlink: 'syz.0.5191': attribute type 27 has an invalid length.
[  951.102924][T23594] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5191'.
[  952.495641][T23618] netlink: 'syz.1.5200': attribute type 6 has an invalid length.
[  952.520256][T21585] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  952.530746][T21585] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  952.553322][T21585] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  952.554135][T23618] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5200'.
[  952.576528][T21585] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  952.594044][T21585] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  952.602787][T21585] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  952.735287][T23623] bridge0: entered promiscuous mode
[  952.761866][T23623] bridge0: entered allmulticast mode
[  953.127637][T23619] chnl_net:caif_netlink_parms(): no params data found
[  953.325213][T23619] bridge0: port 1(bridge_slave_0) entered blocking state
[  953.332933][T23619] bridge0: port 1(bridge_slave_0) entered disabled state
[  953.347292][T23619] bridge_slave_0: entered allmulticast mode
[  953.358068][T23619] bridge_slave_0: entered promiscuous mode
[  953.371324][T23619] bridge0: port 2(bridge_slave_1) entered blocking state
[  953.381431][T23619] bridge0: port 2(bridge_slave_1) entered disabled state
[  953.408946][T23619] bridge_slave_1: entered allmulticast mode
[  953.419704][T23619] bridge_slave_1: entered promiscuous mode
[  953.480140][T23619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  953.500595][T23619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  953.580702][T23619] team0: Port device team_slave_0 added
[  953.595253][T23619] team0: Port device team_slave_1 added
[  953.681720][T23619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  953.709948][T23619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  953.743776][T23619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  953.786059][T23638] netlink: 'syz.1.5204': attribute type 21 has an invalid length.
[  953.809433][T23638] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5204'.
[  953.906800][T23619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  953.933187][T23619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  953.970655][T23619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  954.023016][T23635] netlink: 'syz.2.5203': attribute type 27 has an invalid length.
[  954.073239][T23635] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5203'.
[  954.171061][T23619] hsr_slave_0: entered promiscuous mode
[  954.203549][T23619] hsr_slave_1: entered promiscuous mode
[  954.253642][T23619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  954.282465][T23619] Cannot create hsr debugfs directory
[  954.308038][T23652] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.5208'.
[  954.693310][   T51] Bluetooth: hci4: command tx timeout
[  954.726338][T23619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.000871][T23619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.052036][T23656] netlink: 'syz.1.5218': attribute type 21 has an invalid length.
[  955.065869][T23656] netlink: 'syz.1.5218': attribute type 1 has an invalid length.
[  955.076301][T23656] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5218'.
[  955.204641][T23619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.411916][T23619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  955.558562][T23675] netlink: 'syz.2.5219': attribute type 11 has an invalid length.
[  956.777979][   T51] Bluetooth: hci4: command tx timeout
[  957.678726][T23619] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  957.690370][T23619] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  957.700985][T23619] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  957.717410][T23619] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  957.915312][T23619] 8021q: adding VLAN 0 to HW filter on device bond0
[  957.960812][T23619] 8021q: adding VLAN 0 to HW filter on device team0
[  957.982515][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.989742][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  958.021191][ T3487] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.028422][ T3487] bridge0: port 2(bridge_slave_1) entered forwarding state
[  958.066099][T23619] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  958.079432][T23619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  958.459560][T23619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  958.572111][T23707] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5231'.
[  958.591254][T23707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  958.608334][T23619] veth0_vlan: entered promiscuous mode
[  958.637634][T23619] veth1_vlan: entered promiscuous mode
[  958.716574][T23619] veth0_macvtap: entered promiscuous mode
[  958.742557][T23619] veth1_macvtap: entered promiscuous mode
[  958.784979][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  958.803919][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  958.816734][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  958.827764][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  958.839638][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  958.851112][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  958.863386][   T51] Bluetooth: hci4: command tx timeout
[  958.879285][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  958.897520][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  958.925982][T23619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  958.961863][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  958.977460][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.003167][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  959.033334][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.053235][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  959.065941][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.076294][T23619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  959.088808][T23619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  959.102440][T23619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  959.136690][T23619] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  959.161833][T23619] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  959.172793][T23619] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  959.182824][T23619] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  959.335652][ T7689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  959.353317][ T7689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  959.439685][ T7695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  959.464560][ T7695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  959.858080][T23741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5243'.
[  959.926329][   T51] Bluetooth: hci4: ISO packet for unknown connection handle 2878
[  959.977822][T23745] netlink: 'syz.3.5245': attribute type 2 has an invalid length.
[  960.014484][T23745] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.5245'.
[  960.279256][T23761] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5248'.
[  960.777102][T23777] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.5253'.
[  960.787316][T23777] openvswitch: netlink: IP tunnel dst address not specified
[  960.943313][   T51] Bluetooth: hci4: command tx timeout
[  963.822134][T23819] netlink: 'syz.3.5263': attribute type 27 has an invalid length.
[  963.837438][T23819] netlink: 'syz.3.5263': attribute type 25 has an invalid length.
[  964.042626][T23838] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.5267'.
[  964.073513][T23838] openvswitch: netlink: IP tunnel dst address not specified
[  964.236470][T23844] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5270'.
[  964.252334][T23844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  965.371580][T23876] FAULT_INJECTION: forcing a failure.
[  965.371580][T23876] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  965.385013][T23876] CPU: 1 PID: 23876 Comm: syz.0.5282 Not tainted syzkaller #0
[  965.392499][T23876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  965.402572][T23876] Call Trace:
[  965.405855][T23876]  <TASK>
[  965.408780][T23876]  dump_stack_lvl+0x18c/0x250
[  965.413461][T23876]  ? show_regs_print_info+0x20/0x20
[  965.418660][T23876]  ? load_image+0x420/0x420
[  965.423170][T23876]  ? __might_fault+0xaa/0x120
[  965.427841][T23876]  ? __lock_acquire+0x7d80/0x7d80
[  965.432864][T23876]  should_fail_ex+0x394/0x4c0
[  965.437547][T23876]  _copy_from_user+0x2f/0xe0
[  965.442132][T23876]  ___sys_sendmsg+0x1c7/0x360
[  965.446802][T23876]  ? get_pid_task+0x20/0x1e0
[  965.451394][T23876]  ? __sys_sendmsg+0x2b0/0x2b0
[  965.456165][T23876]  ? __lock_acquire+0x7d80/0x7d80
[  965.461197][T23876]  __se_sys_sendmsg+0x1d0/0x2c0
[  965.466046][T23876]  ? __x64_sys_sendmsg+0x80/0x80
[  965.471004][T23876]  ? lockdep_hardirqs_on+0x98/0x150
[  965.476212][T23876]  do_syscall_64+0x55/0xb0
[  965.480656][T23876]  ? clear_bhb_loop+0x40/0x90
[  965.485342][T23876]  ? clear_bhb_loop+0x40/0x90
[  965.490027][T23876]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  965.495922][T23876] RIP: 0033:0x7fc96059e0d9
[  965.500337][T23876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  965.519963][T23876] RSP: 002b:00007fc961411028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  965.528373][T23876] RAX: ffffffffffffffda RBX: 00007fc960825fa0 RCX: 00007fc96059e0d9
[  965.536371][T23876] RDX: 0000000020040000 RSI: 00002000000001c0 RDI: 0000000000000003
[  965.544341][T23876] RBP: 00007fc961411090 R08: 0000000000000000 R09: 0000000000000000
[  965.552307][T23876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  965.560278][T23876] R13: 00007fc960826038 R14: 00007fc960825fa0 R15: 00007ffeb2b455f8
[  965.568273][T23876]  </TASK>
[  966.051040][T23901] FAULT_INJECTION: forcing a failure.
[  966.051040][T23901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  966.089110][T23901] CPU: 1 PID: 23901 Comm: syz.3.5294 Not tainted syzkaller #0
[  966.090839][T23898] netlink: 'syz.0.5290': attribute type 4 has an invalid length.
[  966.096607][T23901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  966.096622][T23901] Call Trace:
[  966.096630][T23901]  <TASK>
[  966.096638][T23901]  dump_stack_lvl+0x18c/0x250
[  966.096666][T23901]  ? show_regs_print_info+0x20/0x20
[  966.096686][T23901]  ? load_image+0x420/0x420
[  966.096714][T23901]  ? __lock_acquire+0x7d80/0x7d80
[  966.096740][T23901]  should_fail_ex+0x394/0x4c0
[  966.096769][T23901]  _copy_from_user+0x2f/0xe0
[  966.096790][T23901]  __copy_msghdr+0x388/0x560
[  966.096817][T23901]  ___sys_sendmsg+0x214/0x360
[  966.096836][T23901]  ? get_pid_task+0x20/0x1e0
[  966.096864][T23901]  ? __sys_sendmsg+0x2b0/0x2b0
[  966.096902][T23901]  ? __lock_acquire+0x7d80/0x7d80
[  966.096944][T23901]  __se_sys_sendmsg+0x1d0/0x2c0
[  966.096967][T23901]  ? __x64_sys_sendmsg+0x80/0x80
[  966.097001][T23901]  ? lockdep_hardirqs_on+0x98/0x150
[  966.123241][T23898] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5290'.
[  966.125701][T23901]  do_syscall_64+0x55/0xb0
[  966.125729][T23901]  ? clear_bhb_loop+0x40/0x90
[  966.125749][T23901]  ? clear_bhb_loop+0x40/0x90
[  966.125770][T23901]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  966.125790][T23901] RIP: 0033:0x7f4fd499e0d9
[  966.125809][T23901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  966.125825][T23901] RSP: 002b:00007f4fd5928028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  966.249659][T23901] RAX: ffffffffffffffda RBX: 00007f4fd4c25fa0 RCX: 00007f4fd499e0d9
[  966.257632][T23901] RDX: 0000000020040000 RSI: 00002000000001c0 RDI: 0000000000000003
[  966.265600][T23901] RBP: 00007f4fd5928090 R08: 0000000000000000 R09: 0000000000000000
[  966.273565][T23901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  966.281543][T23901] R13: 00007f4fd4c26038 R14: 00007f4fd4c25fa0 R15: 00007ffc3fa26f08
[  966.289544][T23901]  </TASK>
[  966.321371][T23898] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  966.343009][T23904] IPv6: NLM_F_CREATE should be specified when creating new route
[  966.350946][T23904] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5293'.
[  966.964171][T23932] syzkaller0: entered promiscuous mode
[  966.970671][T23932] syzkaller0: entered allmulticast mode
[  967.090364][T23932] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5302'.
[  967.118400][T23932] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  967.419129][T23944] netlink: 'syz.3.5305': attribute type 10 has an invalid length.
[  967.543273][T23944] team0: Port device netdevsim0 added
[  967.565754][T23948] netlink: 'syz.1.5308': attribute type 29 has an invalid length.
[  967.575053][T23940] netlink: 'syz.3.5305': attribute type 10 has an invalid length.
[  967.920287][T23940] team0: Port device netdevsim0 removed
[  967.955848][T23940] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  967.970190][T23948] netlink: 'syz.1.5308': attribute type 29 has an invalid length.
[  967.984285][T23955] dvmrp1: tun_chr_ioctl cmd 2148553947
[  968.022239][T23950] netlink: 'syz.1.5308': attribute type 29 has an invalid length.
[  968.051729][T23952] netlink: 'syz.1.5308': attribute type 29 has an invalid length.
[  968.066990][T23954] netlink: 'syz.1.5308': attribute type 29 has an invalid length.
[  968.379072][T23977] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  968.404127][T23975] syzkaller0: entered promiscuous mode
[  968.409678][T23975] syzkaller0: entered allmulticast mode
[  968.603635][T23975] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5315'.
[  968.634141][T23975] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  968.639505][T23979] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.5317'.
[  968.677170][T23987] netlink: 12403 bytes leftover after parsing attributes in process `syz.1.5317'.
[  968.707587][T23979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5317'.
[  970.020843][T24027] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5334'.
[  970.060560][T24027] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.5334'.
[  970.562482][T24045] mac80211_hwsim hwsim61 wlan1: left allmulticast mode
[  971.053957][T24062] FAULT_INJECTION: forcing a failure.
[  971.053957][T24062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  971.083279][T24062] CPU: 1 PID: 24062 Comm: syz.0.5345 Not tainted syzkaller #0
[  971.090798][T24062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  971.100876][T24062] Call Trace:
[  971.104178][T24062]  <TASK>
[  971.107127][T24062]  dump_stack_lvl+0x18c/0x250
[  971.111834][T24062]  ? show_regs_print_info+0x20/0x20
[  971.117057][T24062]  ? load_image+0x420/0x420
[  971.121594][T24062]  ? __lock_acquire+0x7d80/0x7d80
[  971.126659][T24062]  ? snprintf+0xe9/0x140
[  971.130934][T24062]  should_fail_ex+0x394/0x4c0
[  971.135642][T24062]  _copy_to_user+0x2f/0xa0
[  971.140086][T24062]  simple_read_from_buffer+0xe7/0x150
[  971.145489][T24062]  proc_fail_nth_read+0x1e8/0x260
[  971.150554][T24062]  ? proc_fault_inject_write+0x360/0x360
[  971.156220][T24062]  ? fsnotify_perm+0x271/0x5e0
[  971.161027][T24062]  ? proc_fault_inject_write+0x360/0x360
[  971.166688][T24062]  vfs_read+0x298/0x990
[  971.170878][T24062]  ? kernel_read+0x1e0/0x1e0
[  971.175499][T24062]  ? __fget_files+0x28/0x460
[  971.180116][T24062]  ? __fget_files+0x3fc/0x460
[  971.184824][T24062]  ? __fdget_pos+0x2a3/0x330
[  971.189439][T24062]  ? ksys_read+0x74/0x260
[  971.193811][T24062]  ksys_read+0x151/0x260
[  971.198079][T24062]  ? vfs_write+0x9a0/0x9a0
[  971.202524][T24062]  ? lockdep_hardirqs_on+0x98/0x150
[  971.207757][T24062]  do_syscall_64+0x55/0xb0
[  971.212195][T24062]  ? clear_bhb_loop+0x40/0x90
[  971.216897][T24062]  ? clear_bhb_loop+0x40/0x90
[  971.221598][T24062]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  971.227511][T24062] RIP: 0033:0x7fc96055e90e
[  971.231946][T24062] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  971.251579][T24062] RSP: 002b:00007fc961410fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  971.260035][T24062] RAX: ffffffffffffffda RBX: 00007fc9614116c0 RCX: 00007fc96055e90e
[  971.268034][T24062] RDX: 000000000000000f RSI: 00007fc9614110a0 RDI: 0000000000000004
[  971.276026][T24062] RBP: 00007fc961411090 R08: 0000000000000000 R09: 0000000000000000
[  971.284018][T24062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  971.292013][T24062] R13: 00007fc960826038 R14: 00007fc960825fa0 R15: 00007ffeb2b455f8
[  971.300027][T24062]  </TASK>
[  971.419154][T24067] netlink: 'syz.0.5347': attribute type 4 has an invalid length.
[  971.447765][T24067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5347'.
[  971.623855][T24073] mac80211_hwsim hwsim61 wlan1: entered allmulticast mode
[  971.749429][T24077] netlink: 'syz.0.5351': attribute type 3 has an invalid length.
[  971.783181][T24077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5351'.
[  972.083981][T24089] netlink: 'syz.1.5356': attribute type 21 has an invalid length.
[  972.680346][T24110] netlink: 'syz.2.5365': attribute type 4 has an invalid length.
[  972.835782][T24115] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.5367'.
[  973.249450][T24126] netlink: 'syz.1.5369': attribute type 10 has an invalid length.
[  974.385553][T24139] mac80211_hwsim hwsim69 wlan1: entered allmulticast mode
[  974.406541][T24150] mac80211_hwsim hwsim61 wlan1: entered promiscuous mode
[  974.662467][T24154] netlink: 'syz.1.5380': attribute type 2 has an invalid length.
[  974.684796][T24154] netlink: 'syz.1.5380': attribute type 1 has an invalid length.
[  974.699116][T24154] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5380'.
[  975.243348][T24171] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5385'.
[  975.414616][T24175] sctp: [Deprecated]: syz.3.5389 (pid 24175) Use of struct sctp_assoc_value in delayed_ack socket option.
[  975.414616][T24175] Use struct sctp_sack_info instead
[  975.922167][T24184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  976.221011][T24193] netlink: 'syz.0.5396': attribute type 9 has an invalid length.
[  976.256813][T24193] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5396'.
[  978.488322][T24228] netlink: 'syz.2.5407': attribute type 16 has an invalid length.
[  978.523387][T24228] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5407'.
[  978.579825][T24228] veth1_macvtap: entered allmulticast mode
[  979.502110][T24251] mac80211_hwsim hwsim69 wlan1: entered promiscuous mode
[  979.981568][T24277] netlink: 'syz.0.5420': attribute type 16 has an invalid length.
[  979.993626][T24277] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5420'.
[  980.002910][T24277] veth1_macvtap: entered allmulticast mode
[  980.093874][T24286] netlink: 'syz.1.5424': attribute type 11 has an invalid length.
[  980.114533][T24286] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5424'.
[  980.341444][T24294] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5426'.
[  980.531675][   T51] Bluetooth: hci3: ISO packet for unknown connection handle 44
[  980.556700][T24300] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5431'.
[  981.793992][T24315] netlink: 'syz.0.5435': attribute type 11 has an invalid length.
[  982.475710][T24331] netlink: 'syz.3.5440': attribute type 21 has an invalid length.
[  982.521941][T24331] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5440'.
[  982.547304][T24322] netlink: 'syz.1.5436': attribute type 16 has an invalid length.
[  982.585753][T24322] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5436'.
[  983.169503][T24338] mac80211_hwsim hwsim61 wlan1: left promiscuous mode
[  983.286199][T24343] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5444'.
[  983.317638][T24343] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.5444'.
[  983.346354][T24343] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5444'.
[  985.441410][T24371] netlink: 'syz.1.5452': attribute type 10 has an invalid length.
[  985.513362][T24371] mac80211_hwsim hwsim63 wlan1: left allmulticast mode
[  985.587655][T24371] team0: Port device wlan1 added
[  985.765324][T24376] netlink: 'syz.0.5453': attribute type 1 has an invalid length.
[  985.827390][T24376] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.5453'.
[  986.689223][T24386] netlink: 'syz.2.5457': attribute type 2 has an invalid length.
[  986.713691][T24386] netlink: 'syz.2.5457': attribute type 8 has an invalid length.
[  986.722192][T24386] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5457'.
[  986.825645][T24391] netlink: 'syz.2.5457': attribute type 2 has an invalid length.
[  986.863634][T24391] netlink: 'syz.2.5457': attribute type 8 has an invalid length.
[  986.871710][T24391] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5457'.
[  988.534571][T24407] veth0_vlan: entered allmulticast mode
[  989.635397][T24427] netlink: 763 bytes leftover after parsing attributes in process `syz.0.5470'.
[  992.898659][T24437] netlink: 'syz.1.5472': attribute type 4 has an invalid length.
[  992.925963][T24437] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5472'.
[  993.272434][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  993.278827][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  993.616191][T24448] netlink: 'syz.0.5475': attribute type 2 has an invalid length.
[  993.654294][T24448] netlink: 'syz.0.5475': attribute type 8 has an invalid length.
[  993.693337][T24448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5475'.
[  993.770214][T24450] netlink: 'syz.0.5475': attribute type 2 has an invalid length.
[  993.825194][T24450] netlink: 'syz.0.5475': attribute type 8 has an invalid length.
[  993.892017][T24450] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5475'.
[  993.910000][T24453] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5476'.
[  993.991911][T24453] openvswitch: netlink: Key type 29 is not supported
[  994.197742][T24460] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.5479'.
[  994.462144][T24458] mac80211_hwsim hwsim63 wlan1: entered allmulticast mode
[  995.337415][T21585] Bluetooth: hci0: command 0x0406 tx timeout
[  995.960757][T24513] netlink: 'syz.2.5502': attribute type 10 has an invalid length.
[  996.131672][T24513] bridge_slave_1: left allmulticast mode
[  996.144416][T24513] bridge_slave_1: left promiscuous mode
[  996.160384][T24513] bridge0: port 2(bridge_slave_1) entered disabled state
[  996.330498][T24513] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  996.832996][T24538] mac80211_hwsim hwsim69 wlan1: left promiscuous mode
[  997.254901][T24546] netlink: 6 bytes leftover after parsing attributes in process `syz.3.5512'.
[  997.671827][T24553] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  997.704925][T24553] batman_adv: batadv0: Removing interface: batadv_slave_0
[  997.728330][T24553] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  997.742732][T24553] batman_adv: batadv0: Removing interface: batadv_slave_1
[  998.357385][   T51] Bluetooth: hci1: ISO packet for unknown connection handle 4
[  998.709436][T24602] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.5533'.
[  998.724353][T24602] netlink: zone id is out of range
[  998.729555][T24602] netlink: zone id is out of range
[  998.753179][T24602] netlink: zone id is out of range
[  998.758368][T24602] netlink: zone id is out of range
[  998.789029][T24605] syz.0.5533[24605] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  998.796325][T24602] netlink: zone id is out of range
[  998.816641][T24602] netlink: zone id is out of range
[  998.822862][T24602] netlink: zone id is out of range
[  998.830313][T24602] netlink: zone id is out of range
[  998.836109][T24602] netlink: zone id is out of range
[  999.167444][T24623] dvmrp1: tun_chr_ioctl cmd 2148553947
[  999.368014][T24632] netlink: 'syz.3.5546': attribute type 10 has an invalid length.
[  999.407357][T24632] 8021q: adding VLAN 0 to HW filter on device bond0
[  999.434497][T24632] team0: Port device bond0 added
[  999.624055][T24647] syzkaller0: tun_chr_ioctl cmd 1074025677
[  999.630204][T24647] syzkaller0: linktype set to 0
[  999.729901][T24649] netlink: 'syz.2.5551': attribute type 10 has an invalid length.
[  999.816572][T24652] netlink: 'syz.0.5552': attribute type 8 has an invalid length.
[  999.824998][T24652] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.5552'.
[  999.855414][T24654] netlink: 'syz.3.5553': attribute type 10 has an invalid length.
[  999.958525][T24654] team0: Port device dummy0 added
[  999.986226][T24652] netlink: 'syz.0.5552': attribute type 2 has an invalid length.
[  999.997538][T24652] netlink: 'syz.0.5552': attribute type 6 has an invalid length.
[ 1000.079534][T24662] netlink: 'syz.3.5555': attribute type 21 has an invalid length.
[ 1000.501468][   T51] Bluetooth: hci3: Malformed HCI Event
[ 1001.079354][T24712] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5569'.
[ 1001.146498][T24712] net_ratelimit: 81 callbacks suppressed
[ 1001.146536][T24712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1001.456382][T24716] netlink: 'syz.0.5572': attribute type 10 has an invalid length.
[ 1001.490559][   T51] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15
[ 1001.572757][T24716] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1001.619124][T24716] bridge_slave_1: left allmulticast mode
[ 1001.632347][T24716] bridge_slave_1: left promiscuous mode
[ 1001.652065][T24716] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1001.870423][T24716] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1001.883963][T24727] netlink: 'syz.2.5576': attribute type 21 has an invalid length.
[ 1002.146754][T24739] sock: sock_set_timeout: `syz.3.5581' (pid 24739) tries to set negative timeout
[ 1002.163508][T24739] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5581'.
[ 1002.388607][T24742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1002.445221][T24746] netlink: 'syz.1.5583': attribute type 4 has an invalid length.
[ 1002.453023][T24746] netlink: 206236 bytes leftover after parsing attributes in process `syz.1.5583'.
[ 1002.616239][T24753] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5586'.
[ 1002.651589][T24753] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[ 1005.573571][T21585] Bluetooth: hci3: command 0x0406 tx timeout
[ 1005.863552][T24762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.877182][T24762] bridge_slave_1: left allmulticast mode
[ 1005.885047][T24762] bridge_slave_1: left promiscuous mode
[ 1005.890968][T24762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1005.982356][T24762] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1006.006987][T24779] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5594'.
[ 1006.301838][T24794] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.5599'.
[ 1006.656728][T24808] validate_nla: 1 callbacks suppressed
[ 1006.656746][T24808] netlink: 'syz.1.5603': attribute type 10 has an invalid length.
[ 1007.289093][T24828] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5609'.
[ 1008.028116][   T51] Bluetooth: hci0: Dropping invalid advertising data
[ 1008.036335][   T51] Bluetooth: hci0: Malformed LE Event: 0x02
[ 1008.129287][T24858] netlink: 'syz.2.5624': attribute type 9 has an invalid length.
[ 1008.152504][T24858] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5624'.
[ 1008.585526][T24881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1008.858059][T24895] netlink: 668 bytes leftover after parsing attributes in process `syz.3.5635'.
[ 1008.884741][T24895] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[ 1008.896238][T24895] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1009.061363][T24898] vcan0: entered allmulticast mode
[ 1009.134281][T24898] netlink: 'syz.1.5637': attribute type 10 has an invalid length.
[ 1009.777201][T24927] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.5645'.
[ 1010.819228][T24954] vcan0: entered allmulticast mode
[ 1010.858105][T24960] netlink: 'syz.2.5651': attribute type 39 has an invalid length.
[ 1010.903440][T24954] netlink: 'syz.3.5650': attribute type 10 has an invalid length.
[ 1010.939645][T24954] veth0_macvtap: left promiscuous mode
[ 1011.105562][T24966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5652'.
[ 1011.144731][T24966] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5652'.
[ 1011.183753][T24963] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5652'.
[ 1011.202191][T24964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5652'.
[ 1011.391695][T24974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5656'.
[ 1011.427302][T24974] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5656'.
[ 1011.460261][T24977] netlink: 'syz.3.5658': attribute type 39 has an invalid length.
[ 1011.530040][T24977] macvlan0: entered promiscuous mode
[ 1011.537889][T24977] macvlan0: entered allmulticast mode
[ 1011.543866][T24977] veth1_vlan: entered allmulticast mode
[ 1011.652774][T24989] netlink: 'syz.1.5661': attribute type 26 has an invalid length.
[ 1011.677559][T24989] netlink: 62827 bytes leftover after parsing attributes in process `syz.1.5661'.
[ 1011.789036][T24993] netlink: 'syz.3.5662': attribute type 21 has an invalid length.
[ 1011.836491][T24993] netlink: 'syz.3.5662': attribute type 20 has an invalid length.
[ 1012.066239][T25000] netlink: 'syz.2.5663': attribute type 10 has an invalid length.
[ 1012.088422][T25000] mac80211_hwsim hwsim61 wlan1: left allmulticast mode
[ 1012.142327][T25000] team0: Port device wlan1 added
[ 1012.170346][T25003] netlink: 'syz.1.5665': attribute type 21 has an invalid length.
[ 1012.188988][T25009] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5666'.
[ 1012.426995][T25015] netlink: 'syz.1.5667': attribute type 10 has an invalid length.
[ 1012.589393][T25015] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1012.854316][T25020] vcan0: entered allmulticast mode
[ 1012.916305][T25028] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5672'.
[ 1012.957611][T25028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5672'.
[ 1012.984969][T25020] netlink: 'syz.2.5668': attribute type 10 has an invalid length.
[ 1013.017396][T25020] veth0_macvtap: left promiscuous mode
[ 1013.322675][T25029] netlink: 'syz.1.5671': attribute type 5 has an invalid length.
[ 1013.339491][T25031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1013.354883][T25031] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1013.370060][T25031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1013.383175][T25031] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1013.614165][T25041] netlink: 'syz.2.5675': attribute type 10 has an invalid length.
[ 1014.942423][T25067] netlink: 'syz.2.5683': attribute type 10 has an invalid length.
[ 1014.976412][T25067] team0: Device ipvlan1 failed to register rx_handler
[ 1015.020867][T25072] syz.3.5684: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1015.093731][T25072] CPU: 0 PID: 25072 Comm: syz.3.5684 Not tainted syzkaller #0
[ 1015.101258][T25072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1015.111315][T25072] Call Trace:
[ 1015.114594][T25072]  <TASK>
[ 1015.117526][T25072]  dump_stack_lvl+0x18c/0x250
[ 1015.122207][T25072]  ? show_regs_print_info+0x20/0x20
[ 1015.127403][T25072]  ? load_image+0x420/0x420
[ 1015.131914][T25072]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1015.138338][T25072]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1015.144855][T25072]  warn_alloc+0x246/0x340
[ 1015.149193][T25072]  ? stack_trace_save+0xaa/0x100
[ 1015.154135][T25072]  ? zone_watermark_ok_safe+0x230/0x230
[ 1015.159686][T25072]  ? kasan_set_track+0x5f/0x70
[ 1015.164449][T25072]  ? kasan_set_track+0x4e/0x70
[ 1015.169207][T25072]  ? __kasan_kmalloc+0x8f/0xa0
[ 1015.173968][T25072]  ? xsk_init_queue+0xad/0x100
[ 1015.178733][T25072]  ? xsk_setsockopt+0x4c9/0x750
[ 1015.183583][T25072]  ? do_sock_setsockopt+0x175/0x1a0
[ 1015.188791][T25072]  ? __x64_sys_setsockopt+0x182/0x200
[ 1015.194163][T25072]  __vmalloc_node_range+0x129/0x1320
[ 1015.199499][T25072]  ? free_vm_area+0x50/0x50
[ 1015.204015][T25072]  vmalloc_user+0x74/0x80
[ 1015.208345][T25072]  ? xskq_create+0xbf/0x170
[ 1015.212852][T25072]  xskq_create+0xbf/0x170
[ 1015.217185][T25072]  xsk_init_queue+0xad/0x100
[ 1015.221784][T25072]  xsk_setsockopt+0x4c9/0x750
[ 1015.226471][T25072]  ? xsk_poll+0x670/0x670
[ 1015.230808][T25072]  ? __fget_files+0x28/0x460
[ 1015.235398][T25072]  ? aa_sock_opt_perm+0x74/0x100
[ 1015.240344][T25072]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[ 1015.245892][T25072]  ? security_socket_setsockopt+0x7e/0xa0
[ 1015.251610][T25072]  ? xsk_poll+0x670/0x670
[ 1015.255950][T25072]  do_sock_setsockopt+0x175/0x1a0
[ 1015.260987][T25072]  ? __fdget+0x180/0x210
[ 1015.265236][T25072]  __x64_sys_setsockopt+0x182/0x200
[ 1015.270471][T25072]  do_syscall_64+0x55/0xb0
[ 1015.274885][T25072]  ? clear_bhb_loop+0x40/0x90
[ 1015.279558][T25072]  ? clear_bhb_loop+0x40/0x90
[ 1015.284232][T25072]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1015.290121][T25072] RIP: 0033:0x7f4fd499e0d9
[ 1015.294530][T25072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1015.314140][T25072] RSP: 002b:00007f4fd5928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1015.322561][T25072] RAX: ffffffffffffffda RBX: 00007f4fd4c25fa0 RCX: 00007f4fd499e0d9
[ 1015.330562][T25072] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005
[ 1015.338538][T25072] RBP: 00007f4fd4a35024 R08: 0000000000000004 R09: 0000000000000000
[ 1015.346528][T25072] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[ 1015.354512][T25072] R13: 00007f4fd4c26038 R14: 00007f4fd4c25fa0 R15: 00007ffc3fa26f08
[ 1015.362504][T25072]  </TASK>
[ 1015.397256][T25072] Mem-Info:
[ 1015.400662][T25072] active_anon:28384 inactive_anon:0 isolated_anon:0
[ 1015.400662][T25072]  active_file:18336 inactive_file:40329 isolated_file:0
[ 1015.400662][T25072]  unevictable:768 dirty:189 writeback:25
[ 1015.400662][T25072]  slab_reclaimable:11068 slab_unreclaimable:96572
[ 1015.400662][T25072]  mapped:33488 shmem:17811 pagetables:567
[ 1015.400662][T25072]  sec_pagetables:0 bounce:0
[ 1015.400662][T25072]  kernel_misc_reclaimable:0
[ 1015.400662][T25072]  free:1303852 free_pcp:10660 free_cma:0
[ 1015.613440][T25072] Node 0 active_anon:113336kB inactive_anon:0kB active_file:73344kB inactive_file:161116kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119952kB dirty:756kB writeback:0kB shmem:69708kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10576kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no
[ 1015.693464][T25072] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1015.806482][T25072] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1015.844748][T25072] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1015.874192][T25072] Node 0 DMA32 free:1306712kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:107596kB inactive_anon:0kB active_file:73344kB inactive_file:160292kB unevictable:1536kB writepending:756kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:28932kB local_pcp:10724kB free_cma:0kB
[ 1015.957504][T25072] lowmem_reserve[]: 0 0 0 0 0
[ 1015.986361][T25072] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[ 1016.063247][T25072] lowmem_reserve[]: 0 0 0 0 0
[ 1016.068147][T25072] Node 1 Normal free:3891572kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21344kB local_pcp:11432kB free_cma:0kB
[ 1016.144437][T25072] lowmem_reserve[]: 0 0 0 0 0
[ 1016.162199][T25072] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1016.225803][T25072] Node 0 DMA32: 13*4kB (UME) 370*8kB (UME) 304*16kB (UME) 363*32kB (UM) 1085*64kB (UM) 445*128kB (UME) 97*256kB (UM) 31*512kB (UME) 25*1024kB (UME) 12*2048kB (UME) 263*4096kB (UM) = 1314020kB
[ 1016.262151][T25072] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1016.296121][T25072] Node 1 Normal: 195*4kB (UME) 57*8kB (UME) 44*16kB (UME) 39*32kB (UME) 20*64kB (UE) 4*128kB (UME) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (UM) = 3891572kB
[ 1016.394837][T25072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1016.413487][T25072] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1016.470116][T25072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1016.510625][T25072] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1016.540738][T25072] 70049 total pagecache pages
[ 1016.571976][T25072] 0 pages in swap cache
[ 1016.584701][T25072] Free swap  = 124428kB
[ 1016.601660][T25072] Total swap = 124996kB
[ 1016.617003][T25072] 2097051 pages RAM
[ 1016.624681][T25072] 0 pages HighMem/MovableOnly
[ 1016.629608][T25072] 416958 pages reserved
[ 1016.645182][T25072] 0 pages cma reserved
[ 1016.977288][T25113] ��
: port 1(ip6gretap0) entered blocking state
[ 1016.994927][T25113] ��
: port 1(ip6gretap0) entered disabled state
[ 1017.019813][T25113] ip6gretap0: entered allmulticast mode
[ 1017.036684][T25113] ip6gretap0: entered promiscuous mode
[ 1017.293906][T25124] mac80211_hwsim hwsim69 wlan1: entered promiscuous mode
[ 1017.805733][T25135] netlink: 'syz.2.5704': attribute type 10 has an invalid length.
[ 1017.828519][T25135] team0: Device ipvlan1 failed to register rx_handler
[ 1018.484071][T25154] bridge_slave_0: left allmulticast mode
[ 1018.489821][T25154] bridge_slave_0: left promiscuous mode
[ 1018.520008][T25154] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1018.987256][T25161] netlink: 'syz.0.5709': attribute type 27 has an invalid length.
[ 1019.073646][T25161] netlink: 'syz.0.5709': attribute type 4 has an invalid length.
[ 1019.086125][T25161] __nla_validate_parse: 2 callbacks suppressed
[ 1019.086144][T25161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5709'.
[ 1019.322875][T25171] netlink: 'syz.3.5713': attribute type 10 has an invalid length.
[ 1019.482852][T25171] team0: Port device geneve1 added
[ 1019.550954][T25175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5715'.
[ 1019.750829][T25189] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.5717'.
[ 1019.816111][T25188] netlink: 201572 bytes leftover after parsing attributes in process `syz.2.5717'.
[ 1021.439459][T25231] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5730'.
[ 1022.177379][T25257] mac80211_hwsim hwsim69 wlan1: left promiscuous mode
[ 1022.532593][T25246] syzkaller0: entered promiscuous mode
[ 1022.594578][T25246] syzkaller0: entered allmulticast mode
[ 1023.143647][T25279] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5748'.
[ 1025.264423][T25284] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5749'.
[ 1028.414946][T25362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5773'.
[ 1028.551066][T25366] b��Y��4��`Ҙ: renamed from lo
[ 1028.737664][T25378] netlink: 'syz.0.5777': attribute type 29 has an invalid length.
[ 1028.746022][T25378] netlink: 'syz.0.5777': attribute type 29 has an invalid length.
[ 1028.757969][T25378] netlink: 'syz.0.5777': attribute type 29 has an invalid length.
[ 1028.774900][T25379] netlink: 'syz.3.5776': attribute type 10 has an invalid length.
[ 1028.881118][T25379] team0: Device hsr_slave_0 failed to register rx_handler
[ 1029.916171][T25398] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5784'.
[ 1030.621479][   T51] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[ 1031.368585][T25429] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5795'.
[ 1031.667032][T25443] netlink: 'syz.2.5799': attribute type 6 has an invalid length.
[ 1031.693602][T25443] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5799'.
[ 1031.758011][T25444] netlink: 'syz.2.5799': attribute type 6 has an invalid length.
[ 1031.793345][T25444] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5799'.
[ 1031.835210][T25447] netlink: 'syz.1.5800': attribute type 29 has an invalid length.
[ 1031.864546][T25447] netlink: 'syz.1.5800': attribute type 29 has an invalid length.
[ 1031.902439][T25447] netlink: 'syz.1.5800': attribute type 29 has an invalid length.
[ 1031.936835][T25447] netlink: 'syz.1.5800': attribute type 29 has an invalid length.
[ 1031.961217][T25447] tap0: tun_chr_ioctl cmd 1074820166
[ 1032.327350][T25451] team0 (unregistering): Port device team_slave_0 removed
[ 1032.396247][T25451] team0 (unregistering): Port device team_slave_1 removed
[ 1032.421126][T25451] team0 (unregistering): Port device bond0 removed
[ 1032.476905][T25451] team0 (unregistering): Port device macvlan0 removed
[ 1032.520245][T25451] team0 (unregistering): Port device geneve1 removed
[ 1032.591542][T25451] team0 (unregistering): Port device wlan1 removed
[ 1032.860193][T25464] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5805'.
[ 1032.916809][T25464] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5805'.
[ 1032.948125][T25468] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5806'.
[ 1033.004620][T25468] team0: Port device team_slave_0 removed
[ 1033.010846][T25468] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[ 1034.320996][T25495] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5813'.
[ 1034.689721][T25497] validate_nla: 5 callbacks suppressed
[ 1034.689739][T25497] netlink: 'syz.1.5816': attribute type 5 has an invalid length.
[ 1034.955149][T25517] mac80211_hwsim hwsim61 wlan1: entered allmulticast mode
[ 1035.314144][T25531] netlink: 'syz.3.5826': attribute type 22 has an invalid length.
[ 1035.571203][T25544] netlink: 'syz.2.5830': attribute type 21 has an invalid length.
[ 1035.614366][T25544] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5830'.
[ 1035.708766][T25544] syzkaller1: tun_chr_ioctl cmd 2147767521
[ 1036.058224][T25556] netlink: 'syz.1.5834': attribute type 10 has an invalid length.
[ 1036.075362][T25556] syz_tun: entered promiscuous mode
[ 1036.158182][T25556] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1036.293316][T21585] Bluetooth: hci1: command 0x0406 tx timeout
[ 1036.625818][T25573] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5840'.
[ 1036.664615][T25575] netlink: 'syz.3.5839': attribute type 15 has an invalid length.
[ 1036.672521][T25575] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.5839'.
[ 1036.827122][T25578] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5841'.
[ 1037.197612][T25587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5845'.
[ 1037.217876][T25587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5845'.
[ 1037.344704][T25587] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5845'.
[ 1037.598653][T25601] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode
[ 1037.623659][T25601] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode
[ 1037.804095][T25609] netlink: 'syz.2.5850': attribute type 21 has an invalid length.
[ 1037.843213][T25609] netlink: 'syz.2.5850': attribute type 6 has an invalid length.
[ 1038.039263][T25618] netlink: 'syz.2.5853': attribute type 16 has an invalid length.
[ 1038.053793][T25618] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5853'.
[ 1038.843872][T25641] netlink: 'syz.0.5860': attribute type 6 has an invalid length.
[ 1038.851791][T25641] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5860'.
[ 1040.986876][T25730] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5889'.
[ 1041.428228][T25754] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5899'.
[ 1041.717529][T25764] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5904'.
[ 1042.151909][T25766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5902'.
[ 1042.185303][T25766] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5902'.
[ 1042.247430][T25762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5902'.
[ 1042.298731][T25758] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5901'.
[ 1042.366189][T25762] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5902'.
[ 1042.664979][T25776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5908'.
[ 1042.696738][T25776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5908'.
[ 1043.083020][T25796] netlink: 'syz.3.5913': attribute type 21 has an invalid length.
[ 1045.171976][T25823] netlink: 'syz.3.5922': attribute type 10 has an invalid length.
[ 1045.183524][T25823] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5922'.
[ 1045.276122][T25827] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.5923'.
[ 1046.253378][T25848] syz.0.5931[25848] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1046.253638][T25848] syz.0.5931[25848] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1046.792016][T25864] __nla_validate_parse: 1 callbacks suppressed
[ 1046.792041][T25864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5935'.
[ 1047.918561][T25895] netlink: 'syz.3.5945': attribute type 21 has an invalid length.
[ 1049.760769][T25920] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5954'.
[ 1049.932990][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1049.942644][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1049.951868][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1049.961074][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1049.970272][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1049.979482][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1049.988672][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1049.997863][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1050.007038][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1050.016231][T25922] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1050.597404][T25931] bridge_slave_0: left allmulticast mode
[ 1050.612404][T25931] bridge_slave_0: left promiscuous mode
[ 1050.625802][T25931] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1053.209434][T25940] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5959'.
[ 1053.442661][T25956] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.5963'.
[ 1054.330043][T25956] syzkaller0: entered promiscuous mode
[ 1054.343310][T25956] syzkaller0: entered allmulticast mode
[ 1054.518570][T25978] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5970'.
[ 1054.696676][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.703399][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.599457][T25978] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5970'.
[ 1056.608716][T25982] netlink: 'syz.2.5971': attribute type 17 has an invalid length.
[ 1056.623165][T25982] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5971'.
[ 1056.646972][T25982] net_ratelimit: 3319 callbacks suppressed
[ 1056.646989][T25982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1056.880630][T25994] tap0: tun_chr_ioctl cmd 1074025677
[ 1056.903514][T25994] tap0: linktype set to 774
[ 1057.641217][T26006] netlink: 'syz.2.5977': attribute type 10 has an invalid length.
[ 1057.714739][T26006] syz_tun: entered promiscuous mode
[ 1057.806650][T26006] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[ 1060.010815][T26051] netlink: 'syz.0.5989': attribute type 9 has an invalid length.
[ 1060.269628][T26071] netlink: 'syz.2.5993': attribute type 21 has an invalid length.
[ 1060.416760][T26079] netlink: 'syz.2.5998': attribute type 3 has an invalid length.
[ 1060.424956][T26079] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5998'.
[ 1060.439864][T26082] netlink: 'syz.3.5996': attribute type 10 has an invalid length.
[ 1060.482486][T26082] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.5996'.
[ 1061.161698][T26086] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6000'.
[ 1061.473877][T26099] netlink: 'syz.3.6002': attribute type 19 has an invalid length.
[ 1061.581096][T26102] netlink: 'syz.2.6005': attribute type 3 has an invalid length.
[ 1061.593250][T26102] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6005'.
[ 1061.894072][T26120] netlink: 'syz.2.6009': attribute type 10 has an invalid length.
[ 1061.967799][T26117] netlink: 'syz.3.6010': attribute type 39 has an invalid length.
[ 1062.029970][T26124] netlink: 'syz.0.6011': attribute type 3 has an invalid length.
[ 1062.051828][T26124] netlink: 'syz.0.6011': attribute type 16 has an invalid length.
[ 1062.063212][T26124] netlink: 'syz.0.6011': attribute type 18 has an invalid length.
[ 1062.081433][T26124] netlink: 'syz.0.6011': attribute type 20 has an invalid length.
[ 1062.110989][T26124] netlink: 'syz.0.6011': attribute type 25 has an invalid length.
[ 1062.140484][T26123] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6010'.
[ 1062.632975][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.644467][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.655733][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.666923][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.677961][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.691490][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.704380][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.718067][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.729997][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1062.744141][T26135] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[ 1065.453254][T26148] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6017'.
[ 1065.555695][T26158] netlink: 'syz.1.6020': attribute type 6 has an invalid length.
[ 1065.573529][T26158] netlink: 'syz.1.6020': attribute type 1 has an invalid length.
[ 1065.606475][T26158] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.6020'.
[ 1067.394405][T26214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6039'.
[ 1067.777520][   T51] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4
[ 1068.436115][T26240] netlink: 'syz.0.6046': attribute type 33 has an invalid length.
[ 1068.513527][T26240] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6046'.
[ 1068.978186][T26257] tap0: tun_chr_ioctl cmd 2148553947
[ 1069.395443][T26270] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1072.226125][T26326] delete_channel: no stack
[ 1073.432872][T26370] netlink: 'syz.0.6086': attribute type 15 has an invalid length.
[ 1074.076090][T26378] netlink: 'syz.3.6087': attribute type 10 has an invalid length.
[ 1074.577345][T26378] team0: Device nlmon0 is of different type
[ 1075.792871][T26421] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6099'.
[ 1075.931378][T26423] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.6100'.
[ 1076.327100][T26438] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6105'.
[ 1076.520462][T26449] netlink: 'syz.2.6109': attribute type 9 has an invalid length.
[ 1076.533407][T26449] netlink: 399 bytes leftover after parsing attributes in process `syz.2.6109'.
[ 1076.659810][T26447] net_ratelimit: 950 callbacks suppressed
[ 1076.659923][T26447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1077.241172][T26472] netlink: 'syz.1.6115': attribute type 10 has an invalid length.
[ 1077.253262][T21585] Bluetooth: hci4: command 0x0406 tx timeout
[ 1078.639791][T26529] netlink: 'syz.2.6135': attribute type 2 has an invalid length.
[ 1078.658085][T26529] netlink: 'syz.2.6135': attribute type 8 has an invalid length.
[ 1078.679398][T26529] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6135'.
[ 1078.745071][T26537] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6137'.
[ 1078.801171][T26535] can: request_module (can-proto-0) failed.
[ 1078.879520][T26535] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6138'.
[ 1078.893590][T26535] bridge_slave_0: entered allmulticast mode
[ 1078.924481][T26535] netlink: 'syz.1.6138': attribute type 1 has an invalid length.
[ 1078.932513][T26535] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6138'.
[ 1079.209229][T26555] netlink: 'syz.1.6144': attribute type 20 has an invalid length.
[ 1079.218612][T26555] netlink: 'syz.1.6144': attribute type 21 has an invalid length.
[ 1079.231777][T26555] netlink: 'syz.1.6144': attribute type 23 has an invalid length.
[ 1079.240232][T26555] netlink: 'syz.1.6144': attribute type 25 has an invalid length.
[ 1079.249300][T26555] netlink: 'syz.1.6144': attribute type 27 has an invalid length.
[ 1079.257889][T26555] netlink: 'syz.1.6144': attribute type 28 has an invalid length.
[ 1079.266121][T26555] netlink: 'syz.1.6144': attribute type 29 has an invalid length.
[ 1079.277966][T26555] netlink: 'syz.1.6144': attribute type 30 has an invalid length.
[ 1079.287243][T26555] netlink: 'syz.1.6144': attribute type 20 has an invalid length.
[ 1079.298354][T26555] netlink: 'syz.1.6144': attribute type 21 has an invalid length.
[ 1079.530490][T26566] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.6148'.
[ 1079.692948][T26570] netlink: 399 bytes leftover after parsing attributes in process `syz.1.6150'.
[ 1080.621133][T26615] C: renamed from team_slave_0
[ 1081.307647][T26639] team0: Port device geneve1 added
[ 1081.593682][T26646] __nla_validate_parse: 2 callbacks suppressed
[ 1081.593719][T26646] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6174'.
[ 1082.077911][T26664] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6179'.
[ 1082.194830][T26670] netlink: 'syz.2.6182': attribute type 11 has an invalid length.
[ 1082.216363][T26670] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.6182'.
[ 1083.312539][T26700] C: renamed from team_slave_0 (while UP)
[ 1083.366942][T26700] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6191'.
[ 1085.826647][T26738] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6196'.
[ 1085.844306][T26738] bridge_slave_1: default FDB implementation only supports local addresses
[ 1086.233403][T26769] validate_nla: 261 callbacks suppressed
[ 1086.233420][T26769] netlink: 'syz.0.6211': attribute type 49 has an invalid length.
[ 1086.407240][T26775] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6215'.
[ 1086.440802][T26775] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6215'.
[ 1086.904406][T26776] syz.1.6212 (26776) used obsolete PPPIOCDETACH ioctl
[ 1087.517828][T26796] netlink: 'syz.3.6220': attribute type 10 has an invalid length.
[ 1087.544222][T26796] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6220'.
[ 1087.563307][T26796] openvswitch: netlink: Flow key attr not present in new flow.
[ 1087.666000][T26802] netlink: 'syz.2.6223': attribute type 10 has an invalid length.
[ 1087.849480][T26813] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6227'.
[ 1087.859294][T26813] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[ 1088.267347][T26830] netlink: 'syz.2.6234': attribute type 5 has an invalid length.
[ 1088.514505][T26841] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6236'.
[ 1088.555145][T26845] netlink: 'syz.1.6238': attribute type 6 has an invalid length.
[ 1088.601815][T26846] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.6236'.
[ 1088.613241][T26846] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.6236'.
[ 1088.649632][T26841] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.6236'.
[ 1088.696351][T26846] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.6236'.
[ 1088.799752][T26841] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6236'.
[ 1088.910547][T26846] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.6236'.
[ 1089.252410][T26871] netlink: 21 bytes leftover after parsing attributes in process `syz.2.6247'.
[ 1089.268574][T26871] ksmbd: Unknown IPC event: 0, ignore.
[ 1090.225807][T26876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1090.938074][T26899] netlink: 'syz.1.6256': attribute type 10 has an invalid length.
[ 1090.995174][T26899] ��
: port 2(hsr_slave_0) entered blocking state
[ 1091.001799][T26899] ��
: port 2(hsr_slave_0) entered disabled state
[ 1091.021554][T26899] hsr_slave_0: entered allmulticast mode
[ 1091.032974][T26899] hsr_slave_0: left allmulticast mode
[ 1091.039094][T26901] netlink: 'syz.2.6258': attribute type 4 has an invalid length.
[ 1091.063364][T26901] netlink: 'syz.2.6258': attribute type 20 has an invalid length.
[ 1091.628745][T26945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1091.636283][T26945] IPv6: NLM_F_CREATE should be set when creating new route
[ 1091.757951][T26948] netlink: 'syz.1.6273': attribute type 9 has an invalid length.
[ 1091.959061][T26956] netlink: 'syz.0.6276': attribute type 10 has an invalid length.
[ 1092.004129][T26956] 8021q: adding VLAN 0 to HW filter on device team0
[ 1092.148579][T26961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1092.155920][T26961] IPv6: NLM_F_CREATE should be set when creating new route
[ 1092.163226][T26961] IPv6: NLM_F_CREATE should be set when creating new route
[ 1092.170488][T26961] IPv6: NLM_F_CREATE should be set when creating new route
[ 1092.773374][T26983] netlink: 'syz.1.6285': attribute type 10 has an invalid length.
[ 1092.809968][T26983] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.198435][T27021] netlink: 'syz.0.6294': attribute type 29 has an invalid length.
[ 1093.208113][T27021] netlink: 'syz.0.6294': attribute type 29 has an invalid length.
[ 1093.537762][T27021] syzkaller0: entered promiscuous mode
[ 1093.553430][T27021] syzkaller0: entered allmulticast mode
[ 1093.659638][T27039] __nla_validate_parse: 5 callbacks suppressed
[ 1093.659657][T27039] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.6299'.
[ 1093.700338][T27039] netlink: 'syz.1.6299': attribute type 2 has an invalid length.
[ 1096.053735][T27041] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.6298'.
[ 1096.062941][T27041] bridge_slave_1: default FDB implementation only supports local addresses
[ 1096.497626][T27050] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6302'.
[ 1098.672859][T27084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1098.680163][T27084] IPv6: NLM_F_CREATE should be set when creating new route
[ 1098.687492][T27084] IPv6: NLM_F_CREATE should be set when creating new route
[ 1098.694759][T27084] IPv6: NLM_F_CREATE should be set when creating new route
[ 1098.846397][T27090] netlink: 'syz.3.6313': attribute type 2 has an invalid length.
[ 1098.865399][T27090] netlink: 'syz.3.6313': attribute type 8 has an invalid length.
[ 1098.883784][T27090] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6313'.
[ 1098.910293][T27090] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.6313'.
[ 1099.118414][T27082] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.6309'.
[ 1099.135041][T27090] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6313'.
[ 1099.153358][T27082] bridge_slave_1: default FDB implementation only supports local addresses
[ 1099.589680][T27104] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6317'.
[ 1099.789860][T27104] team0: Port device C removed
[ 1099.804454][T27104] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1099.920960][T27112] netlink: 'syz.1.6319': attribute type 21 has an invalid length.
[ 1099.947369][T27112] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6319'.
[ 1100.134611][T27121] netlink: 'syz.1.6322': attribute type 2 has an invalid length.
[ 1100.144294][T27124] netlink: 'syz.3.6321': attribute type 10 has an invalid length.
[ 1100.156843][T27121] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6322'.
[ 1100.545193][T27140] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6326'.
[ 1100.870430][T27146] netlink: 'syz.3.6327': attribute type 16 has an invalid length.
[ 1100.899909][T27146] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6327'.
[ 1101.144124][T27156] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6330'.
[ 1101.355214][T27161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1102.433752][T27200] netlink: 'syz.1.6344': attribute type 4 has an invalid length.
[ 1102.464696][T27200] netlink: 'syz.1.6344': attribute type 4 has an invalid length.
[ 1105.412979][T27206] netlink: 'syz.1.6346': attribute type 10 has an invalid length.
[ 1105.422598][T27206] __nla_validate_parse: 2 callbacks suppressed
[ 1105.422632][T27206] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6346'.
[ 1105.438079][T27210] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6348'.
[ 1105.516664][T27216] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.6348'.
[ 1105.793858][T27225] netlink: 'syz.0.6353': attribute type 21 has an invalid length.
[ 1105.813379][T27225] netlink: 'syz.0.6353': attribute type 1 has an invalid length.
[ 1105.821365][T27225] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6353'.
[ 1106.145425][T27238] �: renamed from bond_slave_1 (while UP)
[ 1106.190276][T27237] netlink: 'syz.2.6357': attribute type 3 has an invalid length.
[ 1106.211000][T27237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6357'.
[ 1106.480217][T27251] netlink: 'syz.3.6361': attribute type 4 has an invalid length.
[ 1106.507400][T27251] netlink: 'syz.3.6361': attribute type 16 has an invalid length.
[ 1106.548896][T27251] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6361'.
[ 1107.538121][T27291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6374'.
[ 1107.715858][T27296] netlink: 'syz.1.6375': attribute type 1 has an invalid length.
[ 1107.986497][T27298] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6377'.
[ 1108.357246][T27302] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6380'.
[ 1108.512667][T27308] netlink: 'syz.2.6382': attribute type 2 has an invalid length.
[ 1108.570693][T27308] netlink: 'syz.2.6382': attribute type 1 has an invalid length.
[ 1108.583847][T27309] netlink: 'syz.3.6381': attribute type 3 has an invalid length.
[ 1108.601249][T27308] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6382'.
[ 1118.350831][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1118.358117][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1132.894361][T21585] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1132.913336][T21585] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1132.922017][T21585] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1132.934511][T21585] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1132.942322][T21585] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1132.950211][T21585] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1133.103799][T21585] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1133.114392][T21585] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1133.123277][T21585] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1133.139523][T21585] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1133.148758][T21585] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1133.158970][T21585] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1133.293820][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1133.308681][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1133.317629][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1133.337720][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1133.345606][   T51] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1133.353117][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1133.420011][T21585] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1133.434289][T21585] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1133.442996][T21585] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1133.451810][T21585] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1133.460482][T21585] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1133.469526][T21585] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1135.013425][T21585] Bluetooth: hci5: command tx timeout
[ 1135.253879][T21585] Bluetooth: hci6: command tx timeout
[ 1135.413470][T21585] Bluetooth: hci7: command tx timeout
[ 1135.493449][T21585] Bluetooth: hci8: command tx timeout
[ 1137.093517][T21585] Bluetooth: hci5: command tx timeout
[ 1137.333608][T21585] Bluetooth: hci6: command tx timeout
[ 1137.493242][T21585] Bluetooth: hci7: command tx timeout
[ 1137.573232][T21585] Bluetooth: hci8: command tx timeout
[ 1143.750925][   T51] Bluetooth: hci6: command tx timeout
[ 1143.756403][   T51] Bluetooth: hci7: command tx timeout
[ 1143.761802][   T51] Bluetooth: hci8: command tx timeout
[ 1143.768234][T21585] Bluetooth: hci5: command tx timeout
[ 1145.833718][T27338] Bluetooth: hci5: command tx timeout
[ 1145.839177][T27338] Bluetooth: hci8: command tx timeout
[ 1145.844662][T27338] Bluetooth: hci7: command tx timeout
[ 1145.850064][T27338] Bluetooth: hci6: command tx timeout
[ 1192.293398][T27338] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1192.305764][T27338] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1192.319673][T27338] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1192.327893][T27338] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1192.336209][T27338] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1192.343849][T27338] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1192.394121][T21585] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1192.408394][T21585] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1192.416955][T21585] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1192.427042][T21585] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1192.436140][T21585] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1192.443956][T21585] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1193.532806][ T5781] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[ 1193.543527][ T5781] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[ 1193.553905][ T5781] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[ 1193.562086][ T5781] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[ 1193.573291][ T5781] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[ 1193.582279][ T5781] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[ 1193.663801][T21585] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[ 1193.674397][T21585] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[ 1193.682924][T21585] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[ 1193.692478][T21585] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[ 1193.700477][T21585] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[ 1193.708338][T21585] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[ 1194.453407][T21585] Bluetooth: hci9: command tx timeout
[ 1194.533583][T21585] Bluetooth: hci10: command tx timeout
[ 1197.977800][T21585] Bluetooth: hci11: command tx timeout
[ 1197.984330][T21585] Bluetooth: hci12: command tx timeout
[ 1197.990255][T21585] Bluetooth: hci9: command tx timeout
[ 1197.995804][T21585] Bluetooth: hci10: command tx timeout
[ 1201.059921][ T5781] Bluetooth: hci10: command tx timeout
[ 1201.065553][ T5781] Bluetooth: hci9: command tx timeout
[ 1201.070960][ T5781] Bluetooth: hci12: command tx timeout
[ 1201.079268][ T5781] Bluetooth: hci11: command tx timeout
[ 1203.093941][ T5781] Bluetooth: hci12: command tx timeout
[ 1203.099479][ T5781] Bluetooth: hci9: command tx timeout
[ 1203.109519][T27338] Bluetooth: hci10: command tx timeout
[ 1203.116490][T21585] Bluetooth: hci11: command tx timeout
[ 1205.174014][T27356] Bluetooth: hci12: command tx timeout
[ 1205.179579][T21585] Bluetooth: hci11: command tx timeout
[ 1208.278766][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[ 1208.289681][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[ 1213.573111][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1213.580183][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P27305/1:b..l
[ 1213.588741][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=134561, q=1594 ncpus=2)
[ 1213.596630][    C1] task:syz.3.6381      state:R  running task     stack:22696 pid:27305 ppid:23619  flags:0x00004006
[ 1213.608352][    C1] Call Trace:
[ 1213.611651][    C1]  <TASK>
[ 1213.614584][    C1]  __schedule+0x15ae/0x4660
[ 1213.619098][    C1]  ? trace_call_bpf+0xc3/0x6c0
[ 1213.623867][    C1]  ? __bpf_trace_bpf_trace_printk+0x100/0x100
[ 1213.630070][    C1]  ? asan.module_dtor+0x20/0x20
[ 1213.634913][    C1]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1213.641058][    C1]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 1213.647030][    C1]  ? perf_trace_preemptirq_template+0x269/0x330
[ 1213.653260][    C1]  ? preempt_schedule_irq+0xb4/0x150
[ 1213.658537][    C1]  preempt_schedule_irq+0xbf/0x150
[ 1213.663642][    C1]  ? preempt_schedule_notrace+0x110/0x110
[ 1213.669353][    C1]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[ 1213.675166][    C1]  irqentry_exit+0x67/0x70
[ 1213.679581][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1213.685572][    C1] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0
[ 1213.691552][    C1] Code: 8a e8 f2 53 3c 09 65 66 8b 05 ba eb b0 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 56 16 3b 00 fb 65 8b 05 86 eb b0 7e <85> c0 75 05 e8 35 d0 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00
[ 1213.711245][    C1] RSP: 0018:ffffc9000335fa00 EFLAGS: 00000286
[ 1213.717389][    C1] RAX: 0000000080000000 RBX: 0000000000000200 RCX: 846ce25ad9e0a600
[ 1213.725345][    C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0
[ 1213.733324][    C1] RBP: ffffc9000335fa90 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5
[ 1213.741288][    C1] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffffffff88bf0e64
[ 1213.749247][    C1] R13: ffffc9000335fd00 R14: dffffc0000000000 R15: 1ffff9200066bf40
[ 1213.757221][    C1]  ? bpf_test_run+0x174/0x870
[ 1213.761899][    C1]  ? _local_bh_enable+0xa0/0xa0
[ 1213.766735][    C1]  ? __asan_memset+0x22/0x40
[ 1213.771314][    C1]  ? bpf_probe_read_kernel+0x67/0x70
[ 1213.776584][    C1]  ? bpf_test_run+0x174/0x870
[ 1213.781248][    C1]  bpf_test_run+0x3dd/0x870
[ 1213.785745][    C1]  ? lock_chain_count+0x20/0x20
[ 1213.790582][    C1]  ? bpf_test_run+0x174/0x870
[ 1213.795241][    C1]  ? dst_hold+0x70/0x70
[ 1213.799389][    C1]  ? convert___skb_to_skb+0x3d/0x590
[ 1213.804688][    C1]  bpf_prog_test_run_skb+0xdbb/0x18f0
[ 1213.810060][    C1]  ? cpu_online+0x60/0x60
[ 1213.814400][    C1]  bpf_prog_test_run+0x31f/0x390
[ 1213.819330][    C1]  __sys_bpf+0x49d/0x890
[ 1213.823647][    C1]  ? bpf_link_show_fdinfo+0x390/0x390
[ 1213.829011][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1213.835159][    C1]  __x64_sys_bpf+0x7c/0x90
[ 1213.839564][    C1]  do_syscall_64+0x55/0xb0
[ 1213.843965][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1213.848627][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1213.853289][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1213.859167][    C1] RIP: 0033:0x7f4fd499e0d9
[ 1213.863565][    C1] RSP: 002b:00007f4fd5928028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1213.871969][    C1] RAX: ffffffffffffffda RBX: 00007f4fd4c25fa0 RCX: 00007f4fd499e0d9
[ 1213.879930][    C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a
[ 1213.887886][    C1] RBP: 00007f4fd4a35024 R08: 0000000000000000 R09: 0000000000000000
[ 1213.895840][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1213.903797][    C1] R13: 00007f4fd4c26038 R14: 00007f4fd4c25fa0 R15: 00007ffc3fa26f08
[ 1213.911766][    C1]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)