last executing test programs:

12m25.731525735s ago: executing program 2 (id=101):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0xb, 0xe, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='P', &(0x7f0000000740), 0x4af, r0}, 0x38) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=""/6, 0x2}, 0x20) (async)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f00000001c0)='./file0\x00', r3}, 0x18) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r3}, 0x0, &(0x7f0000000180)='%ps    \x00'}, 0x20) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x8, 0x0, 0x0, 0x6, 0x0, 0xa, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r4 = socket$kcm(0xa, 0x2, 0x0)
close(r4) (async)
r5 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x29, 0x23, &(0x7f0000000040), 0xcf)
setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], &(0x7f00000007c0), <r7=>0x0, 0x9a, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000340), 0x8, 0x6d, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000400)='GPL\x00', 0x1a43, 0x9b, &(0x7f0000000580)=""/155, 0x40f00, 0x6a, '\x00', 0x0, @xdp=0x25, r1, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x9, 0xffff, 0x7}, 0x10, r7, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, <r8=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r8, 0x4) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xdcdb940f3abe425c, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000200), 0x0}, 0x20)

12m25.352910935s ago: executing program 2 (id=113):
syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/cgroup\x00')
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x485, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x800000000000004}, 0x800, 0x0, 0x0, 0x0, 0x8, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xd74e, '\x00', 0x0, r1, 0x2, 0x4}, 0x50)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000340)=r3, 0x4) (async)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000033000000b7030000000000008500000008000000bf09000000000000b60904000000000065000600090000001801000020646c2500000000002020207b9af8ff000000002d9a00000000000034090000f8ffffffb702000008000000b70300000000dd0015000000060000003d93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m25.127457126s ago: executing program 2 (id=106):
socket$kcm(0xa, 0x2, 0x88)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0xa, 0x3, 0x106)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000080), &(0x7f00000002c0)=r3}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x80)

12m22.107878148s ago: executing program 2 (id=108):
perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = syz_clone(0x800, &(0x7f0000000300)="719297211ada89d0933c080381de8ef1c8f30dbac5d9fa9f2c37657d55effeda859c896d92bbf5e3c1ac984e4381330d8d534f89e63f68d2a7ec32066f8caa7199688ef7321f7c784d0e7f0142fbfea647009c7e5050", 0x56, 0x0, 0x0, &(0x7f0000000900)="6e5c52dc4d175625fc91663ab5538c79329d927ed633d68811b4648250f174db2a6386f1a8d0cff64329dade4466b4676d5cbdb5f9af471b0e512c3098b48c44c8530d874e7971e143675f930ad3b57287fced25ae086f636574393e31ada5894c4e5992ab1d")
perf_event_open(&(0x7f0000000280)={0x2, 0xd1, 0x2, 0xa, 0x1, 0x3, 0x0, 0x0, 0x40c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x401, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x10c80e, 0xe628, 0xe94c, 0x2, 0x10, 0x2, 0x5, 0x0, 0x10000, 0x0, 0xf7f7}, r1, 0x0, r0, 0x8)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r0, 0x0, 0x3, &(0x7f0000000140)='[-\x00'}, 0x30)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804)
r2 = socket$kcm(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r3}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r7 = perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r7, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000000c0), 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0)

12m20.452544992s ago: executing program 2 (id=116):
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x2, 0x2, 0xc, 0x4, 0x0, 0x6, 0x80, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0xb}, 0x10082, 0x5, 0x18, 0x3, 0x0, 0x4, 0xc0a4, 0x0, 0x3, 0x0, 0x7fffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='+%\x00')
ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffffc)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000100))
r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000180)=0xffffffffffffffff, 0x12)
r2 = perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x56, 0x4, 0x6, 0x8, 0x0, 0x7, 0xb020, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x45a, 0x2, @perf_bp={&(0x7f00000001c0), 0xf15e7ad80a79ccfb}, 0x14800, 0x8, 0x10001, 0x1, 0x9, 0x2, 0x2, 0x0, 0x7fffffff, 0x0, 0x7f}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xd)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000280)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xb, [@restrict={0xa, 0x0, 0x0, 0xb, 0x1}, @enum64={0x7, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xe, 0xfff, 0x2}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x5}, @const={0x5}]}, {0x0, [0x30, 0x61, 0x5f, 0x61, 0x5f, 0x5f, 0x0, 0x61, 0x1e]}}, &(0x7f0000000540)=""/254, 0x5f, 0xfe, 0x1, 0x5, 0x10000}, 0x28)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0xf, &(0x7f0000000680)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000700)='GPL\x00', 0x7ff, 0x46, &(0x7f0000000740)=""/70, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x5, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000880)=[{0x3, 0x2, 0xa, 0x4}, {0x1, 0x4, 0x2, 0x6}, {0x1, 0x2, 0x6}], 0x10, 0x2}, 0x94)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = gettid()
r8 = gettid()
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)={<r9=>0xffffffffffffffff})
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f00000009c0)='syz0\x00', 0x200002, 0x0)
r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a00)='cpuset.mem_exclusive\x00', 0x2, 0x0)
r12 = getpid()
sendmsg$unix(r3, &(0x7f0000000b80)={&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="d7081ad75457dac0d9ecf8e1fa8c379a8f0b40ff91b2c4ff6f3b09f999c3b94a1750b63b130587609257c7015ac91d45137d2f0715cc3f3941921d8920ed6ccb084bc0b3abc25a8234446483f6dd0727790ef5c7fbb52a559d", 0x59}, {&(0x7f0000000400)="0e293a8afcff482ab2cabad7877a9f915da5b95c172c8e7f20406df134fcb4858806931cf57ef47126ab8cb20ec497e6340fb39a628c1e715d5ebcf347ea1e6ce7c44b5dd9297eb3e8a6ec1394f5674e7b51829872915aca086712f556b4f8885944bc37515e9b60b92b72829558b55d92ef88642ad29ab081f88f65d37e9c", 0x7f}], 0x2, &(0x7f0000000a40)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r4, r5, r0, r2, r2, r6]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r0, r2, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @cred={{0x1c, 0x1, 0x2, {r8, 0xee00, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r9, r2]}}, @rights={{0x18, 0x1, 0x1, [r0, r10]}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, r2, r1, r0, r1, r0, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, 0xee00}}}], 0x140}, 0x44041000)
r13 = openat$cgroup_ro(r10, &(0x7f0000000bc0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r13, 0x400454d0, 0x34)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000dc0)={r2, 0x58, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0}}, 0x10)
r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0xc, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7c}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}, @alu={0x4, 0x1, 0xa, 0x2, 0x4, 0xffffffffffffffff, 0xfffffffffffffff4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000c80)='GPL\x00', 0x28, 0x59, &(0x7f0000000cc0)=""/89, 0x41000, 0x7a, '\x00', r14, 0x25, r4, 0x8, &(0x7f0000000e00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0xa, 0x4, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e80)=[r13, r13, r13, r13, r13, r11, r13, r13, 0x1, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x2, 0x4, 0x7, 0x5}], 0x10, 0x8}, 0x94)
r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@const={0xe}]}, {0x0, [0x5f, 0x5f, 0x61]}}, &(0x7f0000001000)=""/65, 0x29, 0x41, 0x0, 0xb739, 0x10000, @value=r13}, 0x28)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r16)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{0x1, <r17=>0xffffffffffffffff}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20)
r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x9, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff180b, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @generic={0x6, 0x4, 0x6, 0x800, 0x15929f91}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}]}, &(0x7f0000001140)='syzkaller\x00', 0x9, 0xa2, &(0x7f0000001180)=""/162, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0xa, 0xc}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0x10, 0xe, 0x183}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001380)=[r13, r13, r13, r13, r17], &(0x7f00000013c0)=[{0x4, 0x3, 0x10, 0x3}, {0x0, 0x4, 0xe}, {0x0, 0x1, 0xd, 0xa}], 0x10, 0xaed3}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000015c0)={@fallback=r17, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001500)=[0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001580)=[0x0, 0x0], <r19=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001600)={@cgroup, r18, 0x14, 0x2000, 0x0, @value=r13, @void, @void, @void, r19}, 0x20)

12m20.017445174s ago: executing program 2 (id=121):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2)
r2 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100)=r2, 0x12)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r4, 0x84, 0x19, &(0x7f0000000000), 0x8)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000b", @ANYBLOB="7fc393f0c5a4d6d1f004edf64500faa7f955437b134d97ea1a28cbd67a9603840d9e3029dc314bb27f961935", @ANYRES16=0x0], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c00b300b70000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

12m4.753906224s ago: executing program 32 (id=121):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = getpid()
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x2)
r2 = syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000100)=r2, 0x12)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
setsockopt$sock_attach_bpf(r4, 0x84, 0x19, &(0x7f0000000000), 0x8)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="b702000024000000bfa30000000000000703000000feffff7a0af0fff8bffffd79a4f0ff00000000b7060000ffffffff2d640500000000006502040001001f000404000001007d60b7030000000000006a0a00fefdff00008500000026000000b7000000000000009500000000000000c743a0c8e3ebbadc20e5a7efcc9ac1467fb2ea80dbcf8df265e1b40e4c8afd5c0c000000008da68076774bbcdb2c769937000090af27db5b56024db96bcbbbd2cb2000ce03000000000000007e357754508535766c80114604a86fe569b05614eab9297eb290a248a120c9c6e39f403ff065fd3052aae80675eeba68562eaeaea5fecf298ca20f274233106eab63ecf772de7b265040b6c50b7420b48a93fe94c756108afcd0b2eb78040000005f02a5a6474ae549070004000000001294fba0ed5020e6474ac921fee1f6d8ad6a80c0947cd6d4a561ced21a0b4a902be6af7ec2d1ba002e57f301000000000000000000000000100000aaf25343063e6581f9e6de14ad72e5ad84309f47f96a576cd20cef7ed951a73ea73d7c7f14e306f1f1d1377e57abb1af00f0077e9d0000b93eb0f2c6f8141e350dc68147e5958128d22d586270f9dba211bfff9c3709c9b134625d3d2369f516a49eeeb1a662c8dfb875bdf5c6ba73cccdfacb202994c40d322717faff03323dce8a34ee0ca2cf61efb4b30000642735d6d482ba98d252f36c54333aab1aa736369392b9067665339820f5f1557b0bf7cc06a5a13c714e0b1a1f000000ff3283076cda3d0b1a2905cfc3d04f1db264b530abcbe44bc405f600807970727fb819afa1907228fa9e83433eedb4ac88d0285594ffb0d14c09d5c77f33702822b02488ea570204c8441ced81cacf945dcb2486c9e3600e916ae6307bd8325a442095bc9a8b0c95905979f34adddbb26f0d24425c8ab9d937d84b521914f92eed3d3e9de82942a952e86b567aff5bc2e3c1fcc00f618363df5d0d181ee8f4b8fd356c9eb365adc037e443820c05c5db16ff07a9cf471e2ebf91ab00a05f88c1cd55f8c81f5eb1f8d615ca27efb2193bb61665a1ce37f30c2efc9c3b5a4a5d95479fac471ba60fbd0e50225563cd37343d09da72472efc2b2877fbab12a891513e5f0763ae06c0610a2869747c143d75007606000000b2310e19ac58bf29d7f178d09a9f634a3ae492f54649589e3692768a0f3a082c5242c8fa7f01e0873c9c5c604108ad85950d8e08465fa1067ea8f383b3e7a7ddf5977d46f4bc38f914b4a496426d8468f9ba618b6b2218b50c8fc9efbce3ba799cf70de7e13be871aa7eb402e2b11f440361e18d4e334bfc6ae54e62e67a0338c756c544189e4519a029674e2a2bbbc7f6600000000000800000e5e30b70b198246d3a62660600000030a0af132e680510811d3ab71af5d98e2d3d928a749e8b9402d14655612bd58fb40b4625cb69bf6cea97b447f2d970d99100000000086000001b881afb2cc500003a73562af4878f75b4c98274eeb666aa1f5fcf91990cf0dcfef9540057b8a3fff2bc02c5941626d2015f414546e87835ba18e91017343e3dc6955fc6b9a25fe2a3dd8bab7f21beccba5493a164c663eceed401737c12c65804712236a9a29a43b1e27e9b6816f2328ea8423121f12b7b35aa721fef26934ccafde573bee5c33ef15309f43cbd5d61aa679a9c402d337ebf57a5eacb569401c1df7b9c45b09743c61d1db37f0000000000020000000000de00d23dd63b7761d7d6818db785d8ba13dc577fe61a68eb365de5661f43d4c789bb117a3d208ae44a38e7868dc32e132124ecf52327631b718b3157e218959156ff8e92b7e92bc275d2c9114547351a0d0f1370d13be0194b6cb68b03000000000000004f153bbc7f52861e4e5df0d19e4e40ac44cfda6f87807e5b5ed7072c04da88afd3d4b79f060e004a0e2f00b9e726ac75d2ac0691314c627e9a8a07bdd607919fd48f01ad6d2f7621d9a75b134f1bc25ed7c33d411a5baa4daa3add16afc502b2b7629541d722e91d631e5ffb9d4beb5aa5a2c4e490a5bd038c1817f0d4652a29353b05b16b3c5cf4538ba310b8cbc221af38ea842d4cb908bcd574f794459fd54b58c6a791e6df625a47bade4ba41ee014184395a479544619f749ff70088b0fd115077f7eff7c5a3315ca604d110df1c54407f191a78d8362e4dc6e1138391c2a65246779bb76c9f1daea4f085f38810edef6dd047937c231cba791a4e7713c5b3b0a0b6ba37db5016e02d114d714459d065a79609fea4efebad04eda001aac0e53dd094827453144fa419ee81823d00a90a9058ba740d2f4125377960604f521df5e325efe395a4e3b7ca8d01a8c1a7265a084e30ad10d412aee8170a7111d62473e7bd8f3d64fb7ebdd32aada331900000000000000000000000084ef49dd020000000000000000000000d9dcb285038ec38d5f4969ed0e98a71ac7bf8159a234833a5241722b2d24aa2fa4965d4eb7966fb27d118b6ef3308627e67d42f1041d5e92da28e0a7724ce715854775cbe06c5166f1dac0745f1373156a536cb6394c2c4473e2050cacf693fdf8e305080000001a901ecd90a5f53b8327a485557bc2a147b036477915e600000000034258ebbb6099b597d17ee2fc97ca850b8580b1337016a40566814594c13052b9d2b0741326825f19a244609ac04a0c29691a7c8f7a78c1a7590a293c561f304533c638ae635f5ce026f7fa034d8cfe0e11831d4829692beab26891ef583cfcb713a4d3a2d8b958c0875d7e4bdcf98802db086ebcbb9d82fa569a18f06facc2ffe1ea9ae4231e1e7a5dd7503faa2de7f898c97788c4b9c61c70ff92abdf7476cc351156d11c0ada7614f315f4c6cca119d16827d4e864f5a7a9b690272a510c451dc07f391309d02e31e53b2bf0b5f86e776b1bcfe6c85ccd7ddf8a9559d58bb5603895f265685f0400000000000000ccec1b0d45a47a89b8237cbbdab14e4ca6dc76b2c41e071b93a065c0f5aa718e1cfab29beea78a6bd9a3114f0f6f03160ec875b92be9a5862627b4bd99db2c08e4636e43f05f33535d5d1f9bb40e1fd8e5125a3d29b31dd94a6744bbc21722222b976089f073a4d3fcafc6d06518cf0c4fc6c8e3da0000000000000000000000007d3b60775243f2143d9f54804b11102cf0e4c641db1ba8bf75e46ab3a8fdece6562e7ebb3e407f3c7504dfa3da3aecbd49af3d1edeea11cc970416fadeedc8423bfdc85041ac4d8243a1130e6f4cb5bbfed9d095e18c98c7d690e4c491a7ddcd5635bc61dbed719ca28e8ca3f1fbbe588913ed057f1d6e34a79f4dc10df54d1993a5bc5f9ef6dbd339ee4b0b5764169f305e284ef82cc23e9366d4bc7eb45c7230b13433e5240657cb8eba33260147be8620b6d98cc48b000000000000000000000000c1ce872b18984f080100000000000000bd3fded92547d41809b398f36749083a147eb09ff1ed601bd36b873d3947fb223da647052528e0466cb917db7800f7c7000b593fca1903991cca1343882e3a1f60044f11c081dae4fc5bcf20efacdd2c577f4bcda2eea6f75a31dc90eebb6135b6fb824052181b0ad8a49ebf03ccf61d7e39bf6b0762d24d19796016301d1415b5110ba9df7f204aedb2a2e4e621c0553d312b309db67192f98ef7800000d629c04e216afc8fc66616bbf304e452373aa927c2ad6f5417f1b9bc322b802c1c42112a92a331cdc113b9ace3ff52ede7a853f9a89002ba070bac2f635a03db3375e5564f1a798bf9c0f8c72725d2eca9b0ec7e453d78ea20eca61530fe574299b393ca144adcb06108dfbb934065a87972739150a8752ac111c4d9062ccb95c54034fbdee131d94dfbaab1854d55665746fb7b47d25e54070b0d14c0a29c57bc4930075e1761913b036d43852c6df9f10e15105b2a18668298a3577943514db0dce953dcec62139ff3f16066efec5d8cbc0600000000007289be5883aab951ea67cf2ff691d05c1ea91dd569ed9897fe8d88a0a6977dc8955be17e8026aff11c61fa5cc76196c14233d597345253baa1537eb6962a3ce1fe5d5ab46938e8fb23fa7047bc59c4345e912585a9adb5fe2ff51b64a326321b594e3f2d339f4090bdae6b30b62064bacbc155d3c930576f506b093ca7c60957bdfdd6536baaa871cf6a603c736b78761e6463b8ac503e219cc3d98f649602ad24d5667368290ee926fba76ee482a201a03efece3b236f4ee2ffcd5d90d92a2f0c5cb2791add8279c491fa48c87f27c2f1e92988a6508c12f6b7755cc48eb10edafca92cb0260c72295a27a24846d3a2334bd60e94c0fd07e5db0a4964a7fc4e89f11a300510776934e87bb3c21394f46954a012b2a3b0760f1bad1dbd6b466e0000000000000000008e5f9004e01fe2b177c5f443d09de4ba8f72d534405f9e7807c864bbca5893376420e38cf47a3660a2ab17b20baa271aa9eaffc19b50f291f51a7cc935023382bd80d7bca313636f3aaa6b788b233097bd545d9bf9715fbf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10001}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e00000004000000080000000b", @ANYBLOB="7fc393f0c5a4d6d1f004edf64500faa7f955437b134d97ea1a28cbd67a9603840d9e3029dc314bb27f961935", @ANYRES16=0x0], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c00b300b70000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

23.722911773s ago: executing program 4 (id=3404):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000037c0615b000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
close(r1)
socket$kcm(0x2c, 0x3, 0x0) (async)
write$cgroup_devices(r1, 0x0, 0x0) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xffc, &(0x7f00000014c0)=""/4092, 0x0, 0x0, '\x00', r3}, 0x94)

23.491753565s ago: executing program 4 (id=3406):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB="00000000000000000044fa45492ce259687a89d4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r2}, 0xc)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100)
r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xee, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x8, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000580), &(0x7f00000005c0)=r3}, 0x20)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000040)=0x80000002, 0x12)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x800})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x19, 0x4, 0x4, 0x2, 0x10}, 0x50)
r8 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000040)=""/82, 0x52}, {&(0x7f00000047c0)=""/4042, 0xfca}, {&(0x7f0000001140)=""/227, 0xe3}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/143, 0x8f}, {&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/165, 0xa5}, {&(0x7f0000000c80)=""/249, 0xf9}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f0000000d80)=""/133, 0x85}], 0xa}, 0x2000)
recvmsg$kcm(r8, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

23.148821862s ago: executing program 1 (id=3408):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003840)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x3, [@datasec={0x1, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x4, 0x6}, {0x5, 0x2400, 0x6}, {0x5, 0x1, 0x7}, {0x4, 0x4, 0x1}, {0x4, 0x1, 0x9}], "d1df"}, @struct={0x8, 0x3, 0x0, 0x4, 0x0, 0x2, [{0x6, 0x5, 0x4f87}, {0x2, 0x3, 0x5}, {0x1, 0x0, 0x8}]}]}, {0x0, [0x2e]}}, &(0x7f0000002840)=""/4096, 0x97, 0x1000, 0x1, 0x4}, 0x28)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003900)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, [@alu={0x290ebd7d76307467, 0x1, 0x6, 0x0, 0x8, 0x80, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x1000, &(0x7f0000000900)=""/4096, 0x41000, 0x6, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003880)={0x0, 0x8, 0xb4e, 0x6b}, 0x10, 0x27fcb, r1, 0x3, 0x0, &(0x7f00000038c0)=[{0x1, 0x4, 0x4}, {0x2, 0x1, 0xe, 0xc}, {0x0, 0x1, 0x0, 0x2}], 0x10, 0x6}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002ffffff8100000081"], 0x50)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x16)
sendmsg(r2, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001)
sendmsg$sock(r2, &(0x7f0000002800)={0x0, 0x0, 0x0}, 0x4)

23.068576686s ago: executing program 0 (id=3409):
r0 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x1, 0x1ff}, 0x10000, 0x10000, 0x9e7, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f00000002c0)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000380)={[{0x0, 'rdma'}]}, 0x6)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0x0)

22.870661226s ago: executing program 0 (id=3411):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711209000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xa, 0x0, 0x41100, 0x2a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair(0x18, 0x0, 0x1, &(0x7f0000001780))
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) (async)
r3 = socket$kcm(0xa, 0x0, 0x3a) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000008000000020000000d"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080))
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r1], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9}, 0xfffffffffffffdf6)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) (async)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) (async)
r11 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r11, 0x114, 0x2, 0x0, 0x0)

22.257163977s ago: executing program 3 (id=3412):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000076f19157ccbdef968f6bd877523c0000003c00000005649cea934400000004000000e78a4e726a3acb749e816bbf000000070000000000000000ffff000b04fd00000000000002000085000000000900000000000000040000000700000002"], 0x0, 0x59, 0x0, 0x1}, 0x28)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1c, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYBLOB="6b087de050fd533fa39d5395452e0b8d790ffa4ff00632abde41c72bc83f912a8eb212f5f7a421150cb82e40d1bce87d2b6c2c35", @ANYRES16], &(0x7f0000000780)='syzkaller\x00', 0xefa8, 0xb6, &(0x7f0000000880)=""/182, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94)
close(r5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x2042)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg$unix(r0, 0x0, 0x2000)
r9 = socket$kcm(0x1e, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x89e1, &(0x7f0000000040))
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@fallback=r5, 0xffffffffffffffff, 0xb, 0x2000}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@fallback=r9, 0xffffffffffffffff, 0x4, 0x0, 0x0, @void, @value=r5}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', <r10=>0x0}, 0x30)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10, r5}, 0x18)
r12 = openat$cgroup_int(r11, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
write$cgroup_subtree(r12, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r10], 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="140004002e24000000000000", @ANYRES32=r10, @ANYRES64=0x0], 0x20)
socket$kcm(0x10, 0x2, 0x0)
syz_clone(0x0, 0x0, 0xffffffffffffffc8, 0x0, 0x0, 0x0)

22.19386775s ago: executing program 4 (id=3413):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xe6, &(0x7f0000000580)=""/230, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000340)=[{0x8, 0x4, 0xf, 0x9}, {0x3, 0x1, 0x4}, {0x3, 0x4, 0xd, 0x3}, {0x3, 0x3, 0xf, 0x7}, {0x5, 0x5, 0xc, 0x8}], 0x10, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000cfba00000000000008000000911162000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@o_path={&(0x7f00000003c0)='./file0\x00', r1, 0x4000, r0}, 0x18)

22.119624244s ago: executing program 4 (id=3414):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x62345fa1ea09a595, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000030000002300000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000006c0000e3ff"], 0x50)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740))
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7fff, 0x4}, 0x14030, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.051266727s ago: executing program 0 (id=3415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x7, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x80000, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7, 0x627ea, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x7, 0x0, 0x10, 0x800, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, &(0x7f0000000000), 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e05000000000000000000000000000008000000", @ANYRES32=0x1, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000003000200"/20], 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa71c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={&(0x7f0000001240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23004a)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(r6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf1, 0x7, 0x0, 0x0, 0x0, 0xb, 0x11509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)

21.99133859s ago: executing program 3 (id=3416):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0xa, 0x2, 0x3a) (async)
r0 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)
recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000c40)="d8000000100081044e81f782db44b904021d083909000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086dd673d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4000084)

21.969340021s ago: executing program 1 (id=3417):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c0", 0x2d}, {&(0x7f0000001980)="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", 0xfb}], 0x2}, 0x24000008)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51", 0x23}], 0x1}, 0x48100)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x80, 0x1035, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x808)
close(r4)
sendmsg$inet(r5, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
r6 = getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, r6, 0x1, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000001000007000000000000000085200000550000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

21.685497916s ago: executing program 0 (id=3418):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, &(0x7f0000000580)="7b8666ec39e7fedd46412a4c802e4807c5a3c5ead09ff29d413e8b0000000000000000000000000000676e88f14c72e9c070997334c2adf29cfe6a0d85677acab81eb6ab256258685e3ec00a16ad162c6dd107334ef9385288c7491d3a7593419a757ce50d1d9cef56907876caeb024888e3d0f4ecd9a8172c8876e64a36bf54c9965d292afeabff181e", 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
r1 = socket$kcm(0x23, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0xa, &(0x7f0000000180), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, 0x0)
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x48)
recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2000)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x20000020)
r3 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x200004}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}, {&(0x7f0000000380)="a7b8e3b0ff64c0d01e4bd05f1c19330362737c498a1f19c05bf712b55997af0b5d56c1f4be7ba320f2b850b593f99a63748d9c599713b436f24429f390669a4e58584f4756f6c2a67d6727e8cbfabbf489b13345140bb4caf677f3396f366a06175816e0e9e553f26e4222fd5faa34f8f78eee515016c51e3df85c7ec3e532028a41d1b8f75f32d2738b7dca7306702246071f9ccb1634907573b3509d83f527", 0xa0}, {&(0x7f0000000680)="9b85027377268d9fefe80ed71aa8a70f22b3f0e2988ab1bacded5072c89ec5559561c868fb880dd413450adaccb59ec5260031e77a99d50c39883d108d91954478bd79e5f27a68ac33d051a0a367c81203a7f788b55ecdfee5f94536e85f8fae8e613a3f8c09713a3c6c6f8e99ed9aa971aaac7fba1cc182e0b2c98feea1aea3e07e1f527e00ee3b58654d3bdf83a6a0f61789ae258adc0fde2b6efccb9f315b1d7415d9e6f7aa0dea111dfd18ac3e99a353", 0xb2}], 0x3}, 0x8050)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000", 0x17}], 0x1}, 0x0)
socket$kcm(0xf, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)

21.684708776s ago: executing program 4 (id=3419):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x80c0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x0, 0x2ee}, r2, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0xc03e)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x5f, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a19d76, 0x7, 0x9, 0x46, 0x2, 0x0, 0x80, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x88e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, r2, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000010000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f3ca1664fe2f3ced8416dc180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8070000001fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491d04aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291a76456ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124ee3df3a35e8014d6cb5fd6c054a10bb2146174c1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba5187fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4db5a5df9d62ea6d805dfce568b885a50ed8e2eaf8a932287a1d3bfac17774e58875a63b77e07298e4b4f515189c6fcac3cd35dac9240e633219bb6a5a25865e6ed8e16caa5406b56702afe0befcabbc9a2a772a1a087f0d633d457bceb695b2cba3a1a2daa2dda796373cc0fe0a53236d028fc1076bb746b2717c8b6052f58c91bb8cc19474ab9d4d2160773829f078727f6c684ca749136a7f46ca28b00bb4237695b409859a3cb7dbf298c7802264387811e20a0d78489eab0b0e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4}, 0x94)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f0000000000)='/proc/t/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee\x00\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2e0, 0x12c, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)
ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"})
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
socket$kcm(0x2, 0x6, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)

21.646330218s ago: executing program 3 (id=3420):
r0 = socket$kcm(0x2, 0x5, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000d40000007400000074000000047e0000010000000000000000000000004e00000400000000000000000000000000000000000000000000000000000000000000000000000000000d9b0000000000000000000000000000000000080000000000000000000000000000000000000ffffffffff30001000000000000000000008b1102643be4c3c863c3dd59168513242f6b92b194b64c79b92a58c64e1d01751429e15e79cc44b94f26571b0d086b96bd4769e690d60d73ac7e648de0753bfdd85c33f86d5ffd05be18e37e3b6d6aaf176943a60500f07063e18194fe64362536219e95f9a5ba4cd966b1b7216bb5e4b1a07f5c3b8539457d664cf28d6b871689e62930c9b06ca5a3380de08adf7d827b7c6230f4232d0dc656775d8769dc91cf75938c9443383ae332196c28bb7f81917d356ebd893952dccecdb66448cafe164fba7b65609cf5779b54fb5399a0c476f8685c087290a500000000000000252508751ebc85e9ce7e6664f82cc1df3cf804f5d507dc7af24138e42b1f9549c993ce8c4a478084651b179db9b0d58faf4600cec8b142cbc731bde7a2955fb20000000000000000e1112ee06f895b252c837725b627586d8d55a86de269dce5c0758fa4c639a5a83b29f3ece7d0e69f96881cc4b75142c149a086a1e11eeefc88ecbb17d2d0eb2ae1cc3863041d44cb08a93def1308e774efe0264fc1615407cfacd86355e5a1ef476f59ef801942012aabcb3e14b0cd2b1bbe1a8bb8dcfeb99761b3d6e10cb67c586e707be2ab1bbcc0422e3c3eb258e11c84c64312a76b7103d09429a9c3"], &(0x7f0000000400)=""/97, 0x90, 0x61, 0x1, 0x1}, 0x28)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)

21.594351451s ago: executing program 1 (id=3421):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x80000001, 0x440b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x767b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x2e, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)="c6", 0xffffff39}], 0x1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x541b, &(0x7f0000000340)={'syzkaller1\x00', @broadcast})
sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000180)="f50729edab5edad6e0db2f43034a57b0c7f7ebf213a7176641ecf355291bf246856b1e899641a0554bbdbc618904e86afebccf45b514e61a2a4f35cc1c9322fcb71ec3f6464fc104a84e2e704f879a4311816b6d2da7d7c7efe2a7af0e215fbe07f0fe576f89ea6352cf7c2ce7acea5d1f5960d5e3ff8ea5b40b2890c86341a00af62b3a8875080bccd1945a00b20b87ee9b794f3797faa937727f4a991f68b876e9b6b5", 0xa4}, {&(0x7f0000000240)="b20b32453c73286ced4dc65ee01e61ce29524ea655ca8331a55a9aecf16314d4eeef8ce2ac18746e8bd19bc264", 0x2d}, {&(0x7f00000002c0)="dca6f9846a5280129e029e316981a614a60eba01defe285d1a46f63bdcaa265018187dfcfb71cc84b0ed0374167dfd241c75af5137c735998115bea4e89381fb3901b1910b3a6317975af59125c63dfcf5e0fd9d52f4cfddfe7c3d03e796fc02a896273c6bfb667d0757254f73cd9cc02da0f318e764b25571804a4881d17c6f90a45bb2aa1b3ef468dd5fc1e54e00baa1985408a2d5f2e1159364485bb74728d5900911b6af71f4d9822a6ba881db1888811dead23495dc07e5f0532af96a80e68726e8d3fcc2a99a92160226", 0xcd}, {&(0x7f00000003c0)="4a88daf23dfae5e84d59d63cc62b64951347a3c0aa0d6c7076dfbc6071050e5b19f0d28581c99321c19aa47783bdd65c13ae6323df05aa395495cc1939985f02e844eef402d7baf4e93c28f031bcd06aac9452c8c0e070769d7f07a59bba99ae77a86e1e4d6a133f2186b0ccc0fe7a357b7e4a16916f8305ff9b821f9b26d11ecdd8e7c499195d8f72e017076d224ee10c1416b82228452222388d1a67421be4d07216d0db4a9051528fd4216e4f7f30a13811fabdcc6a574a78aa38f4dfab52506cd39fb5f572eebc5fc852d58d6567fb8e8baa31bec7396780b1edde9d589c74924d", 0xe3}, {&(0x7f0000000580)="98dbf295517020bd67f543d8b6ea076556919325a9e79a79bb6e2934b597385b9705bb1cfe8430ce5659d22d2f8a015e59a4ef3d572dac4f16c7e7e3c3cfa856f8c98fcf4091447194b30f2418634ee50b342cb8c5df00f8c6e128e442bd2391103127ef0e1c50d092083a5ac4388d213f726ad3f2de4037ea8375dfd98f3ce84d5ec363dee7c3fd89c200c64fc4e8d09bb899bb73a22fd4d269250861f72e06de0fd69b5ee69c68f4adc4c75d51171a2cfb91111180891436f5ef", 0xbb}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="a00000000000000017010000000000009333fc4e6e1242a8cf413e5603eb9e6c739ca6508949c2f265eb6c091d93cc75dbe45301fdf6d9190c0a48b2f1ee1912895b47f92cde9e019bc6b6a4849883da9f01339ccfb96702389f3318e4c43dbd7e959536f09e4fb9bac812de6e2bb816e94b1384e75fb27650ffe31bdde3d33188f8f22736d25ff4406f375386b2e5f378eb58f1f57a7f1a4bd14cba3a000000"], 0xa0}, 0x40)

21.157455522s ago: executing program 0 (id=3422):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(r0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7, 0x627ea, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x7, 0x0, 0x10, 0x800, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000080000ff0000000000000008000000", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000200"/20], 0x50)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23004a)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)

21.141061623s ago: executing program 3 (id=3423):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f", 0x13}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
r5 = socket$kcm(0x2, 0x200000000000001, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a0250f402ffffff950000000006001b049cb83bd81ee7a5588a00"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xa1, &(0x7f0000000340)=""/161, 0x40f00, 0x10}, 0x94)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), 0x0}, 0x20)
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x80022, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x10c6dc, 0x0, 0x80000, 0x2, 0x0, 0xfff, 0x3, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000284e3baa76725c7e7e879521c96cf827e4000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
r9 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x401c5820, &(0x7f0000000000)=0x18)
ioctl$SIOCSIFHWADDR(r10, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"})

20.573757722s ago: executing program 1 (id=3424):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x1000000000000276}, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x300)
ioctl$TUNGETVNETBE(r1, 0x800454df, &(0x7f0000000140)=0x1)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r2)
socketpair(0x6, 0x80000, 0x2, &(0x7f0000001b40))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xed, 0x0, 0xc1, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_pressure(r2, &(0x7f0000000680)={'full', 0x20, 0x1, 0x20, 0x4}, 0x2f)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
close(r4)
recvmsg$unix(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x2040)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000062007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000040)=r9)
close(r10)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8}, 0xc)
r11 = socket$kcm(0x29, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000400000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60, 0x0, 0x1}, 0x28)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xb, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200f66ac3d90ec79e53ffff000100000000000000000000070000007b1af8ff00bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff8500000004b967ff2fd117423b7d95c5f19de29de5db097b096ce7f960781c5215187936f7253fbcbf4b963d702a52da28b2cdcec0f5c14b4ec284d8abb24387112b24fbac687491cfcc6fd390757e4fe93d2950d396cea6fe26219abb9dd622af7423899358101ec31fe72e31cdcd9d756262994cc6085b6027963d968d931197ce8266e00c1b37b7adfa1515e5ad71eb1237d84142ef9e0cc64aa2ad59aceb82ca32", @ANYRESDEC=r12, @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r13}, 0xc)
ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000040)={r0, r13})

20.476746777s ago: executing program 4 (id=3425):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x28, 0x5, 0x0)
socket$kcm(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

20.140877744s ago: executing program 3 (id=3426):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socket$kcm(0x10, 0x400000002, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x53, 0x0, 0x0, 0x6, 0x1, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000, 0x8}, {0x1000000a, 0x7, 0xf, 0x8}], 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000), 0x10)
r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0xfc, 0x0, 0x0, 0x9, 0xe44f8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socketpair(0x23, 0x2, 0x3, &(0x7f0000000140))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0000000711097000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x790f}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

19.968612972s ago: executing program 1 (id=3434):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8911, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x6004a046)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0x0, 0x0}, 0x10)

19.848326338s ago: executing program 0 (id=3427):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(r0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7, 0x627ea, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x7, 0x0, 0x10, 0x800, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000080000ff0000000000000008000000", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000200"/20], 0x50)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23004a)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)

17.028423861s ago: executing program 3 (id=3428):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000000), 0xe)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004000400000000200000000000000000000030000000003000000020000000000000000000000000000010500000020000000000000000000000300000000022800000200000004"], 0x0, 0x5a}, 0x28)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40086602, &(0x7f0000000180)=0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305839, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000cc00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.508865858s ago: executing program 1 (id=3429):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c0", 0x2d}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f725e1165f4333f06cbce55a5f20f3095d1492f30e34c2e78534aa2059bcdd5e6c215f8a1d23f5b78a8119bd6c6c6e104923606c286343b114791a0a866bcccd0fb4fa8a960d6e7a59fd52884294b949a1a028d0fd8aefa6ee1070863365ffdfc3ab2876f7423594e3ff0182a3b92a1d51842ad30dab67f17c9938c758102e63c18870f229e0ffd2398686915f863c49fdc6e949856be1d47dac4f6d56e49c9fe34ec3306a64761d6fce755e911854ad8aaf1eb5411bdd83773c3dbf8a774f02e39ce9a13692a2e62e497588", 0xfb}], 0x2}, 0x24000008)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51", 0x23}], 0x1}, 0x48100)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x80, 0x1035, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x808)
close(r4)
sendmsg$inet(r5, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
r6 = getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, r6, 0x1, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000001000007000000000000000085200000550000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

5.252235775s ago: executing program 33 (id=3425):
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
socket$kcm(0x10, 0x2, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x28, 0x5, 0x0)
socket$kcm(0x28, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.125972592s ago: executing program 34 (id=3427):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc"], 0x50)
ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180))
close(r0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7, 0x627ea, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x7, 0x0, 0x10, 0x800, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e00000000080000ff0000000000000008000000", @ANYRES32=0x1, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000200"/20], 0x50)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23004a)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
close(r3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12)

1.064677046s ago: executing program 35 (id=3428):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000001800000001"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0)
ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000280))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000340)=0x1)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0xb, &(0x7f0000000000), 0xe)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004000400000000200000000000000000000030000000003000000020000000000000000000000000000010500000020000000000000000000000300000000022800000200000004"], 0x0, 0x5a}, 0x28)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40086602, &(0x7f0000000180)=0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40305839, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000cc00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 36 (id=3429):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836954268e611c0", 0x2d}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f725e1165f4333f06cbce55a5f20f3095d1492f30e34c2e78534aa2059bcdd5e6c215f8a1d23f5b78a8119bd6c6c6e104923606c286343b114791a0a866bcccd0fb4fa8a960d6e7a59fd52884294b949a1a028d0fd8aefa6ee1070863365ffdfc3ab2876f7423594e3ff0182a3b92a1d51842ad30dab67f17c9938c758102e63c18870f229e0ffd2398686915f863c49fdc6e949856be1d47dac4f6d56e49c9fe34ec3306a64761d6fce755e911854ad8aaf1eb5411bdd83773c3dbf8a774f02e39ce9a13692a2e62e497588", 0xfb}], 0x2}, 0x24000008)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
r3 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51", 0x23}], 0x1}, 0x48100)
sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x660b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x80, 0x1035, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x808)
close(r4)
sendmsg$inet(r5, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0)
r6 = getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, r6, 0x1, 0xffffffffffffffff, 0x3)
perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000001000007000000000000000085200000550000009500000000000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

.
[  501.202832][T13172] netlink: 'syz.3.1917': attribute type 1 has an invalid length.
[  501.219842][T13172] __nla_validate_parse: 3 callbacks suppressed
[  501.219862][T13172] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1917'.
[  501.867084][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  501.875945][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  502.158480][T13197] netlink: 'syz.3.1927': attribute type 10 has an invalid length.
[  502.172894][T13197] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1927'.
[  502.445669][T13206] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1929'.
[  502.492913][T13206] net_ratelimit: 332 callbacks suppressed
[  502.492936][T13206] openvswitch: netlink: Key type 29 is not supported
[  502.559979][T13203] netlink: 'syz.0.1928': attribute type 3 has an invalid length.
[  502.583174][T13203] netlink: 'syz.0.1928': attribute type 1 has an invalid length.
[  502.602874][T13203] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1928'.
[  502.741092][T13209] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1930'.
[  504.631442][T13238] netlink: 'syz.3.1938': attribute type 10 has an invalid length.
[  504.640684][T13238] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1938'.
[  504.891485][T13248] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1940'.
[  505.038140][T13252] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1941'.
[  505.050804][T13246] netlink: 'syz.4.1939': attribute type 3 has an invalid length.
[  505.077751][T13252] openvswitch: netlink: Key type 29 is not supported
[  505.109244][T13246] netlink: 'syz.4.1939': attribute type 1 has an invalid length.
[  505.140876][T13246] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1939'.
[  505.259875][T13256] bridge_slave_1: left allmulticast mode
[  505.271286][T13256] bridge_slave_1: left promiscuous mode
[  505.279558][T13256] bridge0: port 2(bridge_slave_1) entered disabled state
[  505.328574][T13256] bridge_slave_0: left promiscuous mode
[  505.335094][T13256] bridge0: port 1(bridge_slave_0) entered disabled state
[  505.491539][T13256] .`: (slave bridge0): Releasing backup interface
[  505.919326][T13270] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1948'.
[  508.297897][T13281] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1950'.
[  508.614320][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1953'.
[  509.309850][T13295] validate_nla: 1 callbacks suppressed
[  509.309873][T13295] netlink: 'syz.3.1954': attribute type 3 has an invalid length.
[  509.323946][T13295] netlink: 'syz.3.1954': attribute type 1 has an invalid length.
[  509.331756][T13295] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1954'.
[  509.659591][T13316] netlink: 'syz.3.1962': attribute type 2 has an invalid length.
[  509.668241][T13316] netlink: 'syz.3.1962': attribute type 1 has an invalid length.
[  509.683404][T13316] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1962'.
[  509.830035][T13311] netlink: 'syz.0.1960': attribute type 3 has an invalid length.
[  509.897621][T13311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1960'.
[  510.457730][T13347] netlink: 'syz.4.1970': attribute type 3 has an invalid length.
[  512.123501][T13356] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1971'.
[  512.376926][T13360] netlink: 'syz.3.1973': attribute type 6 has an invalid length.
[  512.763170][T13367] netlink: 'syz.0.1974': attribute type 2 has an invalid length.
[  512.771011][T13367] netlink: 'syz.0.1974': attribute type 8 has an invalid length.
[  512.889678][T13367] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1974'.
[  513.824334][T13387] netlink: 'syz.0.1980': attribute type 5 has an invalid length.
[  513.841018][T13388] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1981'.
[  514.257348][T13406] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1985'.
[  514.410280][T13409] validate_nla: 1 callbacks suppressed
[  514.410323][T13409] netlink: 'syz.0.1987': attribute type 3 has an invalid length.
[  514.424686][T13409] netlink: 'syz.0.1987': attribute type 1 has an invalid length.
[  514.432899][T13409] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1987'.
[  514.778219][T13412] netlink: 'syz.1.1988': attribute type 3 has an invalid length.
[  514.809738][T13412] netlink: 'syz.1.1988': attribute type 1 has an invalid length.
[  514.833972][T13412] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1988'.
[  515.400536][T13438] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1994'.
[  515.463884][T13439] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode
[  515.481547][T13439] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode
[  515.851168][T13462] syzkaller0: entered promiscuous mode
[  515.863691][T13462] syzkaller0: entered allmulticast mode
[  516.099020][T13471] netlink: 'syz.3.2002': attribute type 3 has an invalid length.
[  516.119000][T13471] netlink: 'syz.3.2002': attribute type 1 has an invalid length.
[  516.129713][T13471] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2002'.
[  516.236527][T13465] IPv6: Can't replace route, no match found
[  516.311560][T13467] GPL: port 1(syz_tun) entered blocking state
[  516.409548][T13467] GPL: port 1(syz_tun) entered disabled state
[  516.447560][T13467] syz_tun: entered allmulticast mode
[  516.498473][T13467] syz_tun: entered promiscuous mode
[  519.204029][T13499] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2008'.
[  520.546371][T13514] netlink: 'syz.1.2020': attribute type 21 has an invalid length.
[  520.857875][T13519] netlink: 'syz.1.2014': attribute type 3 has an invalid length.
[  520.878537][T13519] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2014'.
[  520.965420][T13521] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2015'.
[  521.096739][T13516] netlink: 'syz.4.2012': attribute type 3 has an invalid length.
[  521.145113][T13516] netlink: 'syz.4.2012': attribute type 1 has an invalid length.
[  521.163302][T13516] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2012'.
[  521.378862][T13529] netlink: 'syz.3.2017': attribute type 11 has an invalid length.
[  521.436485][T13529] netlink: 'syz.3.2017': attribute type 1 has an invalid length.
[  521.462557][T13529] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2017'.
[  521.482593][T13531] netlink: 'syz.3.2017': attribute type 11 has an invalid length.
[  521.490478][T13531] netlink: 'syz.3.2017': attribute type 1 has an invalid length.
[  521.533737][T13531] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2017'.
[  521.986178][T13546] netlink: 'syz.3.2021': attribute type 10 has an invalid length.
[  522.094586][T13549] netlink: 'syz.3.2021': attribute type 9 has an invalid length.
[  522.162554][T13549] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2021'.
[  522.392551][T13550] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2021'.
[  522.486539][T13553] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2025'.
[  522.933967][T13557] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2026'.
[  524.630067][T13589] __nla_validate_parse: 3 callbacks suppressed
[  524.630111][T13589] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2034'.
[  525.033153][T13596] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2036'.
[  525.739263][T13603] validate_nla: 10 callbacks suppressed
[  525.739352][T13603] netlink: 'syz.4.2037': attribute type 3 has an invalid length.
[  525.790434][T13603] netlink: 'syz.4.2037': attribute type 1 has an invalid length.
[  525.906716][T13603] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2037'.
[  526.496819][T13606] netlink: 'syz.4.2038': attribute type 29 has an invalid length.
[  529.263244][T13598] netlink: 'syz.1.2046': attribute type 10 has an invalid length.
[  529.271141][T13598] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2046'.
[  529.281761][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2036'.
[  529.291742][T13596] bridge_slave_0: entered allmulticast mode
[  529.305075][T13605] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2038'.
[  529.331907][T13606] netlink: 'syz.4.2038': attribute type 29 has an invalid length.
[  529.622185][T13617] cgroup: fork rejected by pids controller in /syz1
[  530.004826][T13727] netlink: 'syz.0.2045': attribute type 3 has an invalid length.
[  530.017345][T13727] netlink: 'syz.0.2045': attribute type 1 has an invalid length.
[  530.039535][T13727] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2045'.
[  531.300957][ T7925] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.419833][T13746] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  531.430061][T13746] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  531.439594][T13746] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  531.441722][ T7925] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.478972][T13746] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  531.487991][T13746] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  531.495582][T13746] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  531.579340][ T7925] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.764650][ T7925] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.821114][T13753] netlink: 'syz.4.2053': attribute type 7 has an invalid length.
[  532.171391][ T7925] tipc: Left network mode
[  532.453969][T13745] chnl_net:caif_netlink_parms(): no params data found
[  532.677590][T13780] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2059'.
[  532.737212][T13775] netlink: 'syz.0.2058': attribute type 3 has an invalid length.
[  532.748623][T13775] netlink: 'syz.0.2058': attribute type 1 has an invalid length.
[  532.758382][T13775] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2058'.
[  533.230067][T13745] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.248769][T13745] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.282748][T13745] bridge_slave_0: entered allmulticast mode
[  533.290342][T13745] bridge_slave_0: entered promiscuous mode
[  533.402709][T13745] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.410058][T13745] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.442718][T13745] bridge_slave_1: entered allmulticast mode
[  533.450180][T13745] bridge_slave_1: entered promiscuous mode
[  533.551294][T13746] Bluetooth: hci0: command tx timeout
[  533.635237][T13745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.695674][T13745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.849374][T13745] team0: Port device team_slave_0 added
[  533.858500][T13814] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2066'.
[  534.523550][ T7925] gretap0 (unregistering): left allmulticast mode
[  534.530094][ T7925] gretap0 (unregistering): left promiscuous mode
[  534.537550][ T7925] ��
: port 1(gretap0) entered disabled state
[  534.564574][T13745] team0: Port device team_slave_1 added
[  534.698324][T13814] sysfs: cannot create duplicate filename '/class/ieee80211/�!�'
[  534.707706][T13814] CPU: 1 PID: 13814 Comm: syz.4.2066 Not tainted syzkaller #0
[  534.715254][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  534.725317][T13814] Call Trace:
[  534.728622][T13814]  <TASK>
[  534.731561][T13814]  dump_stack_lvl+0x18c/0x250
[  534.736259][T13814]  ? show_regs_print_info+0x20/0x20
[  534.741475][T13814]  ? load_image+0x420/0x420
[  534.745995][T13814]  sysfs_warn_dup+0x8e/0xa0
[  534.750505][T13814]  sysfs_do_create_link_sd+0xc0/0x110
[  534.755941][T13814]  device_add_class_symlinks+0x1cf/0x240
[  534.761607][T13814]  device_add+0x507/0xc20
[  534.765997][T13814]  wiphy_register+0x1dad/0x2ae0
[  534.770930][T13814]  ? cfg80211_event_work+0x40/0x40
[  534.776088][T13814]  ? minstrel_ht_alloc+0x88a/0x990
[  534.781273][T13814]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  534.787361][T13814]  ieee80211_register_hw+0x3464/0x4250
[  534.793019][T13814]  ? ieee80211_tasklet_handler+0x20/0x20
[  534.798674][T13814]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  534.804592][T13814]  ? __debug_object_init+0xec/0x450
[  534.809827][T13814]  ? __asan_memset+0x22/0x40
[  534.814431][T13814]  ? __hrtimer_init+0x186/0x270
[  534.819306][T13814]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  534.825067][T13814]  ? mac80211_hwsim_free+0x220/0x220
[  534.830366][T13814]  ? rcu_is_watching+0x15/0xb0
[  534.835152][T13814]  ? kstrndup+0xbd/0x140
[  534.839427][T13814]  hwsim_new_radio_nl+0xdc9/0x1a90
[  534.844557][T13814]  ? __nla_validate+0x50/0x50
[  534.849259][T13814]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  534.855609][T13814]  ? __nla_parse+0x40/0x50
[  534.860039][T13814]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  534.866396][T13814]  genl_family_rcv_msg_doit+0x211/0x310
[  534.871957][T13814]  ? end_current_label_crit_section+0x170/0x170
[  534.878311][T13814]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  534.884230][T13814]  ? bpf_lsm_capable+0x9/0x10
[  534.888924][T13814]  ? security_capable+0x89/0xb0
[  534.893804][T13814]  genl_rcv_msg+0x619/0x7a0
[  534.898326][T13814]  ? genl_bind+0x360/0x360
[  534.902755][T13814]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  534.909115][T13814]  netlink_rcv_skb+0x241/0x4d0
[  534.913915][T13814]  ? genl_bind+0x360/0x360
[  534.918348][T13814]  ? netlink_ack+0x1180/0x1180
[  534.923150][T13814]  ? __lock_acquire+0x7d40/0x7d40
[  534.928199][T13814]  ? down_read+0x1ac/0x2e0
[  534.932635][T13814]  genl_rcv+0x28/0x40
[  534.936721][T13814]  netlink_unicast+0x751/0x8d0
[  534.941526][T13814]  netlink_sendmsg+0x8d0/0xbf0
[  534.946405][T13814]  ? netlink_getsockopt+0x590/0x590
[  534.951624][T13814]  ? aa_sock_msg_perm+0x94/0x150
[  534.956582][T13814]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  534.961886][T13814]  ? security_socket_sendmsg+0x80/0xa0
[  534.967361][T13814]  ? netlink_getsockopt+0x590/0x590
[  534.972584][T13814]  ____sys_sendmsg+0x5ba/0x960
[  534.977369][T13814]  ? __asan_memset+0x22/0x40
[  534.981980][T13814]  ? __sys_sendmsg_sock+0x30/0x30
[  534.987016][T13814]  ? __import_iovec+0x5f2/0x850
[  534.991891][T13814]  ? import_iovec+0x73/0xa0
[  534.996412][T13814]  ___sys_sendmsg+0x2a6/0x360
[  535.001111][T13814]  ? __sys_sendmsg+0x2a0/0x2a0
[  535.005939][T13814]  __se_sys_sendmsg+0x1c2/0x2b0
[  535.010815][T13814]  ? __x64_sys_sendmsg+0x80/0x80
[  535.015798][T13814]  ? lockdep_hardirqs_on+0x98/0x150
[  535.021035][T13814]  do_syscall_64+0x55/0xa0
[  535.025558][T13814]  ? clear_bhb_loop+0x40/0x90
[  535.030274][T13814]  ? clear_bhb_loop+0x40/0x90
[  535.034971][T13814]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  535.041344][T13814] RIP: 0033:0x7f355a79c819
[  535.045823][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  535.065449][T13814] RSP: 002b:00007f35589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  535.073884][T13814] RAX: ffffffffffffffda RBX: 00007f355aa15fa0 RCX: 00007f355a79c819
[  535.081868][T13814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  535.089852][T13814] RBP: 00007f355a832c91 R08: 0000000000000000 R09: 0000000000000000
[  535.097835][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.105821][T13814] R13: 00007f355aa16038 R14: 00007f355aa15fa0 R15: 00007fff1bf0e238
[  535.113827][T13814]  </TASK>
[  535.168609][T13824] netlink: 'syz.3.2069': attribute type 3 has an invalid length.
[  535.182118][T13824] netlink: 'syz.3.2069': attribute type 1 has an invalid length.
[  535.187596][T13822] netlink: 'syz.0.2068': attribute type 1 has an invalid length.
[  535.202328][T13822] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2068'.
[  535.202614][T13824] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2069'.
[  535.258164][T13745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  535.265705][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.295875][T13745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  535.347425][T13745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  535.380556][T13745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  535.412067][T13745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  535.623752][T13746] Bluetooth: hci0: command tx timeout
[  535.639692][T13830] netlink: 'syz.4.2071': attribute type 21 has an invalid length.
[  535.655230][T13830] netlink: 'syz.4.2071': attribute type 6 has an invalid length.
[  535.675761][T13830] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2071'.
[  536.189358][T13745] hsr_slave_0: entered promiscuous mode
[  536.234790][T13745] hsr_slave_1: entered promiscuous mode
[  536.269615][T13745] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  536.302524][T13745] Cannot create hsr debugfs directory
[  536.577355][T13857] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2076'.
[  536.757361][T13869] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2078'.
[  537.172005][T13872] bond_slave_1: entered promiscuous mode
[  537.178349][T13872] bond_slave_1: entered allmulticast mode
[  537.202835][ T7925] veth0_to_team: left allmulticast mode
[  537.217566][ T7925] veth0_to_team: left promiscuous mode
[  537.238685][ T7925] ��
: port 2(veth0_to_team) entered disabled state
[  537.271098][ T7925] hsr_slave_0: left promiscuous mode
[  537.285820][ T7925] hsr_slave_1: left promiscuous mode
[  537.358335][ T7925] veth1_macvtap: left promiscuous mode
[  537.702748][T13746] Bluetooth: hci0: command tx timeout
[  537.914422][T13890] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2084'.
[  538.115357][T13892] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2085'.
[  538.713636][ T7925] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  538.798901][ T7925] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.172496][ T7925] .` (unregistering): Released all slaves
[  539.234437][T13890] netlink: 'syz.0.2084': attribute type 12 has an invalid length.
[  539.244563][T13890] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2084'.
[  539.263467][T13897] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2085'.
[  539.783025][T13746] Bluetooth: hci0: command tx timeout
[  539.837567][T13912] netlink: 'syz.4.2090': attribute type 3 has an invalid length.
[  539.877915][T13912] netlink: 'syz.4.2090': attribute type 1 has an invalid length.
[  539.886724][T13912] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2090'.
[  541.454028][T13943] netlink: 'syz.4.2091': attribute type 12 has an invalid length.
[  541.462099][T13943] netlink: 'syz.4.2091': attribute type 11 has an invalid length.
[  541.470422][T13943] netlink: 188816 bytes leftover after parsing attributes in process `syz.4.2091'.
[  542.810594][T13745] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  542.854335][T13745] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  542.955791][T13745] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  543.007083][T13956] raw_sendmsg: syz.0.2094 forgot to set AF_INET. Fix it!
[  543.074232][T13745] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  543.201221][T13966] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2096'.
[  543.611140][T13745] 8021q: adding VLAN 0 to HW filter on device bond0
[  543.717804][T13745] 8021q: adding VLAN 0 to HW filter on device team0
[  543.787894][T13452] bridge0: port 1(bridge_slave_0) entered blocking state
[  543.795272][T13452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  543.869218][ T4733] bridge0: port 2(bridge_slave_1) entered blocking state
[  543.876583][ T4733] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.060344][T13745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  544.099640][T13974] netlink: 'syz.0.2097': attribute type 21 has an invalid length.
[  544.554597][T13982] netlink: 'syz.3.2099': attribute type 3 has an invalid length.
[  544.613294][T13982] netlink: 'syz.3.2099': attribute type 1 has an invalid length.
[  544.740379][T13982] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2099'.
[  545.035453][T13987] bond_slave_1: entered promiscuous mode
[  545.073141][T13987] bond_slave_1: entered allmulticast mode
[  545.171993][T13988] netlink: 'syz.4.2101': attribute type 1 has an invalid length.
[  545.179881][T13988] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2101'.
[  545.430129][T13745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.511460][T13745] veth0_vlan: entered promiscuous mode
[  545.746384][T13745] veth1_vlan: entered promiscuous mode
[  545.861089][T13745] veth0_macvtap: entered promiscuous mode
[  545.873555][T13745] veth1_macvtap: entered promiscuous mode
[  545.948789][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  545.968313][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.007227][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  546.045313][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.085881][T13745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.110178][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
��0
[  546.139755][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.150825][T13745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
��0
[  546.161047][T13745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  546.194569][T13745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.243736][T13745] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.292720][T13745] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.318543][T13745] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.341918][T13745] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.825641][T14036] netlink: 'syz.0.2108': attribute type 1 has an invalid length.
[  546.927557][T14036] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2108'.
[  547.162924][T14025] netlink: 'syz.0.2108': attribute type 5 has an invalid length.
[  547.416811][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.441296][T14049] netlink: 'syz.3.2111': attribute type 29 has an invalid length.
[  547.463007][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.478065][T14046] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2110'.
[  547.515229][T14049] netlink: 'syz.3.2111': attribute type 29 has an invalid length.
[  547.551396][T14053] netlink: 'syz.3.2111': attribute type 29 has an invalid length.
[  547.672555][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  547.731269][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  547.790492][T14052] netlink: 'syz.0.2112': attribute type 3 has an invalid length.
[  547.817478][T14052] netlink: 'syz.0.2112': attribute type 1 has an invalid length.
[  547.850019][T14052] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2112'.
[  547.910941][T14063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2114'.
[  547.925678][T14063] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2114'.
[  548.081589][T14067] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2050'.
[  548.268434][T14069] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2114'.
[  549.033362][T14062] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2114'.
[  549.056448][T14069] debugfs: Directory '�!�' with parent 'ieee80211' already present!
[  549.519619][T14087] bond_slave_1: entered promiscuous mode
[  549.532712][T14087] bond_slave_1: entered allmulticast mode
[  550.906952][T14115] validate_nla: 1 callbacks suppressed
[  550.907057][T14115] netlink: 'syz.3.2125': attribute type 10 has an invalid length.
[  550.932112][T14115] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2125'.
[  551.220220][T14118] netlink: 'syz.0.2126': attribute type 2 has an invalid length.
[  551.315874][T14118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2126'.
[  552.428651][T14148] netlink: 3890 bytes leftover after parsing attributes in process `syz.3.2133'.
[  553.598444][T14160] netlink: 'syz.0.2136': attribute type 10 has an invalid length.
[  553.683935][T14160] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2136'.
[  554.029251][T14169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2139'.
[  554.105379][T14169] netlink: 192440 bytes leftover after parsing attributes in process `syz.1.2139'.
[  554.162541][T14169] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4
[  555.261051][T14199] netlink: 'syz.1.2149': attribute type 10 has an invalid length.
[  555.269464][T14199] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2149'.
[  555.554342][T14205] netlink: 'syz.3.2152': attribute type 10 has an invalid length.
[  556.406682][T14205] team0: Port device ..�c�� removed
[  557.674664][T14230] netlink: 'syz.3.2159': attribute type 10 has an invalid length.
[  557.692881][T14230] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2159'.
[  557.951960][T14239] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2161'.
[  558.063160][T14239] bond0: (slave bond_slave_0): Releasing backup interface
[  558.119173][T14239] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  558.460552][T14248] netlink: 'syz.1.2172': attribute type 10 has an invalid length.
[  558.479091][T14248] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2172'.
[  560.190753][T14292] netlink: 'syz.1.2176': attribute type 10 has an invalid length.
[  560.207616][T14292] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2176'.
[  560.787092][T14308] netlink: 'syz.1.2186': attribute type 2 has an invalid length.
[  560.842667][T14308] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.2186'.
[  561.192320][T14310] syzkaller0: entered promiscuous mode
[  561.212535][T14310] syzkaller0: entered allmulticast mode
[  561.391866][T14321] netlink: 63763 bytes leftover after parsing attributes in process `syz.3.2181'.
[  563.318254][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  563.335653][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  564.464988][T14327] netlink: 'syz.1.2187': attribute type 10 has an invalid length.
[  564.472981][T14327] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2187'.
[  565.788377][T14351] netlink: 151496 bytes leftover after parsing attributes in process `syz.0.2193'.
[  568.080448][T14369] netlink: 'syz.0.2197': attribute type 10 has an invalid length.
[  568.115075][T14369] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2197'.
[  569.535464][T14392] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2203'.
[  570.002081][T14412] netlink: 'syz.3.2209': attribute type 1 has an invalid length.
[  570.016667][T14412] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2209'.
[  570.028289][T14413] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.2210'.
[  570.060653][T14416] netlink: 'syz.1.2211': attribute type 10 has an invalid length.
[  570.072697][T14416] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2211'.
[  570.094159][T14413] netlink: 'syz.0.2210': attribute type 10 has an invalid length.
[  573.972877][T14463] netlink: 'syz.3.2223': attribute type 10 has an invalid length.
[  573.993695][T14463] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2223'.
[  575.827501][T14503] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2232'.
[  575.980723][T14501] netlink: 'syz.4.2234': attribute type 10 has an invalid length.
[  576.014430][T14501] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2234'.
[  577.953270][T14533] delete_channel: no stack
[  579.557871][T14561] netlink: 'syz.3.2249': attribute type 10 has an invalid length.
[  579.602562][T14561] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2249'.
[  580.025076][T14571] netlink: 'syz.4.2252': attribute type 1 has an invalid length.
[  580.048713][T14574] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2250'.
[  580.063158][T14571] netlink: 15487 bytes leftover after parsing attributes in process `syz.4.2252'.
[  580.175946][T14576] netlink: zone id is out of range
[  580.211019][T14576] netlink: set zone limit has 8 unknown bytes
[  580.675864][T14588] netlink: 'syz.4.2256': attribute type 2 has an invalid length.
[  580.709614][T14588] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2256'.
[  580.813199][T14587] netlink: 'syz.1.2257': attribute type 21 has an invalid length.
[  581.637342][T14592] netlink: 'syz.1.2259': attribute type 10 has an invalid length.
[  582.008609][T14601] netlink: 'syz.1.2259': attribute type 9 has an invalid length.
[  582.140858][T14601] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2259'.
[  583.286641][T14619] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2267'.
[  583.313382][T14619] netlink: zone id is out of range
[  583.324906][T14619] netlink: zone id is out of range
[  583.330611][T14619] netlink: zone id is out of range
[  583.338307][T14619] netlink: zone id is out of range
[  583.345175][T14619] netlink: zone id is out of range
[  583.350357][T14619] netlink: zone id is out of range
[  583.357833][T14619] netlink: zone id is out of range
[  583.365462][T14619] netlink: zone id is out of range
[  583.989492][T14629] netlink: 'syz.4.2270': attribute type 2 has an invalid length.
[  584.002752][T14629] netlink: 'syz.4.2270': attribute type 8 has an invalid length.
[  584.036904][T14629] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2270'.
[  584.365796][T14638] netlink: 'syz.4.2274': attribute type 3 has an invalid length.
[  584.375697][T14638] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2274'.
[  584.397027][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  584.413116][ T5768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  584.421397][ T5768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  584.465177][ T5768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  584.485119][ T5768] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  584.496542][ T5768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  584.540941][T14638] netlink: 'syz.4.2274': attribute type 1 has an invalid length.
[  584.612592][T14638] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.2274'.
[  584.915367][T13451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.117739][T14640] chnl_net:caif_netlink_parms(): no params data found
[  585.371247][T14640] bridge0: port 1(bridge_slave_0) entered blocking state
[  585.391321][T14640] bridge0: port 1(bridge_slave_0) entered disabled state
[  585.404941][T14640] bridge_slave_0: entered allmulticast mode
[  585.422563][T14640] bridge_slave_0: entered promiscuous mode
[  585.442139][T14640] bridge0: port 2(bridge_slave_1) entered blocking state
[  585.458169][T14640] bridge0: port 2(bridge_slave_1) entered disabled state
[  585.471277][T14640] bridge_slave_1: entered allmulticast mode
[  585.484422][T14640] bridge_slave_1: entered promiscuous mode
[  586.583151][ T5768] Bluetooth: hci1: command tx timeout
[  588.210629][T14640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  588.248220][T13451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.277116][T14640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  588.437143][T13451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.500243][T14640] team0: Port device team_slave_0 added
[  588.525519][T14640] team0: Port device team_slave_1 added
[  588.561101][T14681] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2283'.
[  588.606632][T14681] netlink: 'syz.4.2283': attribute type 2 has an invalid length.
[  588.672891][ T5768] Bluetooth: hci1: command tx timeout
[  588.731685][T13451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.740826][T14681] netlink: 'syz.4.2283': attribute type 7 has an invalid length.
[  588.753257][T14640] batman_adv: batadv0: Adding interface: batadv_slave_0
[  588.760280][T14640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  588.797490][T14681] netlink: 'syz.4.2283': attribute type 1 has an invalid length.
[  588.809757][T14681] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2283'.
[  588.830736][T14640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  588.850068][T14640] batman_adv: batadv0: Adding interface: batadv_slave_1
[  588.857828][T14640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  588.930803][T14684] netlink: 'syz.4.2283': attribute type 10 has an invalid length.
[  588.948546][T14640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  588.959975][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  588.983298][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.001788][T14686] netlink: 'syz.1.2285': attribute type 9 has an invalid length.
[  589.013583][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.022022][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.031322][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.163213][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.172593][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.208840][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.259954][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.312376][T14684] netlink: 'syz.4.2283': attribute type 11 has an invalid length.
[  589.338182][T14684] netlink: 'syz.4.2283': attribute type 4 has an invalid length.
[  589.357158][T14684] netlink: 'syz.4.2283': attribute type 5 has an invalid length.
[  589.391012][T14684] netlink: 208556 bytes leftover after parsing attributes in process `syz.4.2283'.
[  589.435642][T14640] hsr_slave_0: entered promiscuous mode
[  589.501681][T14640] hsr_slave_1: entered promiscuous mode
[  589.827997][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2287'.
[  590.757633][ T5768] Bluetooth: hci1: command tx timeout
[  591.556029][T14729] netlink: 'syz.3.2293': attribute type 2 has an invalid length.
[  591.673810][T14729] netlink: 'syz.3.2293': attribute type 8 has an invalid length.
[  591.773565][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2293'.
[  592.148959][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2295'.
[  592.305696][T14735] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2295'.
[  592.822711][ T5768] Bluetooth: hci1: command tx timeout
[  593.505898][T14640] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  593.570679][T14640] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  593.682927][T14640] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  593.800060][T14640] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  594.173830][T14777] netlink: 'syz.4.2303': attribute type 10 has an invalid length.
[  594.223462][T14777] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2303'.
[  594.520667][T14783] netlink: 'syz.3.2305': attribute type 10 has an invalid length.
[  595.197907][T13451] hsr_slave_0: left promiscuous mode
[  595.219922][T13451] hsr_slave_1: left promiscuous mode
[  595.272511][T13451] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  595.280043][T13451] batman_adv: batadv0: Removing interface: batadv_slave_0
[  595.348416][T13451] batman_adv: batadv0: Interface deactivated: 
��0
[  595.363299][T13451] batman_adv: batadv0: Removing interface: 
��0
[  595.626501][T13451] veth1_macvtap: left promiscuous mode
[  598.127495][T13451] team0 (unregistering): Port device geneve1 removed
[  598.476034][T13451] team0 (unregistering): Port device team_slave_1 removed
[  598.528006][T13451] team0 (unregistering): Port device C removed
[  599.187374][T14640] 8021q: adding VLAN 0 to HW filter on device bond0
[  599.280437][T14640] 8021q: adding VLAN 0 to HW filter on device team0
[  599.325720][T14284] bridge0: port 1(bridge_slave_0) entered blocking state
[  599.332962][T14284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  599.375819][T14837] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode
[  599.406259][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  599.413539][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  599.443106][T14838] netlink: 'syz.1.2317': attribute type 21 has an invalid length.
[  599.459693][T14838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2317'.
[  599.480121][T14838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2317'.
[  599.492076][T14838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2317'.
[  599.821204][T14640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  599.885853][T14640] veth0_vlan: entered promiscuous mode
[  599.901484][T14640] veth1_vlan: entered promiscuous mode
[  599.950611][T14640] veth0_macvtap: entered promiscuous mode
[  599.971453][T14640] veth1_macvtap: entered promiscuous mode
[  599.989856][T14640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  600.002169][T14640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.016769][T14640] batman_adv: batadv0: Interface activated: batadv_slave_0
[  600.042805][T14640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 
��0
[  600.057611][T14640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.067769][T14640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  600.078983][T14640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  600.100751][T14640] batman_adv: batadv0: Interface activated: batadv_slave_1
[  600.131936][T14640] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  600.153598][T14640] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  600.172488][T14640] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  600.181242][T14640] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  600.190534][T14855] netlink: 'syz.1.2321': attribute type 27 has an invalid length.
[  600.206445][T14855] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2321'.
[  600.683563][T14856] netlink: 'syz.3.2322': attribute type 2 has an invalid length.
[  600.698357][T14856] netlink: 119 bytes leftover after parsing attributes in process `syz.3.2322'.
[  600.781127][T14284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.807998][T14284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  600.912924][T13451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  600.933988][T13451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  602.644302][T14895] netlink: 'syz.0.2332': attribute type 9 has an invalid length.
[  602.666511][T14896] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2331'.
[  603.328418][T14908] netlink: 'syz.1.2333': attribute type 2 has an invalid length.
[  603.383462][T14908] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2333'.
[  603.882913][T14922] netlink: 'syz.4.2341': attribute type 21 has an invalid length.
[  603.945160][T14922] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2341'.
[  603.972514][T14922] netlink: 'syz.4.2341': attribute type 4 has an invalid length.
[  603.980311][T14922] netlink: 'syz.4.2341': attribute type 5 has an invalid length.
[  604.002434][T14922] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2341'.
[  604.200777][T14932] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2345'.
[  605.079729][T14948] netlink: 'syz.3.2350': attribute type 10 has an invalid length.
[  605.112921][T14948] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2350'.
[  605.410205][T14941] netlink: 'syz.1.2347': attribute type 6 has an invalid length.
[  605.432180][T14941] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2347'.
[  605.804487][T14963] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2354'.
[  605.868992][T14962] netlink: 'syz.4.2353': attribute type 1 has an invalid length.
[  605.911642][T14962] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2353'.
[  606.042754][T14963] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2354'.
[  606.069998][T14961] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2354'.
[  606.291332][T13746] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  606.353929][T13746] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  606.368360][T13746] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  606.376835][T13746] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  606.393193][T13746] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  606.402010][T13746] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  606.535745][T14975] syzkaller0: entered promiscuous mode
[  606.541393][T14975] syzkaller0: entered allmulticast mode
[  606.713533][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  608.508326][T13746] Bluetooth: hci2: command tx timeout
[  610.039673][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.060289][T14992] netlink: 'syz.4.2360': attribute type 10 has an invalid length.
[  610.071037][T14992] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2360'.
[  610.211755][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.248864][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'.
[  610.309308][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  610.582534][T13746] Bluetooth: hci2: command tx timeout
[  610.683048][T15011] pim6reg1: entered promiscuous mode
[  610.714600][T15011] pim6reg1: entered allmulticast mode
[  610.907845][T14968] chnl_net:caif_netlink_parms(): no params data found
[  611.564299][T15026] netlink: 'syz.0.2367': attribute type 21 has an invalid length.
[  611.612738][T15026] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2367'.
[  611.638710][T15026] netlink: 'syz.0.2367': attribute type 4 has an invalid length.
[  611.658156][T15026] netlink: 'syz.0.2367': attribute type 5 has an invalid length.
[  611.682499][T15026] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2367'.
[  612.668700][T13746] Bluetooth: hci2: command tx timeout
[  613.110137][   T11] ip6gretap0 (unregistering): left allmulticast mode
[  613.141443][   T11] ip6gretap0 (unregistering): left promiscuous mode
[  613.174477][   T11] ��
: port 1(ip6gretap0) entered disabled state
[  613.454857][T14968] bridge0: port 1(bridge_slave_0) entered blocking state
[  613.469451][T14968] bridge0: port 1(bridge_slave_0) entered disabled state
[  613.484608][T14968] bridge_slave_0: entered allmulticast mode
[  613.492194][T14968] bridge_slave_0: entered promiscuous mode
[  613.777320][T14968] bridge0: port 2(bridge_slave_1) entered blocking state
[  613.787354][T14968] bridge0: port 2(bridge_slave_1) entered disabled state
[  613.814960][T14968] bridge_slave_1: entered allmulticast mode
[  613.833589][T14968] bridge_slave_1: entered promiscuous mode
[  614.545791][T14968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  614.576566][T14968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  614.742499][T13746] Bluetooth: hci2: command tx timeout
[  615.215718][T14968] team0: Port device team_slave_0 added
[  615.226452][T15086] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2375'.
[  615.348127][T15090] netlink: 'syz.1.2376': attribute type 3 has an invalid length.
[  615.382638][T15090] netlink: 'syz.1.2376': attribute type 1 has an invalid length.
[  615.408232][T15090] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2376'.
[  615.565867][T14968] team0: Port device team_slave_1 added
[  616.107799][T14968] batman_adv: batadv0: Adding interface: batadv_slave_0
[  616.124962][T14968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.177017][T14968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  616.209981][T14968] batman_adv: batadv0: Adding interface: batadv_slave_1
[  616.227787][T14968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  616.302481][T14968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  616.945773][T14968] hsr_slave_0: entered promiscuous mode
[  616.969819][T14968] hsr_slave_1: entered promiscuous mode
[  617.008713][T14968] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  617.027818][T14968] Cannot create hsr debugfs directory
[  618.600826][T15147] mac80211_hwsim hwsim39 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  618.842360][T15152] pim6reg1: entered promiscuous mode
[  618.850390][T15152] pim6reg1: entered allmulticast mode
[  618.896696][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.911223][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.920142][   T11] batman_adv: batadv0: Interface deactivated: 
��0
[  618.927416][   T11] batman_adv: batadv0: Removing interface: 
��0
[  618.935089][   T11] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  618.942302][   T11] batman_adv: batadv0: Removing interface: virt_wifi0
[  618.958699][   T11] veth0_macvtap: left promiscuous mode
[  619.198363][   T11] team0 (unregistering): Port device geneve1 removed
[  619.608256][   T11] team0 (unregistering): Port device team_slave_1 removed
[  619.661836][   T11] team0 (unregistering): Port device C removed
[  620.376408][T15165] netlink: 7934 bytes leftover after parsing attributes in process `syz.4.2392'.
[  620.678917][T14968] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  620.843173][T14968] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  620.886814][T14968] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  620.964483][T14968] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  621.223199][T14281] wlan1: Trigger new scan to find an IBSS to join
[  622.031824][T14968] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.097384][T14968] 8021q: adding VLAN 0 to HW filter on device team0
[  622.135937][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.143260][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.186319][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.193584][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.286906][T15207] netlink: 'syz.1.2398': attribute type 10 has an invalid length.
[  622.308941][T15208] netlink: 'syz.1.2398': attribute type 27 has an invalid length.
[  622.342874][T15208] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2398'.
[  622.459567][T15210] sctp: [Deprecated]: syz.4.2401 (pid 15210) Use of int in maxseg socket option.
[  622.459567][T15210] Use struct sctp_assoc_value instead
[  622.485184][T14968] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  622.534730][T14968] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  623.374546][T14968] 8021q: adding VLAN 0 to HW filter on device batadv0
[  623.490177][T14968] veth0_vlan: entered promiscuous mode
[  623.529322][T14968] veth1_vlan: entered promiscuous mode
[  623.607888][T14968] veth0_macvtap: entered promiscuous mode
[  623.625945][T14968] veth1_macvtap: entered promiscuous mode
[  623.677788][T14968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  623.689396][T14968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.725944][T14968] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.749699][T14968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.774106][T14968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.796801][T14968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  623.823419][T14968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  623.835445][T14968] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.868921][T14968] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.892481][T14968] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.901264][T14968] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.925335][T14968] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.074276][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.082273][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.122845][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.130734][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.263579][   T11] wlan1: Trigger new scan to find an IBSS to join
[  624.300516][T15254] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2413'.
[  624.367386][T15256] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  624.384117][T15256] batman_adv: batadv0: Removing interface: batadv_slave_0
[  624.417792][T15256] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  624.444331][T15256] batman_adv: batadv0: Removing interface: batadv_slave_1
[  624.746942][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  624.753526][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  626.229806][T15295] sctp: [Deprecated]: syz.0.2416 (pid 15295) Use of int in maxseg socket option.
[  626.229806][T15295] Use struct sctp_assoc_value instead
[  627.411764][   T11] wlan1: Trigger new scan to find an IBSS to join
[  628.759820][   T11] wlan1: Creating new IBSS network, BSSID 4a:c6:7d:87:35:63
[  629.490499][T15332] net_ratelimit: 1 callbacks suppressed
[  629.490517][T15332] Dead loop on virtual device ip6_vti0, fix it urgently!
[  629.615802][T15334] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2419'.
[  629.647973][T15326] netlink: 'syz.1.2411': attribute type 10 has an invalid length.
[  629.687099][T15326] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2411'.
[  630.020535][T15340] netlink: 'syz.3.2422': attribute type 29 has an invalid length.
[  630.222296][T15340] netlink: 'syz.3.2422': attribute type 29 has an invalid length.
[  630.351872][T15343] netlink: 'syz.3.2422': attribute type 29 has an invalid length.
[  637.776716][T15379] netlink: 'syz.3.2430': attribute type 21 has an invalid length.
[  638.302346][T15384] netlink: 'syz.1.2432': attribute type 2 has an invalid length.
[  638.379313][T15384] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2432'.
[  638.416248][T15381] netlink: 'syz.0.2431': attribute type 1 has an invalid length.
[  638.475077][T15381] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2431'.
[  638.942709][T15398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  639.300056][T15405] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2439'.
[  639.380813][T15405] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2439'.
[  639.430197][T15406] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2439'.
[  639.986428][T15411] netlink: 'syz.4.2441': attribute type 3 has an invalid length.
[  640.023153][T15411] netlink: 'syz.4.2441': attribute type 6 has an invalid length.
[  640.055326][T15411] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.2441'.
[  640.178419][T15415] netlink: 'syz.0.2442': attribute type 10 has an invalid length.
[  640.204282][T15415] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2442'.
[  646.081242][T15448] netlink: 'syz.0.2458': attribute type 6 has an invalid length.
[  646.090119][T15448] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2458'.
[  646.208814][T15452] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2451'.
[  646.362461][T15452] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2451'.
[  646.371781][T15457] netlink: 'syz.4.2453': attribute type 21 has an invalid length.
[  646.482512][T15457] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2453'.
[  646.600704][T15459] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2451'.
[  647.415311][T15475] team0: Port device team_slave_0 removed
[  647.431345][T15475] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  647.465828][T15478] netlink: 'syz.3.2459': attribute type 10 has an invalid length.
[  647.478559][T15478] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2459'.
[  648.461141][T15489] tap1: tun_chr_ioctl cmd 1074025677
[  648.468622][T15489] tap1: linktype set to 778
[  648.474472][T15488] netlink: 'syz.0.2461': attribute type 10 has an invalid length.
[  648.504166][T15488] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.512311][T15488] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.536213][T15488] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.543413][T15488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  648.550885][T15488] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.558185][T15488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  648.582270][T15488] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  648.869946][T15503] netlink: 'syz.0.2464': attribute type 27 has an invalid length.
[  648.956372][T15509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2466'.
[  649.009612][T15512] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2467'.
[  649.786459][T15523] netlink: 'syz.0.2470': attribute type 3 has an invalid length.
[  649.823059][T15523] netlink: 'syz.0.2470': attribute type 1 has an invalid length.
[  649.848749][T15523] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2470'.
[  649.967843][T15525] FAULT_INJECTION: forcing a failure.
[  649.967843][T15525] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  650.041588][T15525] CPU: 0 PID: 15525 Comm: syz.4.2471 Not tainted syzkaller #0
[  650.049226][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  650.059317][T15525] Call Trace:
[  650.062625][T15525]  <TASK>
[  650.065620][T15525]  dump_stack_lvl+0x18c/0x250
[  650.070347][T15525]  ? show_regs_print_info+0x20/0x20
[  650.075642][T15525]  ? load_image+0x420/0x420
[  650.080205][T15525]  ? __might_fault+0xaa/0x120
[  650.084925][T15525]  ? __lock_acquire+0x7d40/0x7d40
[  650.090012][T15525]  should_fail_ex+0x39d/0x4d0
[  650.094750][T15525]  _copy_from_user+0x2f/0xe0
[  650.099410][T15525]  ___sys_sendmsg+0x1c7/0x360
[  650.104140][T15525]  ? __sys_sendmsg+0x2a0/0x2a0
[  650.108966][T15525]  ? __fget_files+0x59/0x4b0
[  650.113652][T15525]  __se_sys_sendmsg+0x1c2/0x2b0
[  650.118540][T15525]  ? __x64_sys_sendmsg+0x80/0x80
[  650.123545][T15525]  ? lockdep_hardirqs_on+0x98/0x150
[  650.128796][T15525]  do_syscall_64+0x55/0xa0
[  650.133254][T15525]  ? clear_bhb_loop+0x40/0x90
[  650.137982][T15525]  ? clear_bhb_loop+0x40/0x90
[  650.142708][T15525]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  650.148655][T15525] RIP: 0033:0x7f355a79c819
[  650.153139][T15525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.161554][T15528] netlink: 'syz.0.2472': attribute type 10 has an invalid length.
[  650.172781][T15525] RSP: 002b:00007f35589f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  650.172812][T15525] RAX: ffffffffffffffda RBX: 00007f355aa15fa0 RCX: 00007f355a79c819
[  650.172827][T15525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  650.172839][T15525] RBP: 00007f35589f6090 R08: 0000000000000000 R09: 0000000000000000
[  650.172851][T15525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.172862][T15525] R13: 00007f355aa16038 R14: 00007f355aa15fa0 R15: 00007fff1bf0e238
[  650.172894][T15525]  </TASK>
[  650.243858][T15528] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2472'.
[  650.319412][T15514] tap0: tun_chr_ioctl cmd 1074025677
[  650.325566][T15514] tap0: linktype set to 0
[  651.139341][T15542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2476'.
[  653.112346][T15541] netlink: 'syz.0.2476': attribute type 21 has an invalid length.
[  653.120532][T15541] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2476'.
[  653.129904][T15542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2476'.
[  653.608281][T15559] netlink: 'syz.3.2481': attribute type 3 has an invalid length.
[  653.629606][T15559] netlink: 'syz.3.2481': attribute type 1 has an invalid length.
[  653.657965][T15559] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2481'.
[  653.709114][T15563] netlink: 'syz.4.2482': attribute type 10 has an invalid length.
[  653.717845][T15563] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2482'.
[  654.815557][T15584] netlink: 'syz.3.2490': attribute type 17 has an invalid length.
[  654.875142][T15584] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2490'.
[  654.918917][T15584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  655.212232][T15596] netlink: 'syz.0.2492': attribute type 10 has an invalid length.
[  655.244144][T15596] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2492'.
[  655.554052][T15598] netlink: 'syz.3.2493': attribute type 3 has an invalid length.
[  655.563054][T15598] netlink: 'syz.3.2493': attribute type 1 has an invalid length.
[  655.571949][T15598] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2493'.
[  655.930518][T15608] netlink: 'syz.0.2496': attribute type 3 has an invalid length.
[  655.952765][T15608] netlink: 'syz.0.2496': attribute type 1 has an invalid length.
[  655.984987][T15608] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2496'.
[  656.306958][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  656.325159][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  656.340125][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  656.375624][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  656.395884][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  656.404229][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  656.506565][ T6419] syz_tun (unregistering): left allmulticast mode
[  656.522720][ T6419] syz_tun (unregistering): left promiscuous mode
[  656.529222][ T6419] GPL: port 1(syz_tun) entered disabled state
[  656.858729][T13455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  656.880250][T15638] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2504'.
[  656.982102][T13455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.091273][T15646] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2506'.
[  657.333211][T13455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.471050][T15649] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2508'.
[  657.507627][T13455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  657.545396][ T5768] Bluetooth: hci0: command 0x0406 tx timeout
[  657.948822][T15618] chnl_net:caif_netlink_parms(): no params data found
[  658.508056][T13746] Bluetooth: hci3: command tx timeout
[  658.545136][T15670] validate_nla: 3 callbacks suppressed
[  658.545156][T15670] netlink: 'syz.0.2514': attribute type 10 has an invalid length.
[  658.563086][T15670] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2514'.
[  658.822714][T14284] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  658.849471][T15683] ip6gretap0: refused to change device tx_queue_len
[  659.073298][T15618] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.097704][T15618] bridge0: port 1(bridge_slave_0) entered disabled state
[  659.122562][T15618] bridge_slave_0: entered allmulticast mode
[  659.148754][T15618] bridge_slave_0: entered promiscuous mode
[  659.333617][T15618] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.357824][T15618] bridge0: port 2(bridge_slave_1) entered disabled state
[  659.381176][T15618] bridge_slave_1: entered allmulticast mode
[  659.404767][T15618] bridge_slave_1: entered promiscuous mode
[  659.797704][T15618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  659.857771][T15618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  659.933550][T15714] syzkaller0: entered promiscuous mode
[  659.954626][T15714] syzkaller0: entered allmulticast mode
[  660.377303][T15713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  660.464207][T15618] team0: Port device team_slave_0 added
[  660.583439][T13746] Bluetooth: hci3: command tx timeout
[  660.788260][T15618] team0: Port device team_slave_1 added
[  661.161386][T15618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  661.168970][T15618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.196503][T15618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  661.213889][T15735] netlink: 'syz.0.2526': attribute type 10 has an invalid length.
[  661.242770][T15735] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2526'.
[  661.271729][T15618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  661.283283][T15618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  661.312091][T15618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  661.746996][T15618] hsr_slave_0: entered promiscuous mode
[  661.793935][T15618] hsr_slave_1: entered promiscuous mode
[  661.819841][T15618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  661.852879][T15618] Cannot create hsr debugfs directory
[  661.932697][T15748] C: renamed from team_slave_0 (while UP)
[  661.976946][T15748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2528'.
[  662.223042][T15764] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.2530'.
[  662.253620][T15763] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2530'.
[  662.351217][T13455] hsr_slave_0: left promiscuous mode
[  662.377874][T13455] �Y]u�: left allmulticast mode
[  662.406490][T13455] bridge0: port 3(�Y]u�) entered disabled state
[  662.467037][T15775] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2531'.
[  662.498551][T13455] bridge_slave_1: left allmulticast mode
[  662.510295][T13455] bridge_slave_1: left promiscuous mode
[  662.512679][T15775] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  662.524439][T15775] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  662.536690][T13455] bridge0: port 2(bridge_slave_1) entered disabled state
[  662.599983][T13455] bridge_slave_0: left promiscuous mode
[  662.619077][T13455] bridge0: port 1(bridge_slave_0) entered disabled state
[  662.661031][T13455] veth1_macvtap: left promiscuous mode
[  662.666844][T13746] Bluetooth: hci3: command tx timeout
[  663.085622][T13455] team0 (unregistering): Port device geneve1 removed
[  663.547674][T13455] team0 (unregistering): Port device team_slave_1 removed
[  663.628943][T13455] team0 (unregistering): Port device C removed
[  664.194653][T15763] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2530'.
[  664.217056][T15782] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.2533'.
[  664.744826][T13746] Bluetooth: hci3: command tx timeout
[  666.338022][T15790] netlink: 'syz.3.2534': attribute type 10 has an invalid length.
[  666.353267][T15790] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2534'.
[  667.703213][T15618] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  667.736286][T15618] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  667.796392][T15618] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  667.853572][T15618] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  668.013138][T15832] netlink: 'syz.1.2542': attribute type 10 has an invalid length.
[  668.032318][T15832] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2542'.
[  668.058329][T15823] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2540'.
[  668.237390][T15823] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  668.426362][T15842] netlink: 'syz.1.2544': attribute type 1 has an invalid length.
[  668.469132][T15842] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2544'.
[  668.502173][T15845] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2545'.
[  668.685427][T15618] 8021q: adding VLAN 0 to HW filter on device bond0
[  668.838386][T15854] netlink: 'syz.0.2549': attribute type 27 has an invalid length.
[  668.863502][T15854] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2549'.
[  669.227011][T15618] 8021q: adding VLAN 0 to HW filter on device team0
[  669.274841][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state
[  669.282061][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state
[  669.303228][ T1029] bridge0: port 2(bridge_slave_1) entered blocking state
[  669.310476][ T1029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  669.596444][T15855] netlink: 'syz.1.2547': attribute type 3 has an invalid length.
[  669.604341][T15855] netlink: 'syz.1.2547': attribute type 1 has an invalid length.
[  669.612112][T15855] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2547'.
[  670.053366][T15869] netlink: 'syz.3.2551': attribute type 10 has an invalid length.
[  670.061841][T15869] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2551'.
[  670.214769][T15618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.237964][T15618] veth0_vlan: entered promiscuous mode
[  671.285421][T15618] veth1_vlan: entered promiscuous mode
[  671.375625][T15618] veth0_macvtap: entered promiscuous mode
[  671.414217][T15618] veth1_macvtap: entered promiscuous mode
[  671.499788][T15618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  671.546605][T15618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.577600][T15618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  671.615379][T15618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.662420][T15618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.685182][T15618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  671.722464][T15618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  671.744609][T15618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.781518][T15925] netlink: 'syz.0.2559': attribute type 8 has an invalid length.
[  671.815018][T15618] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.824202][T15618] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.841970][T15618] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.864628][T15925] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.2559'.
[  671.882425][T15618] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  672.441583][T15935] netlink: 'syz.3.2562': attribute type 10 has an invalid length.
[  672.531545][T15935] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2562'.
[  672.836243][T13458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  672.872742][T13458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.007032][T14281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.046360][T14281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  674.068779][T15988] netlink: 'syz.1.2572': attribute type 10 has an invalid length.
[  674.087629][T15988] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2572'.
[  678.176129][T16026] IPv6: NLM_F_CREATE should be specified when creating new route
[  678.307829][T16051] netlink: 'syz.0.2581': attribute type 1 has an invalid length.
[  678.341880][T16051] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2581'.
[  678.539376][T16050] bridge_slave_1: left allmulticast mode
[  678.564048][T16050] bridge_slave_1: left promiscuous mode
[  679.041943][T16050] bridge0: port 2(bridge_slave_1) entered disabled state
[  681.336479][T16050] bridge_slave_0: left allmulticast mode
[  681.355859][T16050] bridge_slave_0: left promiscuous mode
[  681.372695][T16050] bridge0: port 1(bridge_slave_0) entered disabled state
[  681.573434][T16059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2580'.
[  681.582727][T16058] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2583'.
[  681.774655][T16077] netlink: 'syz.3.2589': attribute type 4 has an invalid length.
[  681.787578][T16077] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  682.214721][T16090] netlink: 'syz.4.2593': attribute type 10 has an invalid length.
[  682.224374][T16090] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2593'.
[  682.318671][T16094] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2594'.
[  682.328487][T16094] openvswitch: netlink: Flow key attribute not present in set flow.
[  683.536585][T16119] netlink: 'syz.3.2600': attribute type 3 has an invalid length.
[  683.563822][T16119] netlink: 'syz.3.2600': attribute type 1 has an invalid length.
[  683.579767][T16119] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2600'.
[  685.734873][T16150] netlink: 'syz.3.2609': attribute type 10 has an invalid length.
[  685.756901][T16150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2609'.
[  686.128782][T16171] netlink: 'syz.0.2614': attribute type 10 has an invalid length.
[  686.201104][T16171] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2614'.
[  686.223444][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.229956][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  686.414149][T16162] netlink: 'syz.1.2612': attribute type 4 has an invalid length.
[  686.428571][T16162] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2612'.
[  686.505263][T16175] netlink: 'syz.4.2616': attribute type 3 has an invalid length.
[  686.548184][T16175] netlink: 'syz.4.2616': attribute type 1 has an invalid length.
[  686.586435][T16162] .`: renamed from bond0 (while UP)
[  686.596073][T16175] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2616'.
[  687.717819][T16192] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2621'.
[  689.850328][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  690.765168][T16229] netlink: 'syz.3.2630': attribute type 39 has an invalid length.
[  691.029719][T16242] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2635'.
[  691.845168][T16257] netlink: 'syz.3.2640': attribute type 10 has an invalid length.
[  691.883237][T16257] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2640'.
[  692.394521][T16275] netlink: 'syz.3.2645': attribute type 1 has an invalid length.
[  692.409517][T16275] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2645'.
[  692.441394][T16275] netlink: 'syz.3.2645': attribute type 1 has an invalid length.
[  692.590755][T16280] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2646'.
[  692.955216][T16292] netlink: 'syz.0.2651': attribute type 10 has an invalid length.
[  693.000416][T16292] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2651'.
[  693.879828][T16300] netlink: 'syz.4.2652': attribute type 21 has an invalid length.
[  693.889411][T16303] netlink: 'syz.0.2653': attribute type 21 has an invalid length.
[  693.912441][T16303] netlink: 'syz.0.2653': attribute type 1 has an invalid length.
[  693.920515][T16303] netlink: 16050 bytes leftover after parsing attributes in process `syz.0.2653'.
[  694.300558][T16316] netlink: 'syz.0.2657': attribute type 3 has an invalid length.
[  694.334569][T16316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2657'.
[  695.388233][T16337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2663'.
[  696.824783][T16370] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2671'.
[  697.430011][T16384] netlink: 'syz.4.2675': attribute type 29 has an invalid length.
[  697.589731][T16384] netlink: 'syz.4.2675': attribute type 29 has an invalid length.
[  697.608951][T16386] netlink: 'syz.4.2675': attribute type 29 has an invalid length.
[  697.617953][T16387] netlink: 'syz.4.2675': attribute type 29 has an invalid length.
[  698.972008][T16413] netlink: 'syz.3.2683': attribute type 10 has an invalid length.
[  699.034460][T16413] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2683'.
[  700.451743][T16453] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2692'.
[  701.065817][T16464] netlink: 'syz.3.2694': attribute type 10 has an invalid length.
[  701.145616][T16464] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2694'.
[  704.379911][T16516] netlink: 'syz.4.2707': attribute type 3 has an invalid length.
[  704.397747][T16516] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2707'.
[  706.800499][T16524] delete_channel: no stack
[  706.947079][T16526] netlink: 209032 bytes leftover after parsing attributes in process `syz.4.2711'.
[  706.971434][T16526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2711'.
[  707.378351][T16533] netlink: 64899 bytes leftover after parsing attributes in process `syz.1.2710'.
[  708.455398][T16552] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2718'.
[  708.518242][T16558] netlink: 'syz.0.2718': attribute type 10 has an invalid length.
[  708.579945][T16558] team0: Device hsr_slave_0 failed to register rx_handler
[  708.742624][ T5768] Bluetooth: hci1: command 0x0406 tx timeout
[  708.820794][T16567] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2721'.
[  708.897910][T16573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2723'.
[  708.918355][T16569] netlink: 'syz.1.2722': attribute type 21 has an invalid length.
[  708.938159][T16569] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2722'.
[  709.290256][T16589] netlink: 'syz.4.2728': attribute type 10 has an invalid length.
[  709.323796][T16589] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2728'.
[  710.677031][T16627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.687552][T16627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  710.707639][T16627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.717606][T16627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  710.779622][T16630] netlink: 'syz.3.2740': attribute type 10 has an invalid length.
[  710.788215][T16630] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2740'.
[  711.199605][T16649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  711.239798][T16652] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2745'.
[  711.249573][T16652] openvswitch: netlink: Tunnel attr 2548 out of range max 16
[  711.257447][T16651] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2746'.
[  711.506168][T16658] netlink: 'syz.4.2748': attribute type 39 has an invalid length.
[  712.882580][T16664] netlink: 'syz.0.2749': attribute type 3 has an invalid length.
[  712.890714][T16664] netlink: 'syz.0.2749': attribute type 1 has an invalid length.
[  712.898549][T16664] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.2749'.
[  713.383375][T16669] netlink: 'syz.0.2751': attribute type 10 has an invalid length.
[  713.391604][T16669] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2751'.
[  713.791199][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2754'.
[  713.806738][T16681] netlink: 26 bytes leftover after parsing attributes in process `syz.1.2753'.
[  714.487179][T16703] netlink: 'syz.4.2760': attribute type 4 has an invalid length.
[  714.495310][T16703] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2760'.
[  714.675217][T16707] netlink: 'syz.3.2762': attribute type 10 has an invalid length.
[  714.713359][T16707] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2762'.
[  715.017743][T16712] netlink: 'syz.0.2763': attribute type 1 has an invalid length.
[  715.082657][T16712] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2763'.
[  715.893212][T16726] netlink: 'syz.1.2768': attribute type 21 has an invalid length.
[  716.474921][T16740] netlink: 'syz.3.2773': attribute type 10 has an invalid length.
[  716.492859][T16740] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2773'.
[  716.572083][T16746] netlink: 'syz.1.2774': attribute type 2 has an invalid length.
[  716.590583][T16746] netlink: 'syz.1.2774': attribute type 8 has an invalid length.
[  716.612535][T16746] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2774'.
[  716.664879][T16749] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.2775'.
[  717.284313][T16765] tun0: tun_chr_ioctl cmd 1074025692
[  717.289844][T16765] tun0: tun_chr_ioctl cmd 2147767506
[  717.319177][T16765] netlink: 'syz.1.2780': attribute type 13 has an invalid length.
[  717.339292][T16765] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2780'.
[  717.379075][T16765] erspan0: refused to change device tx_queue_len
[  717.790407][T16782] netlink: 'syz.4.2786': attribute type 10 has an invalid length.
[  717.814554][T16782] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2786'.
[  718.342773][T16803] netlink: 'syz.1.2790': attribute type 29 has an invalid length.
[  718.360914][T16803] netlink: 'syz.1.2790': attribute type 3 has an invalid length.
[  718.388975][T16803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2790'.
[  720.510597][T16805] netlink: 'syz.3.2789': attribute type 2 has an invalid length.
[  720.519014][T16805] netlink: 'syz.3.2789': attribute type 8 has an invalid length.
[  720.527394][T16805] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2789'.
[  720.537905][T16807] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2791'.
[  720.679088][T16816] Q�6�`Ҙ: renamed from lo (while UP)
[  720.917480][T16821] syzkaller0: entered promiscuous mode
[  720.924985][T16821] syzkaller0: entered allmulticast mode
[  720.941473][T16826] validate_nla: 1 callbacks suppressed
[  720.941491][T16826] netlink: 'syz.4.2796': attribute type 10 has an invalid length.
[  720.960113][T16826] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2796'.
[  721.178524][T16835] netlink: 668 bytes leftover after parsing attributes in process `syz.4.2799'.
[  721.189211][T16835] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  721.197987][T16835] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  723.147538][T16842] netlink: 'syz.4.2800': attribute type 2 has an invalid length.
[  723.374382][T16853] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2804'.
[  723.807167][T16866] netlink: 'syz.3.2807': attribute type 10 has an invalid length.
[  723.903722][T16866] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2807'.
[  723.976473][T16870] netlink: 'syz.1.2808': attribute type 16 has an invalid length.
[  724.036875][T16870] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2808'.
[  724.156436][T16873] netlink: 'syz.1.2808': attribute type 16 has an invalid length.
[  724.181554][T16873] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2808'.
[  724.378200][T16876] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2809'.
[  724.413257][T16876] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  724.421656][T16876] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  725.328038][T16901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2817'.
[  725.608370][T16916] netlink: 'syz.1.2821': attribute type 10 has an invalid length.
[  725.617345][T16916] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2821'.
[  725.777900][T16923] netlink: 'syz.4.2823': attribute type 64 has an invalid length.
[  726.572255][T16931] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2826'.
[  726.836803][T16937] syzkaller0: entered promiscuous mode
[  726.842550][T16937] syzkaller0: entered allmulticast mode
[  727.044307][T16945] netlink: 'syz.0.2829': attribute type 10 has an invalid length.
[  727.681768][T16967] netlink: 'syz.3.2837': attribute type 10 has an invalid length.
[  727.698318][T16967] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2837'.
[  727.735091][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'.
[  728.661401][T16991] netlink: 'syz.0.2846': attribute type 39 has an invalid length.
[  728.966187][T17006] __nla_validate_parse: 2 callbacks suppressed
[  728.966210][T17006] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2848'.
[  729.008980][T17006] openvswitch: netlink: Duplicate key (type 0).
[  729.343167][ T5768] Bluetooth: hci2: command 0x0406 tx timeout
[  729.665221][T17005] netlink: 'syz.3.2848': attribute type 10 has an invalid length.
[  729.716696][T17005] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  729.941024][T17015] netlink: 'syz.3.2850': attribute type 21 has an invalid length.
[  730.075273][T17017] netlink: 'syz.4.2851': attribute type 10 has an invalid length.
[  730.108825][T17017] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2851'.
[  730.254977][T17025] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2854'.
[  730.733494][T17038] netlink: 'syz.4.2857': attribute type 10 has an invalid length.
[  730.741622][T17038] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2857'.
[  730.787284][T17033] netlink: 'syz.1.2856': attribute type 17 has an invalid length.
[  730.831253][T17033] netlink: 'syz.1.2856': attribute type 16 has an invalid length.
[  730.855375][T17033] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2856'.
[  730.958769][T17046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2860'.
[  731.017741][T17047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2860'.
[  731.390384][T17058] netlink: 'syz.3.2864': attribute type 10 has an invalid length.
[  731.687261][T17058] team0: Port device geneve1 added
[  732.205487][T17066] netlink: 'syz.4.2867': attribute type 23 has an invalid length.
[  732.710713][T17080] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2870'.
[  735.149071][T17089] netlink: 'syz.1.2872': attribute type 21 has an invalid length.
[  735.157071][T17089] netlink: 'syz.1.2872': attribute type 1 has an invalid length.
[  735.165541][T17089] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2872'.
[  735.446335][T17105] syzkaller0: entered promiscuous mode
[  735.456410][T17105] syzkaller0: entered allmulticast mode
[  737.605187][T17117] sit0: entered promiscuous mode
[  737.701320][T17121] netlink: 'syz.0.2878': attribute type 21 has an invalid length.
[  737.882933][T17126] netlink: 'syz.1.2880': attribute type 9 has an invalid length.
[  738.145782][T17131] ��
: port 1(ip6gretap0) entered blocking state
[  738.152836][T17131] ��
: port 1(ip6gretap0) entered disabled state
[  738.159439][T17131] ip6gretap0: entered allmulticast mode
[  738.177985][T17131] ip6gretap0: entered promiscuous mode
[  738.467007][T17140] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2883'.
[  738.876394][T17147] netlink: 'syz.0.2886': attribute type 10 has an invalid length.
[  738.886050][T17147] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2886'.
[  739.497982][T17166] netlink: 'syz.3.2893': attribute type 10 has an invalid length.
[  739.535992][T17166] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2893'.
[  740.324143][T17183] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.2897'.
[  740.543356][T17186] netlink: 'syz.4.2898': attribute type 21 has an invalid length.
[  742.397277][T17211] netlink: 'syz.1.2903': attribute type 9 has an invalid length.
[  742.482205][T17211] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2903'.
[  742.495458][T17200] netlink: 'syz.0.2900': attribute type 17 has an invalid length.
[  742.742577][T17200] netlink: 'syz.0.2900': attribute type 16 has an invalid length.
[  742.811126][T17200] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2900'.
[  743.680314][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2906'.
[  743.920136][T17223] IPv6: Can't replace route, no match found
[  744.210280][T17240] netlink: 'syz.0.2910': attribute type 28 has an invalid length.
[  744.219616][T17239] netlink: 'syz.0.2910': attribute type 28 has an invalid length.
[  744.227863][T17240] netlink: 'syz.0.2910': attribute type 29 has an invalid length.
[  744.233771][T17244] netlink: 'syz.4.2909': attribute type 2 has an invalid length.
[  744.235887][T17239] netlink: 'syz.0.2910': attribute type 29 has an invalid length.
[  744.252460][T17240] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2910'.
[  744.252784][T17239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2910'.
[  744.318185][T17244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'.
[  744.342636][T17238] netlink: 'syz.4.2909': attribute type 10 has an invalid length.
[  744.362563][T17238] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2909'.
[  744.389775][T17238] hsr0: entered promiscuous mode
[  744.403175][T17238] bridge0: port 3(hsr0) entered blocking state
[  744.417758][T17238] bridge0: port 3(hsr0) entered disabled state
[  744.460723][T17238] hsr0: entered allmulticast mode
[  744.470669][T17238] hsr_slave_0: entered allmulticast mode
[  744.485842][T17238] hsr_slave_1: entered allmulticast mode
[  744.520722][T17238] bridge0: port 3(hsr0) entered blocking state
[  744.527147][T17238] bridge0: port 3(hsr0) entered forwarding state
[  744.609334][T17247] netlink: 'syz.3.2911': attribute type 39 has an invalid length.
[  744.747235][T17247] hsr_slave_1 (unregistering): left promiscuous mode
[  744.855294][T17244] netlink: 'syz.4.2909': attribute type 21 has an invalid length.
[  746.058452][T17278] netlink: 'syz.4.2916': attribute type 17 has an invalid length.
[  746.117142][T17278] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2916'.
[  747.588183][T17297] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2925'.
[  747.630892][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  747.642396][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  747.716268][T17305] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.2923'.
[  747.754143][T17305] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.2923'.
[  747.810394][T17305] : renamed from veth0_to_bond (while UP)
[  747.958925][T17313] validate_nla: 4 callbacks suppressed
[  747.958945][T17313] netlink: 'syz.1.2929': attribute type 10 has an invalid length.
[  747.991058][T17313] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2929'.
[  748.378495][T17324] netlink: 'syz.3.2931': attribute type 10 has an invalid length.
[  748.474812][T17332] netlink: 'syz.1.2933': attribute type 33 has an invalid length.
[  748.513543][T17332] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2933'.
[  748.600233][T17336] netlink: 'syz.0.2934': attribute type 1 has an invalid length.
[  748.621186][T17336] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2934'.
[  749.129357][T17359] delete_channel: no stack
[  749.459019][T17359] delete_channel: no stack
[  749.737308][T17364] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2940'.
[  749.748839][T17364] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2940'.
[  749.772529][T17364] tipc: Started in network mode
[  749.793464][T17364] tipc: Node identity d, cluster identity 56
[  749.806486][T17364] tipc: Node number set to 13
[  749.937551][T17371] netlink: 'syz.4.2941': attribute type 10 has an invalid length.
[  749.952061][T17371] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2941'.
[  750.349373][T17383] veth1_to_bond: entered allmulticast mode
[  750.845218][T17406] netlink: set zone limit has 8 unknown bytes
[  750.960940][T17411] netlink: 'syz.3.2955': attribute type 10 has an invalid length.
[  751.819478][T17439] __nla_validate_parse: 2 callbacks suppressed
[  751.819499][T17439] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2964'.
[  752.065949][T17442] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2965'.
[  753.722963][T17448] netlink: 'syz.1.2967': attribute type 13 has an invalid length.
[  753.730874][T17448] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2967'.
[  753.792703][T17448] erspan0: refused to change device tx_queue_len
[  754.390261][T17464] netlink: 188112 bytes leftover after parsing attributes in process `syz.0.2971'.
[  754.851026][T17481] netlink: 'syz.0.2976': attribute type 7 has an invalid length.
[  755.327294][T17487] netlink: 'syz.3.2979': attribute type 21 has an invalid length.
[  755.621645][T17485] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2978'.
[  755.662486][T17485] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2978'.
[  755.671792][T17485] tipc: Started in network mode
[  755.705603][T17485] tipc: Node identity d, cluster identity 56
[  755.723609][T17485] tipc: Node number set to 13
[  755.969206][T17503] netlink: 'syz.4.2983': attribute type 1 has an invalid length.
[  757.677102][T17539] netlink: 'syz.1.2993': attribute type 10 has an invalid length.
[  757.702433][T17539] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2993'.
[  757.775210][T17541] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2994'.
[  759.738434][T17595] netlink: 'syz.0.3010': attribute type 9 has an invalid length.
[  759.767328][T17595] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3010'.
[  760.968658][T17649] netlink: 'syz.4.3026': attribute type 9 has an invalid length.
[  760.991401][T17649] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.3026'.
[  761.083996][T17643] IPv6: NLM_F_CREATE should be specified when creating new route
[  761.092148][T17646] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3026'.
[  764.237022][T17676] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3031'.
[  764.309350][T17666] IPv6: : Disabled Multicast RS
[  765.151933][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  765.159987][T17695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  765.173529][T17695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  765.181045][T17695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  765.322660][T17680] netlink: 'syz.4.3032': attribute type 27 has an invalid length.
[  765.335466][T17680] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3032'.
[  765.345828][T17680] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  765.789162][T17726] netlink: 'syz.3.3044': attribute type 13 has an invalid length.
[  765.842534][T17726] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3044'.
[  765.947218][T17726] erspan0: refused to change device tx_queue_len
[  766.009954][T17726] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  766.029330][T17719] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3043'.
[  766.899737][T17746] netlink: 'syz.4.3047': attribute type 19 has an invalid length.
[  767.557746][T13455] tipc: Subscription rejected, illegal request
[  769.449935][T17813] syzkaller0: entered promiscuous mode
[  769.508149][T17813] syzkaller0: entered allmulticast mode
[  769.729947][T17832] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3072'.
[  769.782648][T17832] openvswitch: netlink: Duplicate key (type 0).
[  770.516252][T17827] syzkaller0: entered allmulticast mode
[  774.544638][T17855] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3077'.
[  774.554803][T17855] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes.
[  774.618758][T17858] netlink: 'syz.0.3078': attribute type 33 has an invalid length.
[  774.669353][T17858] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3078'.
[  775.185871][T17875] syzkaller0: entered promiscuous mode
[  775.191498][T17875] syzkaller0: entered allmulticast mode
[  775.767128][T13746] Bluetooth: hci2: Malformed LE Event: 0x1b
[  778.088929][T17917] lo: entered allmulticast mode
[  778.127520][T17919] netlink: zone id is out of range
[  778.133101][T17919] netlink: set zone limit has 8 unknown bytes
[  778.194690][T17917] lo: entered promiscuous mode
[  778.201846][T17917] lo: left allmulticast mode
[  778.519211][T17925] netlink: 'syz.1.3097': attribute type 10 has an invalid length.
[  778.529969][T17925] nla_validate_range_unsigned: 25 callbacks suppressed
[  778.530005][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.560753][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.572144][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.581424][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.591672][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.607484][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.616945][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.629271][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.638241][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.649709][T17925] netlink: 'syz.1.3097': attribute type 11 has an invalid length.
[  778.660487][T17925] netlink: 'syz.1.3097': attribute type 4 has an invalid length.
[  778.675528][T17925] netlink: 'syz.1.3097': attribute type 5 has an invalid length.
[  778.687416][T17925] netlink: 208556 bytes leftover after parsing attributes in process `syz.1.3097'.
[  779.030675][T17932] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.3099'.
[  779.428941][T17941] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.3100'.
[  780.178161][T17953] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.231889][T17961] netlink: 'syz.4.3107': attribute type 10 has an invalid length.
[  780.252376][T17961] netlink: 210880 bytes leftover after parsing attributes in process `syz.4.3107'.
[  780.425491][ T5768] Bluetooth: hci3: command 0x0406 tx timeout
[  782.977013][T17953] .` (unregistering): Released all slaves
[  783.720053][T17976] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.3110'.
[  788.064887][T18031] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3125'.
[  788.070811][T18032] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3125'.
[  788.102227][T18031] netlink: zone id is out of range
[  788.108330][T18031] netlink: zone id is out of range
[  788.120407][T18032] netlink: zone id is out of range
[  788.141810][T18031] netlink: zone id is out of range
[  788.149919][T18031] netlink: zone id is out of range
[  788.150229][T18032] netlink: zone id is out of range
[  788.161204][T18031] netlink: zone id is out of range
[  788.187796][T18031] netlink: zone id is out of range
[  788.197701][T18032] netlink: zone id is out of range
[  788.199893][T18031] netlink: zone id is out of range
[  788.547529][T18047] IPv6: pim6reg1: Disabled Multicast RS
[  788.689964][T18040] delete_channel: no stack
[  789.605147][T18072] netlink: 'syz.1.3137': attribute type 10 has an invalid length.
[  789.642781][T18075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  790.323760][T18072] team0 (unregistering): Port device team_slave_0 removed
[  790.347283][T18072] team0 (unregistering): Port device team_slave_1 removed
[  790.389385][T18073] netlink: 'syz.1.3137': attribute type 10 has an invalid length.
[  790.399129][T18073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3137'.
[  790.599925][T18111] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3147'.
[  790.990100][T18124] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.3150'.
[  791.278075][T13746] Bluetooth: hci1: unexpected event 0x06 length: 15 > 3
[  791.409824][T18131] netlink: 'syz.3.3152': attribute type 2 has an invalid length.
[  791.444820][T18131] netlink: 'syz.3.3152': attribute type 8 has an invalid length.
[  791.469437][T18131] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3152'.
[  792.375344][T18152] netlink: 'syz.0.3160': attribute type 10 has an invalid length.
[  792.419815][T18152] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3160'.
[  792.514049][T18152] bond0: entered promiscuous mode
[  792.519619][T18152] bond_slave_0: entered promiscuous mode
[  792.557567][T18152] bond_slave_1: entered promiscuous mode
[  792.566810][T18152] bridge0: entered promiscuous mode
[  792.582688][T18152] bridge0: port 3(bond0) entered blocking state
[  792.592619][T18152] bridge0: port 3(bond0) entered disabled state
[  792.602734][T18152] bond0: entered allmulticast mode
[  792.632907][T18152] bond_slave_0: entered allmulticast mode
[  792.662422][T18152] bond_slave_1: entered allmulticast mode
[  792.708747][T18152] bridge0: entered allmulticast mode
[  792.798889][T18152] bond0: left allmulticast mode
[  792.804293][T18152] bond_slave_0: left allmulticast mode
[  792.832445][T18152] bond_slave_1: left allmulticast mode
[  792.838141][T18152] bridge0: left allmulticast mode
[  792.853055][T18156] netlink: 'syz.4.3162': attribute type 22 has an invalid length.
[  792.991024][T18169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3164'.
[  793.015992][T18169] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3164'.
[  793.242264][T18179] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3168'.
[  794.188382][T18207] C: renamed from team_slave_0 (while UP)
[  794.788297][T18207] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3175'.
[  795.465855][T18223] netlink: 'syz.1.3180': attribute type 10 has an invalid length.
[  795.832587][T18243] netlink: 'syz.1.3187': attribute type 21 has an invalid length.
[  796.520219][T18261] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.3191'.
[  796.600313][T18261] : renamed from veth0_to_bond (while UP)
[  797.120616][T18277] netlink: 'syz.3.3195': attribute type 9 has an invalid length.
[  797.138770][T18277] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3195'.
[  797.352147][T18294] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3199'.
[  797.688635][T18292] netlink: 'syz.0.3202': attribute type 6 has an invalid length.
[  797.715164][T18292] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3202'.
[  797.766000][T18308] netlink: 'syz.0.3202': attribute type 10 has an invalid length.
[  797.788524][T18308] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3202'.
[  797.826391][T18308] net_ratelimit: 764 callbacks suppressed
[  797.826409][T18308] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  798.736700][T18325] IPv6: Can't replace route, no match found
[  798.755359][T18329] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  798.799579][T18329] batman_adv: batadv0: Removing interface: batadv_slave_0
[  798.826348][T18329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  798.848303][T18329] batman_adv: batadv0: Removing interface: batadv_slave_1
[  798.850303][T18338] netlink: 'syz.4.3210': attribute type 29 has an invalid length.
[  799.149156][T18338] netlink: 'syz.4.3210': attribute type 29 has an invalid length.
[  799.202958][T18342] netlink: 'syz.4.3210': attribute type 29 has an invalid length.
[  799.223087][T18343] netlink: 'syz.1.3212': attribute type 11 has an invalid length.
[  799.242728][T18345] netlink: 'syz.1.3212': attribute type 11 has an invalid length.
[  799.622675][T18353] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3215'.
[  800.961228][T18357] validate_nla: 2 callbacks suppressed
[  800.961247][T18357] netlink: 'syz.0.3215': attribute type 29 has an invalid length.
[  800.995365][T18358] netlink: 'syz.0.3215': attribute type 29 has an invalid length.
[  801.013766][T18363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3218'.
[  801.129623][T18369] netlink: 'syz.3.3219': attribute type 21 has an invalid length.
[  801.183490][T18369] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3219'.
[  801.315922][T18369] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3219'.
[  801.523413][T18376] netlink: 'syz.3.3219': attribute type 10 has an invalid length.
[  801.543700][T18376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3219'.
[  802.045370][T18393] netlink: 'syz.1.3226': attribute type 29 has an invalid length.
[  802.074684][T18393] netlink: 'syz.1.3226': attribute type 29 has an invalid length.
[  802.251928][T18386] tap0: tun_chr_ioctl cmd 2147767506
[  802.296063][T18402] netlink: 'syz.0.3228': attribute type 29 has an invalid length.
[  802.332738][T18402] netlink: 'syz.0.3228': attribute type 29 has an invalid length.
[  802.374174][T18402] netlink: 'syz.0.3228': attribute type 29 has an invalid length.
[  802.393266][T18402] netlink: 'syz.0.3228': attribute type 29 has an invalid length.
[  802.858848][T18414] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3231'.
[  806.402157][T18439] aaaaaaaaaaaaaaa: entered promiscuous mode
[  806.475766][T18444] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3239'.
[  806.619329][T18445] validate_nla: 1 callbacks suppressed
[  806.619352][T18445] netlink: 'syz.3.3238': attribute type 29 has an invalid length.
[  806.656054][T18445] netlink: 'syz.3.3238': attribute type 29 has an invalid length.
[  806.740021][T18450] netlink: 'syz.4.3241': attribute type 46 has an invalid length.
[  806.748333][T18450] netlink: 'syz.4.3241': attribute type 46 has an invalid length.
[  806.878698][T18452] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3242'.
[  807.303811][T18452] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[  809.121466][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  809.128589][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  809.321714][T18502] netlink: 'syz.4.3257': attribute type 1 has an invalid length.
[  809.369759][T18502] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.3257'.
[  809.477316][T18503] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3256'.
[  809.634899][T18510] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3258'.
[  811.159546][T18522] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3261'.
[  811.249518][T18522] bridge_slave_1: default FDB implementation only supports local addresses
[  812.735304][T18567] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3270'.
[  812.986241][T18556] netlink: 'syz.1.3269': attribute type 10 has an invalid length.
[  813.000122][T18556] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3269'.
[  813.385344][T18576] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3274'.
[  813.389136][T18573] syzkaller0: entered promiscuous mode
[  813.403107][T18573] syzkaller0: entered allmulticast mode
[  813.422502][T18576] openvswitch: netlink: Key type 29 is not supported
[  813.510787][T18578] delete_channel: no stack
[  813.608951][T18585] sctp: [Deprecated]: syz.0.3277 (pid 18585) Use of int in maxseg socket option.
[  813.608951][T18585] Use struct sctp_assoc_value instead
[  815.004132][T18596] netlink: 'syz.0.3280': attribute type 9 has an invalid length.
[  815.012224][T18596] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3280'.
[  816.811680][T18608] netlink: 'syz.3.3283': attribute type 10 has an invalid length.
[  816.829841][T18608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3283'.
[  816.883507][T18608] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  817.547551][T18646] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.3295'.
[  817.788810][T18653] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3297'.
[  817.798400][T18653] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  818.299339][T18659] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3298'.
[  820.921411][T18701] netlink: 'syz.0.3311': attribute type 29 has an invalid length.
[  820.930574][T18701] netlink: 'syz.0.3311': attribute type 29 has an invalid length.
[  820.940530][T18701] netlink: 'syz.0.3311': attribute type 29 has an invalid length.
[  821.084665][T18706] tap2: tun_chr_ioctl cmd 1074025677
[  821.096518][T18706] tap2: linktype set to 778
[  823.449248][T18764] netlink: 'syz.1.3327': attribute type 1 has an invalid length.
[  823.472502][T18764] netlink: 'syz.1.3327': attribute type 4 has an invalid length.
[  823.480541][T18764] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3327'.
[  825.888771][T18818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3342'.
[  826.293125][T18828] sctp: [Deprecated]: syz.4.3343 (pid 18828) Use of struct sctp_assoc_value in delayed_ack socket option.
[  826.293125][T18828] Use struct sctp_sack_info instead
[  826.318337][T18830] netlink: 'syz.3.3345': attribute type 8 has an invalid length.
[  826.372743][T18830] netlink: 169056 bytes leftover after parsing attributes in process `syz.3.3345'.
[  826.966384][T18833] netlink: 'syz.3.3347': attribute type 1 has an invalid length.
[  826.982633][T18833] netlink: 'syz.3.3347': attribute type 4 has an invalid length.
[  827.001170][T18833] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3347'.
[  827.429290][T18846] netlink: 'syz.4.3351': attribute type 10 has an invalid length.
[  827.442766][T18846] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3351'.
[  827.910529][T18854] netlink: 'syz.4.3354': attribute type 8 has an invalid length.
[  827.919973][T18854] netlink: 'syz.4.3354': attribute type 1 has an invalid length.
[  827.934206][T18854] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3354'.
[  828.921468][T18885] netlink: 'syz.0.3362': attribute type 10 has an invalid length.
[  828.962786][T18885] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3362'.
[  829.146333][T18898] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3364'.
[  829.255685][T18900] netlink: 'syz.4.3366': attribute type 7 has an invalid length.
[  829.314425][T18902] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3367'.
[  829.359442][T18903] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3367'.
[  829.396769][T18906] netlink: 'syz.4.3369': attribute type 2 has an invalid length.
[  829.398150][T18902] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3367'.
[  829.405523][T18906] netlink: 'syz.4.3369': attribute type 1 has an invalid length.
[  829.405543][T18906] netlink: 198800 bytes leftover after parsing attributes in process `syz.4.3369'.
[  829.541048][T18911] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3367'.
[  829.788591][T18924] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3374'.
[  830.083590][T18935] pim6reg1: entered promiscuous mode
[  830.089055][T18935] pim6reg1: entered allmulticast mode
[  830.577277][T18943] syzkaller0: entered promiscuous mode
[  830.602975][T18943] syzkaller0: entered allmulticast mode
[  833.985303][T18986] validate_nla: 3 callbacks suppressed
[  833.985316][T18986] netlink: 'syz.1.3395': attribute type 2 has an invalid length.
[  833.998809][T18986] netlink: 'syz.1.3395': attribute type 8 has an invalid length.
[  834.006590][T18986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3395'.
[  834.988926][T19024] mac80211_hwsim hwsim41 ..�c��: renamed from wlan1 (while UP)
[  836.565992][T19052] netlink: 'syz.1.3405': attribute type 10 has an invalid length.
[  836.579027][T19052] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3405'.
[  836.919194][T19063] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3406'.
[  836.959019][T19063] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3406'.
[  837.598354][T19055] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3406'.
[  837.978024][T19091] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3415'.
[  838.165451][T19095] netlink: 'syz.1.3417': attribute type 10 has an invalid length.
[  838.174861][T19095] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3417'.
[  838.490260][T19107] hsr0: left allmulticast mode
[  838.573460][T19107] hsr_slave_0: left allmulticast mode
[  838.619668][T19107] hsr_slave_1: left allmulticast mode
[  838.645104][T19107] bridge0: port 3(hsr0) entered disabled state
[  838.658546][T19102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  838.671296][T19107] bridge_slave_1: left allmulticast mode
[  838.678262][T19107] bridge_slave_1: left promiscuous mode
[  838.691274][T19107] bridge0: port 2(bridge_slave_1) entered disabled state
[  838.720521][T19107] bridge_slave_0: left allmulticast mode
[  838.736825][T19107] bridge_slave_0: left promiscuous mode
[  838.752680][T19107] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.211708][ T5768] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  855.221781][ T5768] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  855.230790][ T5768] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  855.240596][ T5768] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  855.249055][ T5768] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  855.257255][ T5768] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  856.300274][T13746] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  856.310486][T13746] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  856.319074][T13746] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  856.328299][T13746] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  856.337008][T13746] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  856.344628][T13746] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  857.302488][ T5768] Bluetooth: hci4: command tx timeout
[  858.422507][ T5768] Bluetooth: hci5: command tx timeout
[  859.350018][T13746] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  859.359992][T13746] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  859.368814][T13746] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  859.377593][T13746] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  859.384958][   T51] Bluetooth: hci4: command tx timeout
[  859.401383][T13746] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  859.409024][T13746] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  860.403980][T13746] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  860.414470][T13746] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  860.422843][T13746] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  860.432759][T13746] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  860.442179][T13746] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  860.450591][T13746] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  860.502797][T13746] Bluetooth: hci5: command tx timeout
[  861.462513][T13746] Bluetooth: hci6: command tx timeout
[  861.468556][T13746] Bluetooth: hci4: command tx timeout
[  862.502503][T13746] Bluetooth: hci7: command tx timeout
[  862.582648][T13746] Bluetooth: hci5: command tx timeout
[  863.542788][ T5768] Bluetooth: hci6: command tx timeout
[  863.548429][T13746] Bluetooth: hci4: command tx timeout
[  864.582464][T13746] Bluetooth: hci7: command tx timeout
[  864.662494][T13746] Bluetooth: hci5: command tx timeout
[  865.622519][T13746] Bluetooth: hci6: command tx timeout
[  866.662661][T13746] Bluetooth: hci7: command tx timeout
[  867.702426][T13746] Bluetooth: hci6: command tx timeout
[  868.742421][T13746] Bluetooth: hci7: command tx timeout
[  876.208584][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  876.218310][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  916.489444][ T5768] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  916.502694][ T5768] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  916.511496][ T5768] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  916.522099][ T5768] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  916.530661][ T5768] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  916.538818][ T5768] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  917.401946][ T5768] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  917.413812][ T5768] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  917.423925][ T5768] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  917.433233][ T5768] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  917.443156][ T5768] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  917.450685][ T5768] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  918.582729][ T5768] Bluetooth: hci8: command tx timeout
[  920.151855][ T5768] Bluetooth: hci9: command tx timeout
[  920.662543][ T5768] Bluetooth: hci8: command tx timeout
[  921.083692][T13746] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  921.094005][T13746] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  921.102389][T13746] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  921.113002][T13746] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  921.123106][T13746] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  921.130737][T13746] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  921.250625][ T5768] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  921.260729][ T5768] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  921.269694][ T5768] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  921.279417][ T5768] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  921.287978][ T5768] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  921.303284][ T5768] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  922.182904][ T5768] Bluetooth: hci9: command tx timeout
[  922.742409][ T5768] Bluetooth: hci8: command tx timeout
[  923.222538][ T5768] Bluetooth: hci10: command tx timeout
[  923.382648][ T5768] Bluetooth: hci11: command tx timeout
[  924.562886][ T5768] Bluetooth: hci9: command tx timeout
[  924.822423][ T5768] Bluetooth: hci8: command tx timeout
[  925.302492][ T5768] Bluetooth: hci10: command tx timeout
[  925.462660][ T5768] Bluetooth: hci11: command tx timeout
[  926.583278][ T5768] Bluetooth: hci9: command tx timeout
[  927.382465][ T5768] Bluetooth: hci10: command tx timeout
[  927.542448][ T5768] Bluetooth: hci11: command tx timeout
[  929.462424][ T5768] Bluetooth: hci10: command tx timeout
[  929.622397][ T5768] Bluetooth: hci11: command tx timeout
[  937.080662][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  937.087113][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  977.584789][T13746] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  977.595070][T13746] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  977.603830][T13746] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  977.614124][T13746] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  977.623988][T13746] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  977.631672][T13746] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  977.969594][T19201] chnl_net:caif_netlink_parms(): no params data found
[  978.219647][T19201] bridge0: port 1(bridge_slave_0) entered blocking state
[  978.232413][T19201] bridge0: port 1(bridge_slave_0) entered disabled state
[  978.239778][T19201] bridge_slave_0: entered allmulticast mode
[  978.275979][T19201] bridge_slave_0: entered promiscuous mode
[  978.298903][T19201] bridge0: port 2(bridge_slave_1) entered blocking state
[  978.314403][T19201] bridge0: port 2(bridge_slave_1) entered disabled state
[  978.321801][T19201] bridge_slave_1: entered allmulticast mode
[  978.352653][T19201] bridge_slave_1: entered promiscuous mode
[  978.445665][T19201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  978.479247][T19201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  978.581956][T19201] team0: Port device team_slave_0 added
[  978.614357][T19201] team0: Port device team_slave_1 added
[  978.695241][T19201] batman_adv: batadv0: Adding interface: batadv_slave_0
[  978.714742][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.772292][T19201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  978.802449][T19201] batman_adv: batadv0: Adding interface: batadv_slave_1
[  978.809468][T19201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  978.853883][T13746] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  978.872799][T13746] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  978.881388][T13746] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  978.896548][T13746] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  978.904975][T13746] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  978.913086][T13746] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  978.954318][T19201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  979.702464][T13746] Bluetooth: hci12: command tx timeout
[  980.992375][T13746] Bluetooth: hci13: command tx timeout
[  981.782533][T13746] Bluetooth: hci12: command tx timeout
[  981.890912][ T5768] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  981.903932][ T5768] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  981.912348][ T5768] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  981.924929][ T5768] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  981.935710][ T5768] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  981.944733][ T5768] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  982.059767][T13746] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  982.071613][T13746] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  982.080566][T13746] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  982.100842][T13746] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  982.109808][T13746] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  982.117480][T13746] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  983.062632][T13746] Bluetooth: hci13: command tx timeout
[  983.862519][T13746] Bluetooth: hci12: command tx timeout
[  984.022654][T13746] Bluetooth: hci14: command tx timeout
[  988.238318][ T5768] Bluetooth: hci13: command tx timeout
[  988.244177][ T5768] Bluetooth: hci12: command tx timeout
[  988.249720][ T5768] Bluetooth: hci14: command tx timeout
[  988.256163][T13746] Bluetooth: hci15: command tx timeout
[  994.569469][ T5768] Bluetooth: hci13: command tx timeout
[  994.575128][ T5768] Bluetooth: hci14: command tx timeout
[  994.580667][ T5768] Bluetooth: hci15: command tx timeout
[ 1000.678606][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1000.685040][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1000.707962][T19220] Bluetooth: hci15: command tx timeout
[ 1000.714301][T19220] Bluetooth: hci14: command tx timeout
[ 1000.719846][T19220] Bluetooth: hci7: command 0x0406 tx timeout
[ 1000.727629][T19220] Bluetooth: hci6: command 0x0406 tx timeout
[ 1000.734612][T19220] Bluetooth: hci4: command 0x0406 tx timeout
[ 1000.740677][T19220] Bluetooth: hci5: command 0x0406 tx timeout
[ 1002.822655][T19223] Bluetooth: hci15: command tx timeout
[ 1015.782434][   T29] INFO: task syz-executor:14640 blocked for more than 142 seconds.
[ 1015.791135][   T29]       Not tainted syzkaller #0
[ 1015.802304][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1015.831303][   T29] task:syz-executor    state:D stack:21384 pid:14640 ppid:1      flags:0x00004006
[ 1015.845186][   T29] Call Trace:
[ 1015.848617][   T29]  <TASK>
[ 1015.851597][   T29]  __schedule+0x1553/0x45a0
[ 1015.872276][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1015.878385][   T29]  ? lock_chain_count+0x20/0x20
[ 1015.893903][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1015.900028][   T29]  ? asan.module_dtor+0x20/0x20
[ 1015.924089][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1015.929123][   T29]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1015.947522][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1015.957856][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1015.963857][   T29]  schedule+0xbd/0x170
[ 1015.968114][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1015.976381][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1015.982824][   T29]  ? wake_bit_function+0x200/0x200
[ 1015.988248][   T29]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[ 1015.998732][   T29]  ? namespace_unlock+0x1db/0x430
[ 1016.004190][   T29]  ? __lock_acquire+0x7d40/0x7d40
[ 1016.009362][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1016.017271][   T29]  ? shrink_dentry_list+0x68c/0x6a0
[ 1016.023728][   T29]  ? up_write+0x1c3/0x410
[ 1016.028250][   T29]  namespace_unlock+0x243/0x430
[ 1016.036088][   T29]  ? put_mnt_ns+0xda/0x130
[ 1016.040588][   T29]  ? umount_tree+0xe20/0xe20
[ 1016.046230][   T29]  ? umount_mnt+0x2c0/0x2c0
[ 1016.050799][   T29]  ? free_nsproxy+0x4d/0x3c0
[ 1016.064801][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1016.070282][   T29]  ? free_nsproxy+0x4d/0x3c0
[ 1016.075511][   T29]  put_mnt_ns+0xdf/0x130
[ 1016.080092][   T29]  free_nsproxy+0x4d/0x3c0
[ 1016.087107][   T29]  do_exit+0x955/0x2460
[ 1016.091351][   T29]  ? put_task_struct+0xc0/0xc0
[ 1016.097108][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1016.105643][   T29]  ? lock_chain_count+0x20/0x20
[ 1016.110643][   T29]  ? _raw_spin_lock_irq+0xbb/0xf0
[ 1016.116196][   T29]  do_group_exit+0x21b/0x2d0
[ 1016.120859][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1016.128739][   T29]  get_signal+0x12fc/0x13f0
[ 1016.134505][   T29]  arch_do_signal_or_restart+0xc2/0x800
[ 1016.140217][   T29]  ? get_sigframe_size+0x20/0x20
[ 1016.147609][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1016.156015][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1016.161568][   T29]  exit_to_user_mode_loop+0x70/0x110
[ 1016.176783][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1016.186410][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1016.192066][   T29]  do_syscall_64+0x61/0xa0
[ 1016.197510][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1016.204536][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1016.209323][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1016.216249][   T29] RIP: 0033:0x7fb7b0b5d04e
[ 1016.220774][   T29] RSP: 002b:00007fff0b321848 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[ 1016.232166][   T29] RAX: fffffffffffffe00 RBX: 0000555557bbb500 RCX: 00007fb7b0b5d04e
[ 1016.240540][   T29] RDX: 0000000040000000 RSI: 00007fff0b3218ec RDI: ffffffffffffffff
[ 1016.251806][   T29] RBP: 00007fff0b3218ec R08: 0000000000000000 R09: 0000000000000000
[ 1016.260718][   T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000110
[ 1016.271559][   T29] R13: 0000555557bce9f0 R14: 00000000000cde2c R15: 00007fff0b321940
[ 1016.281732][   T29]  </TASK>
[ 1016.291165][   T29] INFO: task syz.4.3425:19126 blocked for more than 143 seconds.
[ 1016.302644][   T29]       Not tainted syzkaller #0
[ 1016.307905][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1016.319452][   T29] task:syz.4.3425      state:D stack:27016 pid:19126 ppid:15618  flags:0x00004004
[ 1016.329202][   T29] Call Trace:
[ 1016.333016][   T29]  <TASK>
[ 1016.336055][   T29]  __schedule+0x1553/0x45a0
[ 1016.340643][   T29]  ? lock_chain_count+0x20/0x20
[ 1016.348003][   T29]  ? asan.module_dtor+0x20/0x20
[ 1016.353419][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1016.358168][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1016.367248][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1016.374195][   T29]  schedule+0xbd/0x170
[ 1016.378438][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1016.387956][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1016.396994][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1016.401934][   T29]  ? perf_event_ctx_lock_nested+0x3b9/0x490
[ 1016.412249][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1016.417281][   T29]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[ 1016.425706][   T29]  perf_event_ctx_lock_nested+0x3b9/0x490
[ 1016.431672][   T29]  ? perf_event_ctx_lock_nested+0xb4/0x490
[ 1016.438680][   T29]  ? perf_event_update_sibling_time+0x4c0/0x4c0
[ 1016.447818][   T29]  ? perf_remove_from_owner+0x444/0x4f0
[ 1016.454078][   T29]  ? perf_remove_from_owner+0x22/0x4f0
[ 1016.459884][   T29]  ? perf_mmap+0x15c0/0x15c0
[ 1016.467212][   T29]  perf_event_release_kernel+0x1a0/0x8d0
[ 1016.473686][   T29]  ? __might_sleep+0xe0/0xe0
[ 1016.478649][   T29]  ? calc_timer_values+0x400/0x400
[ 1016.487490][   T29]  ? __fput+0x61c/0x970
[ 1016.491832][   T29]  ? perf_mmap+0x15c0/0x15c0
[ 1016.498783][   T29]  perf_release+0x3b/0x40
[ 1016.511162][   T29]  __fput+0x234/0x970
[ 1016.517068][   T29]  task_work_run+0x1d4/0x260
[ 1016.522000][   T29]  ? task_work_cancel+0x220/0x220
[ 1016.535143][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1016.542086][   T29]  exit_to_user_mode_loop+0xe6/0x110
[ 1016.548055][   T29]  exit_to_user_mode_prepare+0xee/0x180
[ 1016.556567][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[ 1016.562586][   T29]  do_syscall_64+0x61/0xa0
[ 1016.567422][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1016.572157][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1016.580049][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1016.587270][   T29] RIP: 0033:0x7fd98099c819
[ 1016.591767][   T29] RSP: 002b:00007ffec28e53a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1016.603344][   T29] RAX: 0000000000000000 RBX: 00007fd980c17da0 RCX: 00007fd98099c819
[ 1016.617699][   T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1016.631538][   T29] RBP: 00007fd980c17da0 R08: 0000000000000006 R09: 0000000000000000
[ 1016.640126][   T29] R10: 00007fd980c17cb0 R11: 0000000000000246 R12: 00000000000cd325
[ 1016.650902][   T29] R13: 00007fd980c1609c R14: 00000000000cd064 R15: 00007ffec28e54b0
[ 1016.659464][   T29]  </TASK>
[ 1016.665023][   T29] INFO: task syz.1.3429:19153 blocked for more than 143 seconds.
[ 1016.673929][   T29]       Not tainted syzkaller #0
[ 1016.678930][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1016.690580][   T29] task:syz.1.3429      state:D stack:29096 pid:19153 ppid:13745  flags:0x00004004
[ 1016.700421][   T29] Call Trace:
[ 1016.706277][   T29]  <TASK>
[ 1016.709582][   T29]  __schedule+0x1553/0x45a0
[ 1016.714749][   T29]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1016.721517][   T29]  ? asan.module_dtor+0x20/0x20
[ 1016.727258][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1016.732087][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1016.747490][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1016.756146][   T29]  schedule+0xbd/0x170
[ 1016.760290][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1016.766670][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1016.771512][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1016.778802][   T29]  ? perf_trace_init+0x50/0x2d0
[ 1016.784265][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1016.790576][   T29]  perf_trace_init+0x50/0x2d0
[ 1016.798203][   T29]  ? perf_tp_event_init+0x7c/0x110
[ 1016.803995][   T29]  perf_tp_event_init+0x8d/0x110
[ 1016.809632][   T29]  perf_try_init_event+0x12b/0x3c0
[ 1016.817574][   T29]  perf_event_alloc+0xfa4/0x21b0
[ 1016.823328][   T29]  ? perf_event_alloc+0xc06/0x21b0
[ 1016.828725][   T29]  ? find_lively_task_by_vpid+0x19/0x290
[ 1016.837003][   T29]  __se_sys_perf_event_open+0x740/0x1c50
[ 1016.845082][   T29]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1016.850800][   T29]  ? lock_chain_count+0x20/0x20
[ 1016.865424][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1016.870788][   T29]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1016.878961][   T29]  do_syscall_64+0x55/0xa0
[ 1016.883813][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1016.888560][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1016.896034][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1016.902077][   T29] RIP: 0033:0x7ff52719c819
[ 1016.907671][   T29] RSP: 002b:00007ff527f8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1016.918870][   T29] RAX: ffffffffffffffda RBX: 00007ff527415fa0 RCX: 00007ff52719c819
[ 1016.927384][   T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500
[ 1016.937739][   T29] RBP: 00007ff527232c91 R08: 0000000000000003 R09: 0000000000000000
[ 1016.946286][   T29] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1016.958426][   T29] R13: 00007ff527416038 R14: 00007ff527415fa0 R15: 00007ffe6d46ec18
[ 1016.970253][   T29]  </TASK>
[ 1016.980067][   T29] INFO: task syz.1.3429:19156 blocked for more than 144 seconds.
[ 1016.991003][   T29]       Not tainted syzkaller #0
[ 1016.998354][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1017.007523][   T29] task:syz.1.3429      state:D stack:26120 pid:19156 ppid:13745  flags:0x00004004
[ 1017.019271][   T29] Call Trace:
[ 1017.022933][   T29]  <TASK>
[ 1017.025941][   T29]  __schedule+0x1553/0x45a0
[ 1017.030638][   T29]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1017.040607][   T29]  ? asan.module_dtor+0x20/0x20
[ 1017.045987][   T29]  ? __mutex_lock+0x6a4/0xcc0
[ 1017.050742][   T29]  ? __mutex_trylock_common+0x8a/0x260
[ 1017.058921][   T29]  ? trace_raw_output_contention_end+0xd0/0xd0
[ 1017.066950][   T29]  schedule+0xbd/0x170
[ 1017.071215][   T29]  schedule_preempt_disabled+0x13/0x20
[ 1017.082337][   T29]  __mutex_lock+0x6a9/0xcc0
[ 1017.086956][   T29]  ? __mutex_lock+0x4f9/0xcc0
[ 1017.091828][   T29]  ? perf_trace_init+0x50/0x2d0
[ 1017.102939][   T29]  ? mutex_lock_nested+0x20/0x20
[ 1017.108167][   T29]  perf_trace_init+0x50/0x2d0
[ 1017.113549][   T29]  ? perf_tp_event_init+0x7c/0x110
[ 1017.118935][   T29]  perf_tp_event_init+0x8d/0x110
[ 1017.126739][   T29]  perf_try_init_event+0x12b/0x3c0
[ 1017.132130][   T29]  perf_event_alloc+0xfa4/0x21b0
[ 1017.138109][   T29]  ? perf_event_alloc+0xc06/0x21b0
[ 1017.143997][   T29]  ? find_lively_task_by_vpid+0x19/0x290
[ 1017.149721][   T29]  __se_sys_perf_event_open+0x740/0x1c50
[ 1017.158146][   T29]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1017.164293][   T29]  ? lock_chain_count+0x20/0x20
[ 1017.169319][   T29]  ? lockdep_hardirqs_on+0x98/0x150
[ 1017.178650][   T29]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1017.189188][   T29]  do_syscall_64+0x55/0xa0
[ 1017.196082][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1017.201012][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1017.209013][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1017.217745][   T29] RIP: 0033:0x7ff52719c819
[ 1017.222715][   T29] RSP: 002b:00007ff524fd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1017.231230][   T29] RAX: ffffffffffffffda RBX: 00007ff527416270 RCX: 00007ff52719c819
[ 1017.241967][   T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500
[ 1017.250718][   T29] RBP: 00007ff527232c91 R08: 0000000000000000 R09: 0000000000000000
[ 1017.261458][   T29] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1017.270163][   T29] R13: 00007ff527416308 R14: 00007ff527416270 R15: 00007ffe6d46ec18
[ 1017.281061][   T29]  </TASK>
[ 1017.284864][   T29] INFO: task dhcpcd:19171 blocked for more than 144 seconds.
[ 1017.298916][   T29]       Not tainted syzkaller #0
[ 1017.304737][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1017.318425][   T29] task:dhcpcd          state:D stack:24968 pid:19171 ppid:5433   flags:0x00004002
[ 1017.330903][   T29] Call Trace:
[ 1017.336796][   T29]  <TASK>
[ 1017.340232][   T29]  __schedule+0x1553/0x45a0
[ 1017.345371][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1017.351511][   T29]  ? lock_chain_count+0x20/0x20
[ 1017.357106][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1017.365447][   T29]  ? asan.module_dtor+0x20/0x20
[ 1017.370368][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1017.375878][   T29]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1017.380980][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1017.388935][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1017.394927][   T29]  schedule+0xbd/0x170
[ 1017.399077][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1017.411225][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1017.417959][   T29]  ? wake_bit_function+0x200/0x200
[ 1017.428082][   T29]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1017.436183][   T29]  ? verify_lock_unused+0x140/0x140
[ 1017.441877][   T29]  ? perf_trace_lock_acquire+0x104/0x410
[ 1017.450044][   T29]  ? __might_sleep+0xe0/0xe0
[ 1017.455168][   T29]  ? __lock_acquire+0x7d40/0x7d40
[ 1017.460351][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1017.467566][   T29]  __unregister_prot_hook+0x3eb/0x540
[ 1017.473580][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1017.479289][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1017.486734][   T29]  packet_do_bind+0x52b/0xcc0
[ 1017.491527][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1017.497114][   T29]  __sys_bind+0x2f0/0x3f0
[ 1017.501526][   T29]  ? __ia32_sys_socketpair+0xb0/0xb0
[ 1017.507595][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1017.522287][   T29]  __x64_sys_bind+0x7a/0x90
[ 1017.527114][   T29]  do_syscall_64+0x55/0xa0
[ 1017.531774][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1017.541560][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1017.547607][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1017.555996][   T29] RIP: 0033:0x7f179a2662d7
[ 1017.560481][   T29] RSP: 002b:00007ffe0fe25768 EFLAGS: 00000213 ORIG_RAX: 0000000000000031
[ 1017.569605][   T29] RAX: ffffffffffffffda RBX: 0000560a2cdbe530 RCX: 00007f179a2662d7
[ 1017.580005][   T29] RDX: 0000000000000014 RSI: 00007ffe0fe25780 RDI: 0000000000000003
[ 1017.588638][   T29] RBP: 00005609fac8e4b0 R08: 00007f179a335ac0 R09: 0000000000000000
[ 1017.599221][   T29] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000
[ 1017.607822][   T29] R13: 0000560a2cdb8720 R14: 0000000000000000 R15: 00005609faca3ac0
[ 1017.618396][   T29]  </TASK>
[ 1017.621484][   T29] INFO: task dhcpcd:19172 blocked for more than 144 seconds.
[ 1017.629626][   T29]       Not tainted syzkaller #0
[ 1017.641921][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1017.655092][   T29] task:dhcpcd          state:D stack:24968 pid:19172 ppid:5433   flags:0x00004002
[ 1017.667848][   T29] Call Trace:
[ 1017.671245][   T29]  <TASK>
[ 1017.674837][   T29]  __schedule+0x1553/0x45a0
[ 1017.679429][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1017.688021][   T29]  ? lock_chain_count+0x20/0x20
[ 1017.693458][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1017.699419][   T29]  ? asan.module_dtor+0x20/0x20
[ 1017.707053][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1017.711994][   T29]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1017.717656][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1017.725554][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1017.731088][   T29]  schedule+0xbd/0x170
[ 1017.736388][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1017.742803][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1017.748953][   T29]  ? wake_bit_function+0x200/0x200
[ 1017.760550][   T29]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1017.770235][   T29]  ? verify_lock_unused+0x140/0x140
[ 1017.778784][   T29]  ? perf_trace_lock_acquire+0x104/0x410
[ 1017.785149][   T29]  ? __might_sleep+0xe0/0xe0
[ 1017.789851][   T29]  ? __lock_acquire+0x7d40/0x7d40
[ 1017.797313][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1017.802182][   T29]  __unregister_prot_hook+0x3eb/0x540
[ 1017.808878][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1017.814749][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1017.819570][   T29]  packet_do_bind+0x52b/0xcc0
[ 1017.826705][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1017.831828][   T29]  __sys_bind+0x2f0/0x3f0
[ 1017.836942][   T29]  ? __ia32_sys_socketpair+0xb0/0xb0
[ 1017.844690][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1017.850953][   T29]  __x64_sys_bind+0x7a/0x90
[ 1017.856043][   T29]  do_syscall_64+0x55/0xa0
[ 1017.860512][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1017.878796][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1017.888973][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1017.895316][   T29] RIP: 0033:0x7f179a2662d7
[ 1017.899869][   T29] RSP: 002b:00007ffe0fe25768 EFLAGS: 00000213 ORIG_RAX: 0000000000000031
[ 1017.910841][   T29] RAX: ffffffffffffffda RBX: 0000560a2cdbe530 RCX: 00007f179a2662d7
[ 1017.919717][   T29] RDX: 0000000000000014 RSI: 00007ffe0fe25780 RDI: 0000000000000003
[ 1017.930547][   T29] RBP: 00005609fac8e4b0 R08: 00007f179a335ac0 R09: 0000000000000000
[ 1017.939450][   T29] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000
[ 1017.949960][   T29] R13: 0000560a2cdb8550 R14: 0000000000000000 R15: 00005609faca3ac0
[ 1017.958420][   T29]  </TASK>
[ 1017.961517][   T29] INFO: task dhcpcd:19173 blocked for more than 145 seconds.
[ 1017.970577][   T29]       Not tainted syzkaller #0
[ 1017.977976][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1017.991707][   T29] task:dhcpcd          state:D stack:23944 pid:19173 ppid:5433   flags:0x00004002
[ 1018.006288][   T29] Call Trace:
[ 1018.009629][   T29]  <TASK>
[ 1018.015327][   T29]  __schedule+0x1553/0x45a0
[ 1018.019972][   T29]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1018.031127][   T29]  ? lock_chain_count+0x20/0x20
[ 1018.036630][   T29]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[ 1018.045030][   T29]  ? asan.module_dtor+0x20/0x20
[ 1018.049987][   T29]  ? _raw_spin_unlock+0x40/0x40
[ 1018.055759][   T29]  ? do_raw_spin_lock+0x11f/0x2c0
[ 1018.060951][   T29]  ? prepare_to_wait_event+0x3db/0x470
[ 1018.067207][   T29]  ? prepare_to_wait_event+0x434/0x470
[ 1018.075320][   T29]  schedule+0xbd/0x170
[ 1018.079565][   T29]  synchronize_rcu_expedited+0x79f/0x880
[ 1018.085818][   T29]  ? schedule_delayed_monitor_work+0x40/0x40
[ 1018.091865][   T29]  ? wake_bit_function+0x200/0x200
[ 1018.103174][   T29]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1018.109864][   T29]  ? verify_lock_unused+0x140/0x140
[ 1018.120834][   T29]  ? perf_trace_lock_acquire+0x104/0x410
[ 1018.128095][   T29]  ? __might_sleep+0xe0/0xe0
[ 1018.135398][   T29]  ? __lock_acquire+0x7d40/0x7d40
[ 1018.140528][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1018.146192][   T29]  __unregister_prot_hook+0x3eb/0x540
[ 1018.151641][   T29]  ? do_raw_spin_unlock+0x121/0x230
[ 1018.159840][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1018.165056][   T29]  packet_do_bind+0x52b/0xcc0
[ 1018.169792][   T29]  ? packet_do_bind+0x98/0xcc0
[ 1018.177273][   T29]  __sys_bind+0x2f0/0x3f0
[ 1018.181673][   T29]  ? __ia32_sys_socketpair+0xb0/0xb0
[ 1018.187634][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[ 1018.194594][   T29]  __x64_sys_bind+0x7a/0x90
[ 1018.199336][   T29]  do_syscall_64+0x55/0xa0
[ 1018.210613][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1018.216245][   T29]  ? clear_bhb_loop+0x40/0x90
[ 1018.221086][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1018.232910][   T29] RIP: 0033:0x7f179a2662d7
[ 1018.237411][   T29] RSP: 002b:00007ffe0fe25768 EFLAGS: 00000213 ORIG_RAX: 0000000000000031
[ 1018.249997][   T29] RAX: ffffffffffffffda RBX: 0000560a2cdbe530 RCX: 00007f179a2662d7
[ 1018.258718][   T29] RDX: 0000000000000014 RSI: 00007ffe0fe25780 RDI: 0000000000000003
[ 1018.270702][   T29] RBP: 00005609fac8e4b0 R08: 00007f179a335ac0 R09: 0000000000000000
[ 1018.279126][   T29] R10: 0000000000000002 R11: 0000000000000213 R12: 0000000000000000
[ 1018.289737][   T29] R13: 0000560a2cdb7fe0 R14: 0000000000000000 R15: 00005609faca3ac0
[ 1018.298330][   T29]  </TASK>
[ 1018.301433][   T29] 
[ 1018.301433][   T29] Showing all locks held in the system:
[ 1018.311540][   T29] 3 locks held by kworker/1:0/23:
[ 1018.320097][   T29] 1 lock held by khungtaskd/29:
[ 1018.327413][   T29]  #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[ 1018.340399][   T29] 5 locks held by kworker/u5:0/51:
[ 1018.350559][   T29]  #0: ffff888031849138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.366165][   T29]  #1: ffffc90000bc7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.379267][   T29]  #2: ffff888056bfce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380
[ 1018.391716][   T29]  #3: ffff888056bfc0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0
[ 1018.402106][   T29]  #4: ffffffff8e530468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300
[ 1018.413095][   T29] 3 locks held by kworker/1:2/787:
[ 1018.418346][   T29]  #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.435119][   T29]  #1: ffffc90003d97d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.451751][   T29]  #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20
[ 1018.464815][   T29] 2 locks held by kworker/0:2/1193:
[ 1018.470157][   T29]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.484099][   T29]  #1: ffffc90004d9fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.498577][   T29] 3 locks held by kworker/u4:8/4332:
[ 1018.504264][   T29]  #0: ffff88802c85bd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.518320][   T29]  #1: ffffc9000e867d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.534998][   T29]  #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[ 1018.546093][   T29] 2 locks held by dhcpcd/5432:
[ 1018.550932][   T29]  #0: ffff888019a96690 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810
[ 1018.570942][   T29]  #1: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0x78f/0xe50
[ 1018.580951][   T29] 2 locks held by getty/5527:
[ 1018.588010][   T29]  #0: ffff88802dafb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1018.600348][   T29]  #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390
[ 1018.613793][   T29] 5 locks held by kworker/u5:2/5768:
[ 1018.619267][   T29]  #0: ffff888025897138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.631493][   T29]  #1: ffffc9000462fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.647108][   T29]  #2: ffff88804a08ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380
[ 1018.658409][   T29]  #3: ffff88804a08c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0
[ 1018.670465][   T29]  #4: ffffffff8e530468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300
[ 1018.686154][   T29] 3 locks held by kworker/1:7/12946:
[ 1018.691782][   T29] 3 locks held by kworker/u4:24/13450:
[ 1018.699486][   T29]  #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.716257][   T29]  #1: ffffc9000505fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.728120][   T29]  #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60
[ 1018.739623][   T29] 6 locks held by kworker/u5:1/13746:
[ 1018.745486][   T29]  #0: ffff88802f96d538 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.759032][   T29]  #1: ffffc9000ba6fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1018.774559][   T29]  #2: ffff88804a088e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380
[ 1018.786241][   T29]  #3: ffff88804a0880b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0
[ 1018.802962][   T29]  #4: ffffffff8e530468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300
[ 1018.813612][   T29]  #5: ffff88807a9e7338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660
[ 1018.827670][   T29] 1 lock held by syz.4.3425/19126:
[ 1018.833623][   T29]  #0: ffff88805dc9fca8 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b9/0x490
[ 1018.844646][   T29] 12 locks held by syz.4.3425/19129:
[ 1018.849980][   T29] 2 locks held by syz.0.3427/19139:
[ 1018.857807][   T29]  #0: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140
[ 1018.868065][   T29]  #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[ 1018.881468][   T29] 1 lock held by syz.3.3428/19147:
[ 1018.887026][   T29]  #0: ffffffff8d137980 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x580
[ 1018.900761][   T29] 2 locks held by syz.1.3429/19152:
[ 1018.911967][   T29]  #0: ffff8880601a8220 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230
[ 1018.925509][   T29]  #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880
[ 1018.939104][   T29] 2 locks held by syz.1.3429/19153:
[ 1018.946692][   T29]  #0: ffffffff9731bc30 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xc06/0x21b0
[ 1018.956849][   T29]  #1: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x50/0x2d0
[ 1018.968696][   T29] 2 locks held by syz.1.3429/19156:
[ 1018.974327][   T29]  #0: ffffffff9731bc30 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xc06/0x21b0
[ 1018.996813][   T29]  #1: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x50/0x2d0
[ 1019.007983][   T29] 1 lock held by dhcpcd/19171:
[ 1019.019573][   T29]  #0: ffff888048404130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.031377][   T29] 1 lock held by dhcpcd/19172:
[ 1019.038824][   T29]  #0: ffff88801e32c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.051347][   T29] 1 lock held by dhcpcd/19173:
[ 1019.058819][   T29]  #0: ffff88807e71c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.072027][   T29] 1 lock held by dhcpcd/19174:
[ 1019.077334][   T29]  #0: ffff88801ff66130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.090032][   T29] 1 lock held by dhcpcd/19175:
[ 1019.095754][   T29]  #0: ffff8880214bc130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.107825][   T29] 1 lock held by dhcpcd/19176:
[ 1019.114333][   T29]  #0: ffff88804964a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.131136][   T29] 1 lock held by dhcpcd/19177:
[ 1019.136478][   T29]  #0: ffff88806c8f4130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.149223][   T29] 1 lock held by dhcpcd/19178:
[ 1019.157142][   T29]  #0: ffff888041152130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.169873][   T29] 1 lock held by dhcpcd/19179:
[ 1019.175214][   T29]  #0: ffff888041baa130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.187790][   T29] 1 lock held by dhcpcd/19180:
[ 1019.193270][   T29]  #0: ffff88807a19c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0
[ 1019.205617][   T29] 1 lock held by syz-executor/19182:
[ 1019.210959][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.221169][   T29] 1 lock held by syz-executor/19189:
[ 1019.230789][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.249618][   T29] 1 lock held by syz-executor/19193:
[ 1019.255807][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.270233][   T29] 1 lock held by syz-executor/19196:
[ 1019.276050][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.288003][   T29] 1 lock held by syz-executor/19201:
[ 1019.293779][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.303954][   T29] 1 lock held by syz-executor/19212:
[ 1019.309292][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.321670][   T29] 1 lock held by syz-executor/19216:
[ 1019.327638][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.341458][   T29] 1 lock held by syz-executor/19218:
[ 1019.347297][   T29]  #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0
[ 1019.362974][   T29] 5 locks held by kworker/u5:5/19222:
[ 1019.368530][   T29]  #0: ffff88802f194538 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1019.387699][   T29]  #1: ffffc90003b67d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0
[ 1019.402484][   T29]  #2: ffff888078900e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380
[ 1019.415061][   T29]  #3: ffff8880789000b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0
[ 1019.425890][   T29]  #4: ffffffff8e530468 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300
[ 1019.438667][   T29] 
[ 1019.441530][   T29] =============================================
[ 1019.441530][   T29] 
[ 1019.451964][   T29] NMI backtrace for cpu 0
[ 1019.456362][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1019.463880][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1019.474162][   T29] Call Trace:
[ 1019.477756][   T29]  <TASK>
[ 1019.480779][   T29]  dump_stack_lvl+0x18c/0x250
[ 1019.485606][   T29]  ? nmi_cpu_backtrace+0x1b6/0x3e0
[ 1019.490872][   T29]  ? show_regs_print_info+0x20/0x20
[ 1019.496124][   T29]  ? load_image+0x420/0x420
[ 1019.500723][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[ 1019.505726][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[ 1019.511989][   T29]  ? _printk+0xde/0x130
[ 1019.516303][   T29]  ? load_image+0x420/0x420
[ 1019.520853][   T29]  ? load_image+0x420/0x420
[ 1019.525497][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[ 1019.532073][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[ 1019.538094][   T29]  watchdog+0xf3d/0xf80
[ 1019.542389][   T29]  ? watchdog+0x1e1/0xf80
[ 1019.546860][   T29]  kthread+0x2fa/0x390
[ 1019.551049][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1019.556214][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1019.560843][   T29]  ret_from_fork+0x48/0x80
[ 1019.565469][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1019.570298][   T29]  ret_from_fork_asm+0x11/0x20
[ 1019.575157][   T29]  </TASK>
[ 1019.578797][   T29] Sending NMI from CPU 0 to CPUs 1:
[ 1019.584211][    C1] NMI backtrace for cpu 1
[ 1019.584224][    C1] CPU: 1 PID: 19129 Comm: syz.4.3425 Not tainted syzkaller #0
[ 1019.584241][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1019.584248][    C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x2e/0x90
[ 1019.584273][    C1] Code: 48 8b 04 24 65 48 8b 15 30 92 7c 7e 65 8b 0d 31 92 7c 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 <74> 52 8b 8a f8 15 00 00 83 f9 03 75 47 48 8b 8a 00 16 00 00 44 8b
[ 1019.584285][    C1] RSP: 0018:ffffc900001ef1e8 EFLAGS: 00000046
[ 1019.584299][    C1] RAX: ffffffff813b39d7 RBX: ffffffff81000000 RCX: 0000000000000100
[ 1019.584310][    C1] RDX: ffff888024f30000 RSI: 000000000007fb53 RDI: 000000000009c000
[ 1019.584319][    C1] RBP: 000000000009c000 R08: ffff888024f30000 R09: 0000000000000003
[ 1019.584329][    C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001ef320
[ 1019.584339][    C1] R13: dffffc0000000000 R14: ffffc900001ef355 R15: 000000000007fb53
[ 1019.584349][    C1] FS:  00007fd9819066c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[ 1019.584362][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1019.584373][    C1] CR2: 0000556923326ed8 CR3: 000000004cdec000 CR4: 00000000003506e0
[ 1019.584388][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300
[ 1019.584397][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1019.584406][    C1] Call Trace:
[ 1019.584413][    C1]  <IRQ>
[ 1019.584417][    C1]  unwind_next_frame+0x217/0x2970
[ 1019.584438][    C1]  ? ip_sublist_rcv+0xa4b/0xd70
[ 1019.584460][    C1]  ? ip_sublist_rcv+0xa4c/0xd70
[ 1019.584481][    C1]  ? ip_sublist_rcv+0xa4c/0xd70
[ 1019.584500][    C1]  perf_callchain_kernel+0x42e/0x690
[ 1019.584526][    C1]  ? arch_perf_update_userpage+0x3c0/0x3c0
[ 1019.584550][    C1]  ? ip_sublist_rcv+0xa4c/0xd70
[ 1019.584573][    C1]  ? get_callchain_entry+0x185/0x3c0
[ 1019.584591][    C1]  get_perf_callchain+0x231/0x510
[ 1019.584607][    C1]  ? put_callchain_entry+0xb0/0xb0
[ 1019.584621][    C1]  ? mark_lock+0x94/0x320
[ 1019.584640][    C1]  ? __perf_event_header__init_id+0x3be/0x480
[ 1019.584659][    C1]  perf_prepare_sample+0x3c7/0x1df0
[ 1019.584679][    C1]  ? read_lock_is_recursive+0x20/0x20
[ 1019.584695][    C1]  ? perf_callchain+0x220/0x220
[ 1019.584710][    C1]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1019.584736][    C1]  perf_event_output_forward+0x187/0x3e0
[ 1019.584752][    C1]  ? perf_event_output_forward+0xb9/0x3e0
[ 1019.584768][    C1]  ? perf_prepare_header+0x1e0/0x1e0
[ 1019.584783][    C1]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[ 1019.584811][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[ 1019.584830][    C1]  __perf_event_overflow+0x447/0x630
[ 1019.584851][    C1]  perf_swevent_event+0x319/0x570
[ 1019.584869][    C1]  ? perf_tp_event+0x1520/0x1520
[ 1019.584885][    C1]  ? perf_trace_buf_alloc+0x290/0x290
[ 1019.584909][    C1]  perf_tp_event+0x5f9/0x1520
[ 1019.584929][    C1]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[ 1019.584969][    C1]  ? kvm_sched_clock_read+0x11/0x20
[ 1019.584987][    C1]  ? sched_clock_cpu+0x75/0x430
[ 1019.585009][    C1]  ? lapic_next_event+0x11/0x20
[ 1019.585025][    C1]  ? clockevents_program_event+0x230/0x310
[ 1019.585045][    C1]  perf_trace_run_bpf_submit+0xf4/0x1c0
[ 1019.585066][    C1]  perf_trace_preemptirq_template+0x269/0x330
[ 1019.585088][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.585107][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[ 1019.585126][    C1]  ? __irq_exit_rcu+0xdf/0x190
[ 1019.585140][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1019.585157][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.585176][    C1]  trace_irq_enable+0xbb/0xe0
[ 1019.585195][    C1]  trace_hardirqs_on+0x18/0x40
[ 1019.585212][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.585229][    C1] RIP: 0010:kasan_quarantine_put+0x88/0x220
[ 1019.585250][    C1] Code: e8 4d 2f ae ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 83 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 48 8d 80 c0 7a 03 00 45
[ 1019.585261][    C1] RSP: 0018:ffffc900001efce0 EFLAGS: 00000206
[ 1019.585273][    C1] RAX: 85a32d6923638301 RBX: ffff888064ea2b40 RCX: 85a32d6923638300
[ 1019.585283][    C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60
[ 1019.585293][    C1] RBP: ffff888064ea2b40 R08: ffffffff911c55cf R09: 1ffffffff2238ab9
[ 1019.585303][    C1] R10: dffffc0000000000 R11: fffffbfff2238aba R12: 0000000000000000
[ 1019.585312][    C1] R13: ffffc900001efd78 R14: 00000000000e4bf8 R15: 0000000000000282
[ 1019.585336][    C1]  slab_free_freelist_hook+0x130/0x1a0
[ 1019.585354][    C1]  ? tcp_validate_incoming+0x1178/0x2250
[ 1019.585370][    C1]  kmem_cache_free+0xf8/0x270
[ 1019.585393][    C1]  tcp_validate_incoming+0x1178/0x2250
[ 1019.585416][    C1]  ? inet_sk_rx_dst_set+0x105/0x1d0
[ 1019.585437][    C1]  tcp_rcv_established+0x7de/0x1d20
[ 1019.585451][    C1]  ? rcuref_put+0x1c2/0x220
[ 1019.585476][    C1]  ? rcu_force_quiescent_state+0x230/0x230
[ 1019.585495][    C1]  ? tcp_check_space+0xad0/0xad0
[ 1019.585508][    C1]  ? rt_is_expired+0x1c/0x2d0
[ 1019.585529][    C1]  ? dst_release+0x121/0x1a0
[ 1019.585548][    C1]  tcp_v4_do_rcv+0x4ed/0xb80
[ 1019.585571][    C1]  tcp_v4_rcv+0x23bf/0x2af0
[ 1019.585615][    C1]  ? tcp_filter+0x90/0x90
[ 1019.585639][    C1]  ip_protocol_deliver_rcu+0x20e/0x3f0
[ 1019.585660][    C1]  ? ip_local_deliver_finish+0x1cb/0x510
[ 1019.585681][    C1]  ip_local_deliver_finish+0x2ca/0x510
[ 1019.585706][    C1]  NF_HOOK+0x32d/0x3b0
[ 1019.585727][    C1]  ? NF_HOOK+0x3b0/0x3b0
[ 1019.585744][    C1]  ? NF_HOOK+0x9f/0x3b0
[ 1019.585762][    C1]  ? ip_local_deliver+0x1b0/0x1b0
[ 1019.585783][    C1]  ? NF_HOOK+0x3b0/0x3b0
[ 1019.585804][    C1]  ? ip_local_deliver+0x122/0x1b0
[ 1019.585826][    C1]  ip_sublist_rcv+0xa4c/0xd70
[ 1019.585844][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1019.585867][    C1]  ? ip_list_rcv+0x440/0x440
[ 1019.585890][    C1]  ? ip_rcv_core+0xdb0/0xdb0
[ 1019.585916][    C1]  ip_list_rcv+0x3f2/0x440
[ 1019.585934][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.585957][    C1]  ? ip_rcv_finish+0x250/0x250
[ 1019.585976][    C1]  ? __netif_receive_skb_list_core+0x576/0x750
[ 1019.586001][    C1]  ? ip_rcv_finish+0x250/0x250
[ 1019.586021][    C1]  __netif_receive_skb_list_core+0x583/0x750
[ 1019.586045][    C1]  ? set_rps_cpu+0x6a0/0x6a0
[ 1019.586058][    C1]  ? read_tsc+0xc/0x20
[ 1019.586080][    C1]  netif_receive_skb_list_internal+0x943/0xca0
[ 1019.586104][    C1]  ? netif_receive_skb_list_internal+0x4b1/0xca0
[ 1019.586122][    C1]  ? dev_gro_receive+0x10ce/0x22c0
[ 1019.586136][    C1]  ? netif_receive_skb_core+0x230/0x230
[ 1019.586164][    C1]  napi_gro_receive+0x565/0xb00
[ 1019.586183][    C1]  receive_buf+0x2203/0x3820
[ 1019.586211][    C1]  ? virtnet_poll_tx+0x530/0x530
[ 1019.586227][    C1]  ? virtqueue_get_buf_ctx+0x697/0xd10
[ 1019.586252][    C1]  virtnet_poll+0x5dd/0x1280
[ 1019.586275][    C1]  ? refill_work+0x220/0x220
[ 1019.586292][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.586319][    C1]  __napi_poll+0xc0/0x460
[ 1019.586337][    C1]  net_rx_action+0x616/0xc40
[ 1019.586361][    C1]  ? net_tx_action+0x980/0x980
[ 1019.586376][    C1]  ? detach_timer+0x2b0/0x2b0
[ 1019.586393][    C1]  ? lock_chain_count+0x20/0x20
[ 1019.586414][    C1]  handle_softirqs+0x280/0x820
[ 1019.586432][    C1]  ? __irq_exit_rcu+0xd3/0x190
[ 1019.586450][    C1]  ? do_softirq+0x1a0/0x1a0
[ 1019.586467][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[ 1019.586487][    C1]  __irq_exit_rcu+0xd3/0x190
[ 1019.586501][    C1]  ? irq_exit_rcu+0x20/0x20
[ 1019.586521][    C1]  irq_exit_rcu+0x9/0x20
[ 1019.586533][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1019.586550][    C1]  </IRQ>
[ 1019.586554][    C1]  <TASK>
[ 1019.586559][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.586576][    C1] RIP: 0010:finish_task_switch+0x26a/0x8f0
[ 1019.586591][    C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 89 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[ 1019.586602][    C1] RSP: 0018:ffffc90003667758 EFLAGS: 00000282
[ 1019.586613][    C1] RAX: 85a32d6923638300 RBX: 0000000000000000 RCX: 85a32d6923638300
[ 1019.586623][    C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60
[ 1019.586633][    C1] RBP: ffffc900036677b0 R08: ffffffff911c55ff R09: 1ffffffff2238abf
[ 1019.586643][    C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: ffff888024f30000
[ 1019.586653][    C1] R13: dffffc0000000000 R14: ffff88801ca43c00 R15: ffff8880b8f3cac8
[ 1019.586674][    C1]  ? finish_task_switch+0x265/0x8f0
[ 1019.586693][    C1]  __schedule+0x155b/0x45a0
[ 1019.586720][    C1]  ? mark_lock+0x94/0x320
[ 1019.586738][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 1019.586756][    C1]  ? lock_chain_count+0x20/0x20
[ 1019.586771][    C1]  ? asan.module_dtor+0x20/0x20
[ 1019.586793][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1019.586810][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1019.586833][    C1]  ? preempt_schedule+0xc0/0xd0
[ 1019.586854][    C1]  preempt_schedule_common+0x82/0xc0
[ 1019.586875][    C1]  preempt_schedule+0xc0/0xd0
[ 1019.586895][    C1]  ? schedule_preempt_disabled+0x20/0x20
[ 1019.586913][    C1]  ? event_function+0x300/0x300
[ 1019.586930][    C1]  ? smp_call_function_single+0x5a0/0x5a0
[ 1019.586951][    C1]  preempt_schedule_thunk+0x1a/0x30
[ 1019.586971][    C1]  ? smp_call_function_single+0x488/0x5a0
[ 1019.586995][    C1]  smp_call_function_single+0x48d/0x5a0
[ 1019.587011][    C1]  ? event_function+0x300/0x300
[ 1019.587029][    C1]  ? flush_smp_call_function_queue+0x250/0x250
[ 1019.587046][    C1]  ? event_function+0x300/0x300
[ 1019.587073][    C1]  perf_install_in_context+0x5be/0x920
[ 1019.587097][    C1]  ? exclusive_event_installable+0x2c0/0x2c0
[ 1019.587114][    C1]  ? add_event_to_ctx+0x1180/0x1180
[ 1019.587142][    C1]  ? anon_inode_getfile+0x109/0x1a0
[ 1019.587161][    C1]  ? perf_event__header_size+0x165/0x220
[ 1019.587181][    C1]  __se_sys_perf_event_open+0x1836/0x1c50
[ 1019.587208][    C1]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1019.587234][    C1]  ? lock_chain_count+0x20/0x20
[ 1019.587255][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[ 1019.587270][    C1]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1019.587288][    C1]  do_syscall_64+0x55/0xa0
[ 1019.587301][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1019.587317][    C1]  ? clear_bhb_loop+0x40/0x90
[ 1019.587335][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1019.587351][    C1] RIP: 0033:0x7fd98099c819
[ 1019.587364][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1019.587374][    C1] RSP: 002b:00007fd981906028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1019.587389][    C1] RAX: ffffffffffffffda RBX: 00007fd980c16090 RCX: 00007fd98099c819
[ 1019.587399][    C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480
[ 1019.587408][    C1] RBP: 00007fd980a32c91 R08: 0000000000000000 R09: 0000000000000000
[ 1019.587418][    C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1019.587427][    C1] R13: 00007fd980c16128 R14: 00007fd980c16090 R15: 00007ffec28e5248
[ 1019.587449][    C1]  </TASK>
[ 1020.681259][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[ 1020.688246][   T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[ 1020.695573][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1020.705924][   T29] Call Trace:
[ 1020.709228][   T29]  <TASK>
[ 1020.712284][   T29]  dump_stack_lvl+0x18c/0x250
[ 1020.717013][   T29]  ? show_regs_print_info+0x20/0x20
[ 1020.722251][   T29]  ? load_image+0x420/0x420
[ 1020.726818][   T29]  panic+0x2dc/0x730
[ 1020.730811][   T29]  ? schedule_preempt_disabled+0x20/0x20
[ 1020.736494][   T29]  ? bpf_jit_dump+0xd0/0xd0
[ 1020.741124][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[ 1020.746714][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[ 1020.752912][   T29]  watchdog+0xf7c/0xf80
[ 1020.757120][   T29]  ? watchdog+0x1e1/0xf80
[ 1020.761491][   T29]  kthread+0x2fa/0x390
[ 1020.765681][   T29]  ? hungtask_pm_notify+0x90/0x90
[ 1020.770828][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1020.775622][   T29]  ret_from_fork+0x48/0x80
[ 1020.780336][   T29]  ? kthread_blkcg+0xd0/0xd0
[ 1020.785042][   T29]  ret_from_fork_asm+0x11/0x20
[ 1020.790006][   T29]  </TASK>
[ 1020.793459][   T29] Kernel Offset: disabled
[ 1020.798577][   T29] Rebooting in 86400 seconds..