last executing test programs:

3.945330515s ago: executing program 0 (id=2648):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x36, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000780)='THAWED\x00', 0x7)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x10, 0x2}, {0x5, 0x2}]}, @const={0xe, 0x0, 0x0, 0xa, 0x4}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x30, 0x61, 0x51]}}, &(0x7f0000000140)=""/49, 0x69, 0x31, 0x0, 0x3}, 0x28)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.9741557s ago: executing program 0 (id=2651):
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26309, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x6, 0xffffffffffffffff}, 0x10808, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0})
r1 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000480), 0x4)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e618294938037e70e4509c5bb515e456df3a53e030d4090003f4b051c0c25135cec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/96, 0x60}, 0x2)
sendmsg$sock(r0, &(0x7f0000000780)={&(0x7f00000002c0)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000380)="e4dc949509581bd8c1821bc97b190fc6427917c83beda45573c27ac52c033adf21b6be7324ddb19cc0a5be434912bf4459dc5bcdc381b4c4c45b5e921f9a26e4f106e989e7e502a7a635b6fe7e575dba5b87742afe12546012fbeacb3507dad9493b1f61c8a23c6685e21a811b5491ab7680d2706bf2f635", 0x78}, {&(0x7f0000000680)="3bc754319a3069eda9150b9d4f8b1c91dd1725400dc8f39787d7a787420f73dce04e9e441350183b7e65c1a4fd10f7d6f8b50029f54c701b69e96be43c598a19d7a7d974f958a99116453df552fe3d4f62d27fb1b269ef43c680f7675ac3df2cfca38b23ba20943ab20f41", 0x6b}, {&(0x7f0000000400)="ce60a9c9e74f649c3266cab15b9e5d07a3786d06f80cd3ecfba03eecdb1a1c2fc1c2032c7c9b28", 0x27}], 0x3, &(0x7f0000000740)=[@txtime={{0x18, 0x1, 0x3d, 0x8000}}], 0x18}, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000010000000000000000080000085000000750000009500000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000800)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r7 = socket$kcm(0x10, 0x4, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="140000003d000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0)
syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008801c00000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x4d, &(0x7f0000000280)=[{&(0x7f0000000040)="a5d956e0df000b63", 0x8}], 0x1}, 0x0)

2.829187719s ago: executing program 1 (id=2652):
r0 = socket$kcm(0x1e, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x21, 0x2, 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x6000000, [{0x4010d, 0x1}, {0x3, 0x3}, {0xb, 0x1}]}]}}, 0x0, 0x3e, 0x0, 0x9, 0x1000}, 0x28)
r1 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000007e23f3d764ff91a0000000dc00000000040000"], 0x18}, 0xfc00)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000009cfdffbb5e04e827e262bbbaff50000000020000eda5605e1da376705c1586b2955041f900090040000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000054873410b74e5796b4a8ce383cd18cd4beab0ee025255bc53a"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180)
socket$kcm(0x1e, 0x4, 0x0)
close(r0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$tipc(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r6)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2')
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x965ac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff)
recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

2.81405984s ago: executing program 3 (id=2653):
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x0, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x7f}}]}}, 0x0, 0x42}, 0x28)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x15, 0x5, 0x0)
bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

2.543169205s ago: executing program 3 (id=2655):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000900)=@caif, 0x80, &(0x7f0000000b00)=[{&(0x7f00000007c0)="51b459cdd458314c3ac962341f77f769ab4f67b98b231586c1a1567a19d3af5ecb02d7e0cc1cf7c3", 0x28}, {&(0x7f0000000980)="1baac8e7ef7c79a0f84b534342dbf682f4083e28d49f672f39dcdde85a61e17a8d5f48caf254f1d572bbe6feee139813763baa518a6a7e46830a6b8e349214a5162749baf5292b899a", 0x49}, {&(0x7f0000000a00)="a564b1df2a5d25", 0x7}, {&(0x7f0000000a40)="a376b3fc8ad069a852c04c0a28c47802544809bf7272629853964f5d7ef0c9d5095805de115511c13bbfcf5088f7f90c22a26c645c8d6d72782401aba8ecb6f802e6d3668d9789dac7632dbd64ee75ff7f29d6b9838bc5e04081bdf6fff6b4428e6a628ddb6bb8363c00bda9e1823c036777bf99ffbada978306e0157f71b8d944c4364fcf2e", 0x86}], 0x4, &(0x7f0000001880)=[{0x98, 0x0, 0x8, "206fb8f17245d5efcbfee51af0673135241623c390a2b662c589dfa398a9071e420e82c0f3db5853b74f176751eab5701a8322b748204968d4932b6c779607c532f82b7c9beabcb46f139097dfec5602388319f3f8cbfdd38d65e5839ab1c8d0969097933fd1071f3d3ef6b793941e7a477513d82540b58cd9057db053bdca4c494d686ce3"}, {0xd0, 0x116, 0x0, "2490bdeee048db41ea7ec58c187b14098ee8ceada567c541507192112df42fae1541681c165b8f4c0e6ebb31e4507fb052fa935f2cdeead1c093b4ef65157f119be4b41bb490b60a448882605cd65921819ff0fd6e66b6fd5f925f74a7e63067e84cdf120bb188693a2ca65ad744849c9f1d123df2b668077f2c1a913e45c93b59d95aa21420137e0c0192da0c2a55ad7df2f4492443abe1472acfc1d1fdb801214695200d6b4a305c37df73fd7ee54a10917bcdbfefb7dd9f158abc7d"}, {0x1010, 0x106, 0x83, "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"}, {0x1010, 0x116, 0x5, "9244b14c1bdd31956b1f0aba6a9e74e26c362e2095cb0f9db347e8a8815eb3f99e4b2ac9a17e1e0c2d618be223afd409042eff1e85f9ebda1fc97c1b8760694eeb6d339772bcb4e151e7e0b13f8a7f1060cdadb58daa86a3a236ad8c472507a1432a23eccbe73c066ce51bde09da24bc999a48129dadb45248d73c3306850483a27d4a802fdc1a5dc7e025f13d3395aca030e6a52a4766df20e1219fc581733cd157956109ff856f7bc1527e4032303b947444e5a6d88b6ed996f08d3d60a10cdbe78c38918b2768203570b7d3ea039ff3959aff8e8b95e5edc6d656b1a6efebbdbd22d95eb0c4f03d491aaf27c5126ed04cc4a641d10cc69e117cb6d39609612d5cad6be5cc2c07ad2130a3f1568a4705ac6a8a76751d0ff2d165b029923424e47b982bdd84488c43f775a5aafe45843c2542be3ce6c35f19e7a96531987408f984c93105d9cc00e3433e2432d5e3674c87ce23beccf3509f1626bc5afbf78f30cdce76e3aac40f9afd0aee62459669820746dbe9102b7f6cebacc7cd6b504797ff3def4899753ed45eeb801ae72d43c2907f2845bb1cc5ae9ecb2c764398fbb32d1f51ccacb55983af3c19b120a7d46f4c0676193435018da6deceb0f3eb9e9797a311017ed61e22af6a2838274cc2d0f8ec4002d53b3d256af5732d75b4f5df4b11a6b1ca3d0a10e8331e1f8c1c80d313ab24457d1a71f1546de75f79583580e412450c32837382f0d35d12ff3fbb7abca80a03cba825a5f2935e78a65421e65b5f81a72151c9f9b43bac743a0bbc4cee69ea0410755b3d86a26761965a5597559fac4a97063f669eb2a7d2792cd742bdbe8847ededeb9f095fc2e46dd976abfdd3ea00ef615e70a9d0905bcfde64c55eed6442f247785682a58b4d163e34b4acd0e759071d58e0f8cecf76a1745576971dc3e833739408517973e0833619b0f527f1e5f99d6eac8f500ab6f554f8c861e3acfb5350588f313c843fb8c2eaff9238d25d563aa1e7a884e8a9d5af8538dfaa41bfb5d01ff55fe371ad3daaee3f1a781b1d1d33031d4a5c33a6c2225526c5f13bee17a95eec3287f89f93c8edd86874b523caed963344d2ad1990b4edaac5c9b91e97a15c0a727d11beb30c1aa307f43a952b34c95b16a966497c4547b7805aed0c3d073e8fcf0aec526425c87a6ec8c89bc901b2a45835ca2d74042ba25cfbe07d565da450e355863edbdb5a33f029a35574f59a0dcfac51196eb4de221588495f1eff5330d55af9238ff3c3df5e8acbe98a7f8a70cb27508a929b7b5af76a0dce1d6636408a5dff67ebaa6ed93fc8239db53456d84775ac48c4eb82a07f19e6bed84a3d84d24bab06ae8485c596d8c656c062ea559a1f9fc9d52144f2456e22e388d5a78d946f5253fa1c468476cff2da34f4a57de1e0fd58db806c7ebe42bed73ae2e1a1e876d2763ebdd6834517bde7a4702c0d284c38194768383adfdf8ee958cc7a3c121382a0052e4c854dd7ca37f5b6c30c759ab6380a76dc128f48f70fd16859345089d6dcfd722592c8270cb74a481827c2ed2a786ee5f9db26920e45b53af307113f954386aa850fb4a1081301cadf95244168867d975616dcfa2d6ffe999a8da02e25f86e909a3a8196306bb1e7f8086c82ce332e4c3fb149498fdb5ee5bd11123389e6e4e732d0f9a3b5a4d45ccdd5f332307994c2ed2b98c810108aa0d46038095919223a968073691ad61f37bae65463a77ae4134ae4b3fb1bb99e39b96dfb256cb5080ad6f1c32dc72900e1b69f5b64e6f4c74f93dda239b7264ec9fdf6f755c1818ef43162a6b028b874a88e70f2f32dc8ca37863866f1131137fc005d49ac8bf1dc3267ca73b23ce524fab423c1fabc57508b672c2f8f96800814ab22efe648f3e3f9b5f68baa651442d486a491843099ff5398eb8304152361a8344baebb8dbd415cbd6250dbb5d9334c6e37d9bf5926f873544ad86ec09fb45dd5521335ff1c92983a5d0b179059a3c8f5b1370777a13eb5481b956fa26d72ef76c71358d53259f7c6ae7a11e458dd108a1647dc61feeb0f898ecbda200c0278adb02a79700b54eef6dd553b1e850524ada40d8923c8cd005cab08bdc838d5736890404d86366da7f2a96e7ee4a53929a985954bb0ff508465cd5bd0fbe590362241fd5bccd19e3529d2a6c5d76c5ba4a1446ba39e856c1195b07c8d6e0002b12d61bc9df9dc4d50fd1d112d47d37422529a7de97661132124ac389595c5bbcb874993134db6749610ddfb2269cb75ad928d03ec3e23744f7874394981a0f724766f1b64fb6e57d6d6dd0241ecba938eb65c97e7d5d42579979d41dec50da5ae88804a5c605f5444f8a222a3a6b556786a4aecc96e0a926eabc9a5032662c1fdfd463a0ee3751363481142a127edb58b1739b53dd1441853d2ed4188579a93d0179c56dc1fe7a8701f3e30d4ed21d6e10dd1f193ffeea3ab05d3d882ab1c1ea0b24dd232829159683bde423828791fce7cd4120f81b583ad593cf3fe5a428bf63abbb81e3294e683545e711175cf425d0c15732ed460948b61c19bb7d5610d2f05d94ec5bcc0bf0291091996638e38bd9881c56318deef9834b0182ce7e50d2d8f4ec0ea9f7f6ce912e7d900be96a7716be3ad7a0715060774b217b249b79472a38ae2c46ecd18a5b21f256101f64886946862482cc5a6dd0f3dce155223b694ec000923d8b1068c440a4f7ec4e9075ad14a7a07b4b0ebbb702831b824aeca019b593034bd5103476536740b18693648a18eca6ba7e3c8ac4ecb1658c48896e9d6c5f543fb13a0d5b522c8f6628ae70107f15bb003185bfcbbf7adf074a17fac332007f1af9186dd0811ea68db4ee51451e95449d4c047a283d04de5a69b6996958f2de742daac4a5cd44ed7563753160c8198191d1da470122039921d7748ef0e378ee43a294e8a69b6fdb93cdb85bad41263718e8ac11cae99c6e2cf3901a04ed9cf4c9a8685e241a32ffcd2200eb6b2249a70e9ef03d1b76eb8d5e54ecdc9b2693e794ca64b2fda1b78ee1fa45c36b70f2d8049dadead562eac946204a775e751065b247a16a3fa206a16e9c646092e69e97f85ebd32b397c9fe4437fb48fa3655dc8be2947fb996b4b9a84995c5c8f9e466f5831a17cbc9e80f6ab0f8eadb7bcf2c5dafeb99e89510d021258174c466eacca17208c3872f6018d0407386f81524ebc0f575c549ede9b53a5ca19eaf620ea75fb410031a7ae1511cb9d4ce25a8cf738bee8248fb4c57174d25c2680d04bcdff2b5a2d7f379d5da572e9076bb2635eb801c58ec4af42f426b4f45955c100ca8ed2ddd4545d4139a8d65b7b3808a645e503e8f2fcfbf0d2ef5cef077e7560e850021d34df1e34a1893e5d1749726a43cc05d0735830297f2da427acd9de269713d9e032acf176d24d4f2cd4620f05d5e94108dc6fb670c410229ac240f7adb41e3914124a54124d52fcf6f4d558ef5488fef1d4e513127d5e7bebf01f7350e065dec430bbaeb01e9452180c00e67262b43c71d7539be10082ecf395231619051f8b80dbc9db58666026c9ec034c4f91847c1eadd042c174c5770c620abafc59026cfb13cd7dcf96c00270cbb4442755a7c7ff8965681cb92d7b01e5ed7025f79e1c8794725bca1e36fd6846fd46c58ec812cc30e2a2ff94bf2f59ea0f5c0e1361d05cc24abb5d3368c734a08d76c8f1792059bbdd6547aa15f7bb6fcd215cf01aa64a8a75cc48d5788ac5859d0da3482b2aae6890b36c0cf7c1927424ca0a8460eaaa41857869bb9da5ec17bb106d0ad13d286b9b63ef2f0f29d5e6a9747377637402258a097d539449243b1019c6fa4fa5bff653ed830f1f720aada6faf25f3e7802c38c54cce862ad48b5a388b2ca2c0c29f40bd7269f3d39af4ec30f14f3ab8f1b1e2e814775628794697d741c752a99a123d6e9466e4f276cd31b6d36cf17704f4ae64de1a6b8442b9c056f18c5182bb3f6ad39c86a1a5a5ecc5b528b97add9687b4604e912643d09af9caa63ead19dd6251ec368cc308e15b58c6bf290a6e99e04a3d9a38d98c668c96c61abca23b92db1602857b0d932e11e97ad613eedbb208b628b7a5975b2449dca5a1895af02cad93f3b3ebda7d4b14656e9dba27486582e9f2e10127fe1c9fd268729c28625796ef1c86d8f6f91fe42d8bbdafcddae127cc8dc9c98066aa50dee50ba597a4c66fe207bdb6daf8351a2b1710217fc6dd99f15888e0d4e7d8a541f113dbf650feb5af3b5d3fa8c8a592293c920c5a40d3ed6e681aa74ef6a0e115ec9e5fe34b46b8ad59f465798fd49d5612b283baf3eabec77e837986b461b422b0ac1bece0845355df9ca3f21a3354b0f564f7da3dc5c6fa55e585dbd33665eb3cdb53fd41eb1bc1628046bff58d32cc5b6af827652799f01762ac9f2fa7b1801dcfc770dc5966f47644e6905a529728368bbad371ecdfa2e30bf17b249fe9562bf020905ec4586f37e45a8d47698310eef52b6b136973d34095974bb101bae8c1b77a3b441b63bd09fc2cf42d9ccd859359a8a92e2e7c32a4efcd557a4328bb9a0ad541c3669efe21086b18fc1da722e4b40d4ffc4d7dcca695054f77408eeb054b92e41abd56952829486cee0f1ae1e2a969da90f5071d35d71709f79a2153201d4f103cc78d939d5b1b99dc450b886d240487236daf69353f2dba1bc3859ee282578e06f35ffd9fbf8560b76f3c23c1d6aff37d0ccd1892ae12dec6a59d8d4c1217c89cdd16846cbfd95976c822a6ec8c060ceef3de03e5e9d67f294c251a0e12cd91c18754f8948e579f05fcd978538ac14e75c0f7cbc280b06ad31412ee29c2ed3d9ea147a34f69bda71111659e8ed56b0e36e678b8adc91a9e5dd2634dc71da2454875cb5019dd68a03d0c5a7197eac1e8d53455915742d5b96aaa2383a0500bd44c09448ec82ffd50838c2c9391adf9a103cc1cc7b5c69fc64d35fa4cd47e0f0d7c99e16170927f729a9bb5ed78bf62eb49ad974986394146798dd183647ed1cc3227e423940ece0029dbb7ad10dfdb1a0154941b6d66db72443d23f08402bbb95d834fa716fc0a15ef25fe9caf13f21e5b90e4a87680846d396ca13d37adccf0f232bbf875d246db7468ceda2f487c589c8a3b7e9f040ec00a67de1f353c6f4153a7a137f85b636643c69237cc91ddb18c704ed38c0e150c00ca1f8a247f77a1d2c926d7686682daae37d50853219d2b03659bad88c54580ed870ca279d2d2acf942a7eb38f489002b909ebeb8bf45176cd265d2c2b67c8857fe9c78416f6b9e323c38cbe63dd3200c01d26a1f5b237db11bac278ab99b11f06ce25883b24e48755c3b54bc1043d73fc056d931ffe92266f06d31f717de2084458477a4f2fab6f6ad6a9135a33d7ed3370374ed1d280ffabe6a890351644853429751b7f6219e80a052b513d88fd78feb6018b49152a806cb4ff63c1c3b81667e10f3e841f81cdba2361cc1ceed726c544e83d6a1786df6094fe1df8cec3e75a5cbfee76e68b9201a2dd8c9aaaddb1505e04b3349c382bef310e67716058f39d95574ca141fd4b4dc6dee83016edc6b3cedd160c472e4be9fd1b9857b4559803bc5112a6aea39f819ea085d622ebc49002de92e8fefc190d7568dd51f63b24c40aaacd17651069ec1cafa612a5572752166fff302bdd15f3a080b5ca6a8b6341ee00c2d0c98c22f08ceeb914850bc33660b712deec0752eee04e91dd6aea1b9931e2de6e43521a83250771f5fc80b3cdec72c6266dbcffb4c4eb1d40b5ca82906cab3c4e8f174093f3d22b8f"}, {0x88, 0x107, 0x7, "56a9d78088bb39ecd1d7a283486c39edf41f83cc088ab9ec62d1c6b99a35b2d31ba62ebbc46130556f03dd7b302b86dba95ea2cd3f0ad8d061a2d42dcdec2886a0db4259b3fa51ce2084906645deef31115fe9a27d2712be4a528660498bc326b759974e46f176ea8390c6a257f3dc565176"}, {0xb0, 0x10d, 0x101, "6b386b43388891c5c322914271f63259dc13369421f4ee93875a778de88673eaf37ed76ed9556f87626564c94bb8b6f6ab480aa86116071ef7146ee0927432dca279c37cab647b0d6c94e4330188544009bc9c7d6d94ddda6d6da325841c6ed2bfb91f40e15133d8be81009c957089bcdf51e0c341824efb72b68a9fb60ea0ef866a29fb556c7ec4412b254b6d879eb4dfa0c71a5e23418df9ac"}, {0x10, 0x102, 0x8}, {0x38, 0x84, 0x80000001, "3ef2504216f8381e89e03b2b4c03ab85878f073303554e5e058b18f0ac2f061091"}], 0x2308}, 0x4004004)
r0 = socket$kcm(0xa, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000300)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x24}}], 0x18}, 0x8000) (async)
r1 = socket$kcm(0x2, 0x6, 0x0)
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x3e8) (async)
sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x200040c0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8102032908000000000000000000000000ac14140a000000000000000000000000ac1414aa"], 0xfdef) (async)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0x1, <r5=>0xffffffffffffffff}, 0x4) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0xd, 0x18}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, [@printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r6, &(0x7f0000000080), 0x0}, 0x20)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000040000001900000000ec672c10902c4909000000"], 0x50) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, <r8=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%-5lx  \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
ioctl$TUNGETFEATURES(r10, 0x5452, &(0x7f00000013c0)) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x2, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0x5, 0x4, 0x3, 0xfffffffffffffffc, 0x10}, @jmp={0x5, 0x1, 0x2, 0xc, 0x4, 0x18, 0x8}], &(0x7f0000000080)='syzkaller\x00', 0x9, 0xff, &(0x7f0000000100)=""/255, 0x100, 0x16, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x10000000, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640)=[r4, 0xffffffffffffffff, r5, r7, r8, r9, r10, r11], &(0x7f00000006c0)=[{0x5, 0x4, 0xe, 0x1}, {0x2, 0x1, 0xc, 0x1}, {0x2, 0x3, 0x9, 0x4}], 0x10, 0x7}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r12, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xa2, &(0x7f0000000c80)=[{}], 0x8, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x93, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x5, 0x0, 0x0, 0x11}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$kcm(0x29, 0x2, 0x0)
getpid()

2.349779856s ago: executing program 2 (id=2656):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000d1800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x10000000, &(0x7f0000000780)="8b0773cda2f846a143357b193dceb6ec9c315bedd436e5cba50f4ffeebfcab792b324a9b9154eb394500e4ead1265ab777dbf909067a53b979c6ad6702fa6316573bfa6c387071147cd4401f1573f621980f98f972e92893f62736da09ae748501fd8337afcb45cfeb7c1350a071bddcb5c118a7ae0925bbd3c2beb9b5ac92582f95ee209669fc2642028cf22cef5f3c54ce373a893a4a4c411b8baa6ac2a9a952d1becbb49cbe35fd174f3f", 0xac, &(0x7f0000000240), &(0x7f00000003c0), &(0x7f0000000a40)="2e395a3dfb67cf42f498e7138875d771f6c533a61e1648bba1652c13df3e57505c2c0cf3ca75f60742265de1a29275dc939efc6d5f697fc9562b24c381a9b179bb5bf8299f1fe02da503055b9e065760b4b93a633e5fc218c7d06d487508f2b5ed9494c68d9754ad07d852fe7b908025a5386304d8183ac19f28f0894cfe3aab9b662ae1ea519eaeb5e961f5336ed1f0aff91da8389ecc3d82")
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x91, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x14}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x91, 0x0, 0x5, 0x400000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x14}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x10) (async)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x3111, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b300000000"], &(0x7f0000000480)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50aa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb26, 0x200000000002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x10, &(0x7f0000000b00)=ANY=[@ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$kcm(0x2, 0x4, 0x84)
setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000580)=r4, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x84, 0x85, &(0x7f0000000580)=r4, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx  \x00'}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26, 0x0, 0x1}, 0x28)
perf_event_open(&(0x7f00000002c0)={0x1, 0xc2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f00000002c0)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f00000002c0)}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff8500000071000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x24) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x24)
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async)
ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x6d01eb45, 0x12)

2.126437509s ago: executing program 0 (id=2657):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x18, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="27030200590200000000002f1eafbcf706e105000000894f", 0x18}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000020000000000000001000084040000000000000002000000050000000000000000000005feffffff000000000700000d200000000a000000010000000f"], &(0x7f0000000040)=""/270, 0x82, 0x10e, 0x1}, 0x28)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
sendmsg$kcm(r2, 0x0, 0x4000088)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x17, 0x9, 0x1, 0xcc, 0x1000, 0xffffffffffffffff, 0x4, '\x00', 0x0, r1, 0x1, 0x4, 0x3}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x81)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000f1000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x21}, 0x94)

2.125096539s ago: executing program 3 (id=2658):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)

2.006043125s ago: executing program 2 (id=2659):
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x36, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_freezer_state(r3, &(0x7f0000000780)='THAWED\x00', 0x7)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x10, 0x2}, {0x5, 0x2}]}, @const={0xe, 0x0, 0x0, 0xa, 0x4}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x4}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x30, 0x61, 0x51]}}, &(0x7f0000000140)=""/49, 0x69, 0x31, 0x0, 0x3}, 0x28)
r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.004851556s ago: executing program 3 (id=2660):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x29, 0x7, 0x0)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000003, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003440)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x3, &(0x7f0000003ac0), 0x4)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000000000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20)
close(0xffffffffffffffff)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x106)
socket$kcm(0x2, 0x1, 0x84)
socket$kcm(0x22, 0x0, 0x21)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0xfffffffffffffd45)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200))
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = socket$kcm(0x23, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4)
sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)

1.75641498s ago: executing program 1 (id=2661):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000014c0)=""/4080, 0xff0}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/97, 0x61}, {&(0x7f0000000a80)=""/224, 0xe0}, {&(0x7f0000000b80)=""/72, 0x48}, {&(0x7f00000002c0)=""/41, 0x29}], 0x6}, 0x0)
recvmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r0, 0x0, 0x0)

1.710834513s ago: executing program 2 (id=2662):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20)
r1 = perf_event_open$cgroup(&(0x7f0000000540)={0x3, 0x1d, 0xb7, 0x18, 0x1, 0xc, 0x0, 0x5, 0x4, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xbdd, 0x4, @perf_config_ext={0xf, 0x3}, 0x8000, 0x1, 0x0, 0x9, 0x7, 0x1, 0xc549, 0x0, 0xc, 0x0, 0x101}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x4)
r2 = syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x9c7c, 0x4, 0x98, 0x9, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1ff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r5, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$inet(r8, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x1f}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$inet(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$TUNGETVNETLE(r10, 0x800454dd, &(0x7f0000000180))
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x0, 0x2, 0xcf3}, {0x5, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x3}, {0x6, 0x0, 0x0, 0x100b100}]})
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x5}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r11, &(0x7f0000000040)="be", 0x0}, 0x20)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
recvmsg$kcm(r12, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000100)
ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000040)={'dvmrp1\x00'})

1.565821041s ago: executing program 0 (id=2663):
socketpair(0x1, 0x800, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)

1.499952735s ago: executing program 3 (id=2664):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24009080)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x40010040)
r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x748, 0x0, 0x9, 0x0, 0x40800, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x0)
r5 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4)
ioctl$SIOCSIFHWADDR(r3, 0x89fa, &(0x7f0000000900)={'wlan0\x00', @random="0000230c1100"})
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24009080) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x748, 0x0, 0x9, 0x0, 0x40800, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r4, 0x0) (async)
socket$kcm(0x2c, 0x3, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r3, 0x4) (async)
ioctl$SIOCSIFHWADDR(r3, 0x89fa, &(0x7f0000000900)={'wlan0\x00', @random="0000230c1100"}) (async)

1.301258696s ago: executing program 3 (id=2665):
r0 = getpid() (async)
r1 = socket$kcm(0x2, 0x922000000001, 0x106) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f00000002c0)=r3, 0x4) (async)
write$cgroup_pid(r3, &(0x7f0000000000)=r0, 0x12) (async)
perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xe, 0x0, 0x3c, 0xe102, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) (async)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0x28, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000880010001"], 0x48)
close(0x3)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x7ff)

1.067751359s ago: executing program 0 (id=2666):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
r4 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)='`', 0x1}], 0x1}, 0x0)
sendmsg$kcm(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="bb", 0x1}], 0x1, &(0x7f0000000100)=[{0x20, 0x84, 0x2, "fe8041000000000092"}], 0x20}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{0x0, 0x1008}, {&(0x7f0000000f40)=""/213, 0xd5}], 0x2}, 0x40012100)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000f}, 0x0, 0x0, r6, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38)

968.043935ms ago: executing program 2 (id=2667):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000380)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xff03, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0x18, 0x4044}, 0x40400d4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e0000003b000511d25a80698c6394090124fc602f6e35401000058025581d00d1bd000000000019000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0xc004) (async)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12) (async, rerun: 64)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 64)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064682500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f0000000340), &(0x7f0000000500)=r4}, 0x20) (async, rerun: 64)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={r5, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001080)=[0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, &(0x7f0000000040)=0x7ffffffffffffffa)
r7 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async, rerun: 64)
recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4085, 0xff5}, {&(0x7f0000003540)=""/4082, 0xff2}, {&(0x7f0000002500)=""/4121, 0x1019}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f0000000140)=""/183, 0xb7}], 0x5}, 0x100) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)

828.002022ms ago: executing program 1 (id=2668):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2}, 0x50) (async)
r1 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a0001400600", 0x3a}], 0x1}, 0x24004880)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081154e81f782db4cb904021d0800fd02fe02e8fd50a10a000600258848000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0)

743.579627ms ago: executing program 2 (id=2669):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x20, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)

548.280148ms ago: executing program 1 (id=2670):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) (fail_nth: 5)

547.718258ms ago: executing program 2 (id=2671):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x90, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="cbdc670600000000000000c8773bb3199e84b7fd01faa8562e5e478b79176101e6a88e9c821faec4703686c9dc0c16c6bc8e2df83cfd54c2f13ad329fc4f68472f977158ff4b1ef4d5cef8e58424e65222c68acc6c1984d38f0dcec3adbfca7e5e9ac57e7fa7c9511c52", 0xfffffffffffffe5a}], 0x1, 0x0, 0x2f}, 0x804)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000028000b6394f90509fc60000000", 0x11}], 0x1}, 0x4000000)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d0000000a000000040000"], 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1}, 0x880)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000))
socket$kcm(0xa, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x8400)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, 0x0, 0x18}, 0x41)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4004000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x7c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x18)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff00c}, {0x6, 0xff, 0x9, 0x1}]})

219.594097ms ago: executing program 1 (id=2672):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@float={0x1, 0x0, 0x0, 0x10, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}}, 0x0, 0x56}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1e, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x76, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9f1fe4b}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000002c0)='GPL\x00', 0x4, 0x83, &(0x7f0000000300)=""/131, 0xc0f00, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x1, 0x3, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x1], &(0x7f0000000480)=[{0x1, 0xd, 0x5, 0xc}, {0x0, 0x1, 0xf, 0x1}, {0x4, 0x3, 0x4, 0x5}, {0x2, 0x1, 0x4, 0xb}, {0x3, 0x5, 0x4, 0xc}, {0x2, 0x1, 0x7, 0xa}, {0x1, 0x3, 0x8, 0x9}], 0x10, 0xfffffff7}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000005c0)={0x4}, 0x8)

152.736401ms ago: executing program 1 (id=2673):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r6)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010010000000000000007800000078000000070000001000000009000004000000800e00000005000000020000000500000001000000080000000e00000000000000300000000000000002000000070000000b00000003000000070000000900000000000000040000000c00000004000000001000000d00000004000000080000000d0000000100000040010000005f00302e3000"], &(0x7f0000000580)=""/180, 0x97, 0xb4, 0x0, 0x4aa21eae}, 0x28)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r8, @ANYRES8=r8], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x7, &(0x7f0000000180)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x200}, @jmp={0x5, 0x1, 0x0, 0x8, 0xa, 0x10, 0xfffffffffffffffc}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @call={0x85, 0x0, 0x0, 0x90}, @ldst={0x0, 0x2, 0x1, 0x8, 0x5, 0x18, 0x4}], &(0x7f0000000300)='GPL\x00', 0x9, 0x16, &(0x7f0000000340)=""/22, 0x41000, 0x42, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x3, 0x9, 0x8, 0xffff}, 0x10, 0x30571, r5, 0x2, &(0x7f0000000680)=[r4, r4, r8], &(0x7f00000006c0)=[{0x2, 0x4, 0xc, 0xb}, {0x3, 0x3, 0x6, 0x5}], 0x10, 0x10001}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
r10 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

0s ago: executing program 0 (id=2674):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x60e9, 0xaea}, 0x14105, 0xa4b, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x1, 0x4}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x10006}]}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c", 0x16}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33)

kernel console output (not intermixed with test programs):

089][ T9478] C: renamed from team_slave_0
[  268.282799][ T9478] netlink: 'syz.3.1100': attribute type 1 has an invalid length.
[  268.302648][ T9478] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1100'.
[  268.848321][ T9487] netlink: 'syz.3.1103': attribute type 12 has an invalid length.
[  268.864722][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1103'.
[  269.741917][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  269.779041][ T9510] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1110'.
[  270.619810][ T9528] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1115'.
[  270.738425][ T9531] netlink: 751 bytes leftover after parsing attributes in process `syz.3.1115'.
[  271.548475][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  271.672807][ T9549] netlink: 'syz.2.1119': attribute type 10 has an invalid length.
[  273.079262][ T9573] netlink: 'syz.2.1125': attribute type 21 has an invalid length.
[  273.126276][ T9573] netlink: 'syz.2.1125': attribute type 6 has an invalid length.
[  273.163169][ T9573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1125'.
[  273.399479][ T9580] netlink: 'syz.1.1127': attribute type 3 has an invalid length.
[  273.436382][ T9580] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1127'.
[  273.568134][ T9582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1128'.
[  273.624054][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  273.682418][ T9589] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1129'.
[  273.702045][ T9582] netlink: 'syz.3.1128': attribute type 5 has an invalid length.
[  273.869561][ T9580] syzkaller0: entered promiscuous mode
[  273.898710][ T9580] syzkaller0: entered allmulticast mode
[  274.213597][ T9603] sit0: entered promiscuous mode
[  276.871670][ T9611] macsec0: left allmulticast mode
[  277.101060][ T9619] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1137'.
[  277.120662][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  277.127125][ T9619] netlink: del zone limit has 4 unknown bytes
[  277.180486][ T9619] netlink: 'syz.1.1137': attribute type 2 has an invalid length.
[  278.116805][ T9641] netlink: 'syz.3.1147': attribute type 10 has an invalid length.
[  278.125158][ T9641] netlink: 'syz.3.1147': attribute type 10 has an invalid length.
[  278.134516][ T9641] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1147'.
[  278.157222][ T9641] openvswitch: netlink: Message has 4 unknown bytes.
[  278.660783][ T9664] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1153'.
[  279.164489][ T9676] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1156'.
[  279.559499][ T9684] netlink: 'syz.1.1159': attribute type 11 has an invalid length.
[  279.582840][ T9684] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1159'.
[  280.351571][ T9707] netlink: 'syz.1.1165': attribute type 33 has an invalid length.
[  280.360765][ T9707] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1165'.
[  280.401375][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1166'.
[  280.468735][ T9716] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1168'.
[  280.639316][ T9720] netlink: 'syz.1.1169': attribute type 9 has an invalid length.
[  280.699069][ T9720] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1169'.
[  281.214282][ T9740] netlink: 'syz.0.1173': attribute type 3 has an invalid length.
[  281.247560][ T9738] netlink: 'syz.0.1173': attribute type 3 has an invalid length.
[  281.255371][ T9738] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1173'.
[  281.559896][ T9762] netlink: 'syz.1.1180': attribute type 1 has an invalid length.
[  281.651512][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  281.946729][ T9771] netlink: 'syz.0.1184': attribute type 2 has an invalid length.
[  282.241438][ T9783] netlink: 'syz.1.1188': attribute type 10 has an invalid length.
[  282.254515][ T9783] __nla_validate_parse: 3 callbacks suppressed
[  282.254531][ T9783] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1188'.
[  282.310364][ T9786] netlink: 'syz.0.1189': attribute type 10 has an invalid length.
[  282.323759][ T9786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1189'.
[  282.333670][ T9786] team0: entered promiscuous mode
[  282.345246][ T9786] team_slave_0: entered promiscuous mode
[  282.353049][ T9786] team_slave_1: entered promiscuous mode
[  282.366241][ T9786] macvlan0: entered promiscuous mode
[  282.372984][ T9786] team0: entered allmulticast mode
[  282.382693][ T9786] team_slave_0: entered allmulticast mode
[  282.391436][ T9786] team_slave_1: entered allmulticast mode
[  282.416166][ T9786] macvlan0: entered allmulticast mode
[  282.436107][ T9786] veth1_vlan: entered allmulticast mode
[  282.452673][ T9786] 8021q: adding VLAN 0 to HW filter on device team0
[  282.468970][ T9786] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  282.511513][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  282.741690][ T9795] ref_ctr_offset mismatch. inode: 0x654 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0
[  283.218445][ T9807] netlink: 'syz.0.1196': attribute type 10 has an invalid length.
[  283.226858][ T9807] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1196'.
[  284.005532][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  284.655049][ T9837] vlan0: entered promiscuous mode
[  284.685023][ T9837] vlan0: entered allmulticast mode
[  284.700878][ T9837] veth0_vlan: entered allmulticast mode
[  284.845394][ T9845] netlink: 'syz.1.1207': attribute type 2 has an invalid length.
[  284.862892][ T9845] netlink: 'syz.1.1207': attribute type 8 has an invalid length.
[  284.893019][ T9845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1207'.
[  284.905498][ T9847] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1208'.
[  284.941704][ T9850] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1209'.
[  285.126669][ T9854] netlink: 'syz.3.1212': attribute type 27 has an invalid length.
[  285.163578][ T9854] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1212'.
[  287.153084][ T9890] netlink: 'syz.1.1224': attribute type 21 has an invalid length.
[  287.207187][ T9890] netlink: 'syz.1.1224': attribute type 6 has an invalid length.
[  287.594413][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 1854
[  287.691757][ T9903] pim6reg1: entered promiscuous mode
[  287.697404][ T9903] pim6reg1: entered allmulticast mode
[  288.220313][ T9931] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1235'.
[  288.418531][ T9940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1238'.
[  288.439771][ T9940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1238'.
[  288.496538][ T9941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1238'.
[  288.522405][ T9941] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1238'.
[  288.592286][ T9940] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1238'.
[  288.626806][ T9945] netlink: 'syz.2.1239': attribute type 10 has an invalid length.
[  288.771428][ T9950] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1240'.
[  289.698893][ T9966] netlink: 'syz.1.1246': attribute type 22 has an invalid length.
[  289.716698][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1246'.
[  292.523186][ T9975] netlink: 'syz.3.1247': attribute type 21 has an invalid length.
[  292.534013][ T9975] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1247'.
[  292.846399][ T9980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  292.980395][ T9984] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1248'.
[  293.033663][ T9989] netlink: 'syz.2.1253': attribute type 1 has an invalid length.
[  293.473476][T10004] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1258'.
[  294.104002][T10010] netlink: 'syz.3.1260': attribute type 3 has an invalid length.
[  294.136395][T10010] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1260'.
[  294.552093][T10015] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1261'.
[  294.755796][T10020] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1263'.
[  294.781771][T10021] netlink: 'syz.3.1263': attribute type 29 has an invalid length.
[  294.855530][T10020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  294.918808][T10020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  294.974366][T10020] bond0 (unregistering): Released all slaves
[  295.179726][T10021] netlink: 'syz.3.1263': attribute type 29 has an invalid length.
[  295.214712][T10028] netlink: 'syz.0.1265': attribute type 1 has an invalid length.
[  295.223705][T10028] netlink: 'syz.0.1265': attribute type 3 has an invalid length.
[  295.232159][T10028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1265'.
[  295.249845][T10022] netlink: 'syz.3.1263': attribute type 29 has an invalid length.
[  295.270926][T10028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1265'.
[  295.280677][T10023] netlink: 'syz.3.1263': attribute type 29 has an invalid length.
[  295.386753][T10030] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1265'.
[  295.674256][T10041] netlink: 'syz.0.1268': attribute type 9 has an invalid length.
[  295.682951][T10041] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1268'.
[  295.843539][T10044] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1269'.
[  296.568053][T10062] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1275'.
[  296.678092][T10062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  297.160366][T10085] syzkaller0: entered promiscuous mode
[  297.168786][T10085] syzkaller0: entered allmulticast mode
[  297.797207][T10126] syzkaller0: entered promiscuous mode
[  297.802762][T10126] syzkaller0: entered allmulticast mode
[  300.843266][T10139] netlink: 'syz.3.1290': attribute type 10 has an invalid length.
[  300.851370][T10139] __nla_validate_parse: 1 callbacks suppressed
[  300.851385][T10139] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1290'.
[  301.345537][T10157] netlink: 'syz.2.1295': attribute type 33 has an invalid length.
[  301.354356][T10157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1295'.
[  301.395157][T10156] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1294'.
[  301.552408][T10168] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1299'.
[  301.562007][T10168] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  301.581730][T10158] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1296'.
[  302.069901][T10174] netlink: 'syz.0.1301': attribute type 12 has an invalid length.
[  302.120565][T10174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1301'.
[  302.284065][T10180] netlink: 'syz.2.1302': attribute type 27 has an invalid length.
[  302.302972][T10180] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1302'.
[  302.366944][T10182] netlink: 'syz.3.1303': attribute type 1 has an invalid length.
[  302.379935][T10182] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1303'.
[  302.653643][T10186] netlink: 'syz.0.1304': attribute type 21 has an invalid length.
[  302.716260][T10186] netlink: 'syz.0.1304': attribute type 1 has an invalid length.
[  302.729866][T10186] netlink: 16050 bytes leftover after parsing attributes in process `syz.0.1304'.
[  302.827843][T10197] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1307'.
[  303.180050][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 2580
[  303.923727][T10222] netlink: 'syz.1.1314': attribute type 12 has an invalid length.
[  304.434742][T10229] sit0: entered allmulticast mode
[  304.481243][T10231] sit0: entered promiscuous mode
[  304.698199][T10237] netlink: 'syz.1.1318': attribute type 27 has an invalid length.
[  305.928437][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2580
[  307.315166][T10273] __nla_validate_parse: 7 callbacks suppressed
[  307.315203][T10273] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1330'.
[  307.337873][T10277] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1330'.
[  307.513427][T10273] netlink: 'syz.3.1330': attribute type 29 has an invalid length.
[  307.616256][T10273] netlink: 'syz.3.1330': attribute type 29 has an invalid length.
[  307.660511][T10277] netlink: 'syz.3.1330': attribute type 29 has an invalid length.
[  307.677923][T10281] netlink: 'syz.3.1330': attribute type 29 has an invalid length.
[  307.782964][T10280] mac80211_hwsim hwsim7 wlan0: left promiscuous mode
[  307.790615][T10280] mac80211_hwsim hwsim7 wlan0: left allmulticast mode
[  307.849216][T10282] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  307.858463][T10282] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  307.879590][T10280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1332'.
[  308.186122][T10287] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1335'.
[  308.269484][T10287] netlink: 'syz.1.1335': attribute type 29 has an invalid length.
[  308.285049][T10287] netlink: 'syz.1.1335': attribute type 29 has an invalid length.
[  308.301590][T10287] netlink: 'syz.1.1335': attribute type 29 has an invalid length.
[  308.318229][T10287] netlink: 'syz.1.1335': attribute type 29 has an invalid length.
[  308.696766][T10301] sit0: entered allmulticast mode
[  308.809832][T10302] sit0: entered promiscuous mode
[  309.979917][ T5782] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10
[  310.301073][T10321] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  310.315689][T10321] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  310.354505][T10319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1345'.
[  310.582372][T10327] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1346'.
[  310.595159][T10327] bond_slave_0: left promiscuous mode
[  310.603623][T10327] bond_slave_1: left promiscuous mode
[  310.614837][T10327] bridge0: left promiscuous mode
[  310.634446][T10328] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1346'.
[  310.657593][T10328] netlink: 'syz.2.1346': attribute type 29 has an invalid length.
[  310.697756][T10327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  310.740028][T10327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  310.765624][T10327] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  310.785140][T10327] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.793943][T10327] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.821471][T10327] bond0 (unregistering): Released all slaves
[  310.965208][T10328] netlink: 'syz.2.1346': attribute type 29 has an invalid length.
[  311.857697][T10342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1351'.
[  311.914468][T10345] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1350'.
[  312.168441][T10349] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1353'.
[  312.693846][ T5782] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10
[  312.738584][T10359] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  312.802444][T10359] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  313.007566][T10365] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  313.021348][T10365] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  313.049842][T10371] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1358'.
[  313.123599][T10374] sit0: left promiscuous mode
[  313.375501][T10376] sit0: entered promiscuous mode
[  313.798389][T10385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1363'.
[  313.924662][T10388] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1362'.
[  313.963992][T10388] validate_nla: 3 callbacks suppressed
[  313.964011][T10388] netlink: 'syz.0.1362': attribute type 29 has an invalid length.
[  314.210252][T10385] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1363'.
[  314.237988][T10386] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1362'.
[  314.258199][T10388] netlink: 'syz.0.1362': attribute type 29 has an invalid length.
[  314.269779][T10395] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1365'.
[  314.300727][T10393] netlink: 'syz.0.1362': attribute type 29 has an invalid length.
[  314.309882][T10396] netlink: 'syz.0.1362': attribute type 29 has an invalid length.
[  314.664466][T10404] netlink: 'syz.1.1366': attribute type 1 has an invalid length.
[  314.693580][T10404] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1366'.
[  315.094270][T10419] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1372'.
[  315.112186][T10419] netlink: del zone limit has 8 unknown bytes
[  316.758956][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  317.172736][T10449] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1380'.
[  317.444245][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  317.451020][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  322.402316][T10467] netlink: 'syz.1.1386': attribute type 1 has an invalid length.
[  322.428597][T10467] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1386'.
[  322.489055][T10467] syzkaller0: entered promiscuous mode
[  322.494650][T10467] syzkaller0: entered allmulticast mode
[  322.812218][T10473] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1387'.
[  322.917830][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  323.064096][T10479] netlink: 'syz.1.1389': attribute type 33 has an invalid length.
[  323.086120][T10479] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1389'.
[  323.121766][T10481] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1390'.
[  323.381992][T10481] netlink: 'syz.0.1390': attribute type 10 has an invalid length.
[  323.402217][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.549456][T10481] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.874433][T10494] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1393'.
[  324.590355][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  325.225672][T10533] Â: renamed from pim6reg1
[  325.490833][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 1023
[  325.695484][T10545] netlink: 'syz.0.1408': attribute type 10 has an invalid length.
[  325.861956][T10545] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  325.878615][T10545] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  325.903870][T10545] team0: Port device wlan1 added
[  325.920264][T10548] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1408'.
[  326.712836][T10564] netlink: 'syz.0.1415': attribute type 10 has an invalid length.
[  326.945153][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 1023
[  326.992399][T10564] team_slave_0: left promiscuous mode
[  327.007657][T10564] team_slave_0: left allmulticast mode
[  327.042944][T10564] team0 (unregistering): Port device team_slave_0 removed
[  327.096509][T10564] team_slave_1: left promiscuous mode
[  327.102185][T10564] team_slave_1: left allmulticast mode
[  327.133914][T10580] netlink: 'syz.3.1419': attribute type 1 has an invalid length.
[  327.162634][T10564] team0 (unregistering): Port device team_slave_1 removed
[  327.172427][T10580] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1419'.
[  327.185845][T10564] macvlan0: left promiscuous mode
[  327.191572][T10564] macvlan0: left allmulticast mode
[  327.203256][T10564] veth1_vlan: left allmulticast mode
[  327.212417][T10564] team0 (unregistering): Port device macvlan0 removed
[  327.227992][T10564] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  327.258126][T10564] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  327.310852][T10564] team0 (unregistering): Port device wlan1 removed
[  327.759197][T10601] netlink: 'syz.0.1423': attribute type 4 has an invalid length.
[  328.123322][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 1023
[  328.654470][T10622] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1429'.
[  329.043660][T10628] netlink: 'syz.2.1429': attribute type 10 has an invalid length.
[  329.107300][T10628] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.249793][T10628] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.573577][T10639] Dead loop on virtual device ip6_vti0, fix it urgently!
[  329.764591][T10626] syzkaller0: entered promiscuous mode
[  329.779517][T10626] syzkaller0: entered allmulticast mode
[  330.289126][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 1023
[  332.520746][T10652] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  332.540617][T10662] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1440'.
[  332.816577][T10667] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1442'.
[  333.298621][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 1023
[  333.958667][T10702] netlink: 'syz.1.1454': attribute type 3 has an invalid length.
[  333.970194][T10702] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1454'.
[  334.293950][T10689] veth0_vlan: left promiscuous mode
[  334.307185][T10689] veth0_vlan: entered promiscuous mode
[  334.514781][T10711] syz.0.1455[10711] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  334.516228][T10711] syz.0.1455[10711] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  335.154342][T10713] syzkaller0: entered promiscuous mode
[  335.172683][T10713] syzkaller0: entered allmulticast mode
[  335.214218][T10719] netlink: 'syz.3.1458': attribute type 19 has an invalid length.
[  335.274540][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 1023
[  336.787327][T10755] netlink: 'syz.3.1467': attribute type 12 has an invalid length.
[  336.799508][T10755] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.1467'.
[  338.750656][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 3902
[  338.761064][T10767] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1468'.
[  338.810310][T10765] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1468'.
[  339.028542][T10780] netlink: 'syz.0.1474': attribute type 10 has an invalid length.
[  339.044061][T10780] hsr_slave_0: left promiscuous mode
[  339.051477][T10780] hsr_slave_1: left promiscuous mode
[  339.732456][T10802] netlink: 'syz.2.1481': attribute type 8 has an invalid length.
[  339.741381][T10802] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1481'.
[  339.779241][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 3902
[  339.976847][T10805] netlink: 'syz.3.1482': attribute type 33 has an invalid length.
[  339.984753][T10805] netlink: 'syz.3.1482': attribute type 3 has an invalid length.
[  340.001899][T10805] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1482'.
[  340.056184][T10809] Ÿë
: port 1(gretap0) entered blocking state
[  340.087787][T10809] Ÿë
: port 1(gretap0) entered disabled state
[  340.095469][T10809] gretap0: entered allmulticast mode
[  340.159490][T10809] gretap0: entered promiscuous mode
[  340.888109][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 3902
[  341.548641][T10855] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1498'.
[  341.813501][T10857] netlink: 'syz.2.1498': attribute type 4 has an invalid length.
[  341.947954][T10857] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1498'.
[  342.681182][T10869] netlink: 'syz.2.1504': attribute type 1 has an invalid length.
[  347.408848][T10917] netlink: 'syz.3.1515': attribute type 1 has an invalid length.
[  347.464778][T10917] netlink: 'syz.3.1515': attribute type 4 has an invalid length.
[  347.498535][T10917] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1515'.
[  348.143856][T10932] pimreg0: tun_chr_ioctl cmd 1074812118
[  348.276169][T10934] pimreg0: tun_chr_ioctl cmd 35111
[  349.212205][T10937] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1521'.
[  349.424935][T10945] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1521'.
[  350.166884][T10956] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1526'.
[  350.248238][T10956] openvswitch: netlink: Geneve option length err (len 1788, max 255).
[  350.410085][T10957] netlink: 'syz.1.1525': attribute type 10 has an invalid length.
[  350.486203][T10957] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1525'.
[  352.408961][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  352.673244][T10984] syzkaller0: entered promiscuous mode
[  352.686992][T10984] syzkaller0: entered allmulticast mode
[  354.087309][T10996] delete_channel: no stack
[  354.875029][T10988] netlink: 'syz.1.1535': attribute type 10 has an invalid length.
[  355.184977][T11006] pim6reg1: entered promiscuous mode
[  355.193195][T11006] pim6reg1: entered allmulticast mode
[  355.331266][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  355.645847][T11011] netlink: 'syz.0.1541': attribute type 10 has an invalid length.
[  355.874048][T11021] netlink: 'syz.3.1544': attribute type 3 has an invalid length.
[  355.899670][T11021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1544'.
[  356.945014][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  357.111359][T11046] netlink: 'syz.1.1552': attribute type 1 has an invalid length.
[  357.142152][T11046] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1552'.
[  358.338236][T11062] pim6reg1: entered promiscuous mode
[  358.345574][T11062] pim6reg1: entered allmulticast mode
[  358.553449][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  358.818851][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  358.858031][T11073] netlink: 'syz.0.1563': attribute type 10 has an invalid length.
[  358.866583][T11073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1563'.
[  358.905599][T11073] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  358.944852][T11080] netlink: 'syz.2.1564': attribute type 1 has an invalid length.
[  358.967840][T11080] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1564'.
[  359.005211][T11081] netlink: 'syz.3.1562': attribute type 10 has an invalid length.
[  359.026826][T11081] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  359.147970][T11084] netlink: 'syz.1.1565': attribute type 21 has an invalid length.
[  359.810787][T11093] delete_channel: no stack
[  359.887313][T11100] pim6reg1: entered promiscuous mode
[  359.900350][T11100] pim6reg1: entered allmulticast mode
[  359.932888][T11104] netlink: 'syz.0.1573': attribute type 29 has an invalid length.
[  359.973145][T11103] netlink: 'syz.2.1574': attribute type 10 has an invalid length.
[  359.981985][T11103] hsr_slave_0: left promiscuous mode
[  359.994916][T11103] hsr_slave_1: left promiscuous mode
[  360.158893][T11104] netlink: 'syz.0.1573': attribute type 29 has an invalid length.
[  360.175345][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  360.210839][T11105] netlink: 'syz.0.1573': attribute type 29 has an invalid length.
[  360.232021][T11101] delete_channel: no stack
[  360.709152][T11120] netlink: 'syz.2.1577': attribute type 9 has an invalid length.
[  360.734533][T11120] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1577'.
[  360.844137][T11116] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1577'.
[  360.877729][T11116] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  360.901100][T11122] netlink: 'syz.1.1580': attribute type 29 has an invalid length.
[  360.919318][T11122] netlink: 'syz.1.1580': attribute type 29 has an invalid length.
[  360.963810][T11115] delete_channel: no stack
[  361.227181][ T5782] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  364.612736][T11159] netlink: 'syz.2.1589': attribute type 10 has an invalid length.
[  365.392770][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 2622
[  365.450256][T11163] pim6reg1: entered promiscuous mode
[  365.455656][T11163] pim6reg1: entered allmulticast mode
[  367.364753][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  367.549422][T11202] netlink: 'syz.3.1604': attribute type 1 has an invalid length.
[  367.581529][T11202] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1604'.
[  367.927641][T11217] netlink: zone id is out of range
[  367.943504][T11217] netlink: set zone limit has 8 unknown bytes
[  368.842413][T11213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.845007][T11217] bridge_slave_1: left allmulticast mode
[  368.871957][T11217] bridge_slave_1: left promiscuous mode
[  368.900116][T11217] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.951285][T11217] bridge_slave_0: left promiscuous mode
[  368.964615][T11217] bridge0: port 1(bridge_slave_0) entered disabled state
[  369.162116][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'.
[  369.263452][T11228] netlink: 'syz.3.1608': attribute type 10 has an invalid length.
[  369.279993][T11228] mac80211_hwsim hwsim8 wlan1: left promiscuous mode
[  369.298634][T11228] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[  369.333066][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  369.851485][T11244] netlink: 'syz.3.1617': attribute type 1 has an invalid length.
[  369.866150][T11244] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1617'.
[  370.247625][T11256] netlink: 'syz.0.1614': attribute type 10 has an invalid length.
[  371.555277][T11278] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1626'.
[  371.724933][T11278] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1626'.
[  371.764169][T11282] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1626'.
[  373.267828][T11305] IPv6: Can't replace route, no match found
[  373.614882][T11314] netlink: 'syz.2.1636': attribute type 2 has an invalid length.
[  373.656171][T11314] netlink: 'syz.2.1636': attribute type 8 has an invalid length.
[  373.663991][T11314] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1636'.
[  376.027370][T11347] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1644'.
[  376.663421][T11360] netlink: 'syz.0.1647': attribute type 10 has an invalid length.
[  376.846360][T11366] netlink: 'syz.3.1651': attribute type 21 has an invalid length.
[  376.866406][T11366] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1651'.
[  378.888565][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  378.895046][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  379.553476][T11415] netlink: 'syz.2.1663': attribute type 2 has an invalid length.
[  379.602999][T11415] netlink: 'syz.2.1663': attribute type 1 has an invalid length.
[  379.619554][T11415] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1663'.
[  379.634831][T11414] netlink: 'syz.2.1663': attribute type 2 has an invalid length.
[  379.648267][T11414] netlink: 'syz.2.1663': attribute type 1 has an invalid length.
[  379.656934][T11414] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1663'.
[  381.131936][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  381.302363][T11447] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1674'.
[  381.832204][T11456] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1678'.
[  381.949232][T11447] netlink: 'syz.0.1674': attribute type 17 has an invalid length.
[  382.008255][T11447] netlink: 'syz.0.1674': attribute type 41 has an invalid length.
[  382.081389][T11447] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1674'.
[  382.275562][T11462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  382.393495][T11456] debugfs: Directory 'ô!ô' with parent 'ieee80211' already present!
[  382.515134][T11464] netlink: 'syz.3.1681': attribute type 33 has an invalid length.
[  382.556166][T11464] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1681'.
[  382.565299][T11464] `: renamed from team0 (while UP)
[  382.895434][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  383.065270][T11493] netlink: 'syz.3.1689': attribute type 2 has an invalid length.
[  383.073174][T11493] netlink: 'syz.3.1689': attribute type 1 has an invalid length.
[  384.008218][T11516] netlink: 'syz.3.1695': attribute type 13 has an invalid length.
[  384.032075][T11516] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1695'.
[  384.177588][T11516] erspan0: refused to change device tx_queue_len
[  384.214832][T11516] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  384.591393][T11531] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1700'.
[  384.914052][T11537] netlink: 'syz.1.1702': attribute type 2 has an invalid length.
[  384.926043][T11537] netlink: 'syz.1.1702': attribute type 1 has an invalid length.
[  384.933944][T11537] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.087345][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 62
[  387.293574][T11583] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  387.408292][T11585] netlink: 'syz.2.1718': attribute type 3 has an invalid length.
[  387.465682][T11585] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1718'.
[  388.553590][T11609] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1733'.
[  388.595805][T11609] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1733'.
[  392.411853][T11699] IPv6: NLM_F_CREATE should be specified when creating new route
[  392.449566][T11699] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1751'.
[  392.593336][ T5782] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  392.618170][ T5782] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  392.892928][T11715] netlink: 'syz.3.1759': attribute type 29 has an invalid length.
[  392.907190][T11715] netlink: 'syz.3.1759': attribute type 29 has an invalid length.
[  393.116636][T11722] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1760'.
[  393.244037][T11724] netlink: 'syz.3.1761': attribute type 46 has an invalid length.
[  393.314186][T11726] netlink: 'syz.3.1761': attribute type 3 has an invalid length.
[  393.357389][T11726] netlink: 'syz.3.1761': attribute type 1 has an invalid length.
[  393.365206][T11726] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1761'.
[  393.752814][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  393.855002][ T5782] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  394.167357][T11742] netlink: 'syz.0.1768': attribute type 21 has an invalid length.
[  394.175632][T11742] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1768'.
[  394.190006][T11742] netlink: 'syz.0.1768': attribute type 4 has an invalid length.
[  394.221473][T11742] netlink: 'syz.0.1768': attribute type 5 has an invalid length.
[  394.272706][T11742] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1768'.
[  394.280560][T11745] netlink: 'syz.2.1769': attribute type 8 has an invalid length.
[  394.293194][T11745] netlink: 209716 bytes leftover after parsing attributes in process `syz.2.1769'.
[  394.389731][T11745] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  394.646627][ T5782] Bluetooth: hci3: command 0x0406 tx timeout
[  394.808302][T11753] netlink: 'syz.3.1771': attribute type 1 has an invalid length.
[  394.844177][T11753] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1771'.
[  395.709276][ T5782] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30
[  395.925988][ T5084] Bluetooth: hci0: command 0x0406 tx timeout
[  396.078890][T11784] IPv6: Can't replace route, no match found
[  396.157666][T11793] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1781'.
[  396.335719][T11800] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.1783'.
[  396.400128][T11802] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1784'.
[  396.642032][T11813] syzkaller0: entered allmulticast mode
[  396.963876][T11825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1791'.
[  397.771754][ T5084] Bluetooth: hci2: command 0x0406 tx timeout
[  399.512567][T11840] validate_nla: 5 callbacks suppressed
[  399.512591][T11840] netlink: 'syz.2.1797': attribute type 1 has an invalid length.
[  399.566149][T11840] __nla_validate_parse: 2 callbacks suppressed
[  399.566170][T11840] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1797'.
[  400.716129][T11858] netlink: 'syz.2.1802': attribute type 21 has an invalid length.
[  400.759787][T11858] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1802'.
[  400.814370][T11858] netlink: 'syz.2.1802': attribute type 4 has an invalid length.
[  400.855647][T11858] netlink: 'syz.2.1802': attribute type 5 has an invalid length.
[  400.986341][T11858] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1802'.
[  402.034439][T11875] netlink: 'syz.1.1804': attribute type 8 has an invalid length.
[  402.049222][T11875] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.1804'.
[  402.211151][T11875] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  402.239142][T11875] CPU: 1 PID: 11875 Comm: syz.1.1804 Not tainted syzkaller #0
[  402.246705][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  402.256816][T11875] Call Trace:
[  402.260154][T11875]  <TASK>
[  402.263124][T11875]  dump_stack_lvl+0x18c/0x250
[  402.267864][T11875]  ? show_regs_print_info+0x20/0x20
[  402.273122][T11875]  ? load_image+0x400/0x400
[  402.277713][T11875]  sysfs_warn_dup+0x8e/0xa0
[  402.282272][T11875]  sysfs_do_create_link_sd+0xc0/0x110
[  402.287708][T11875]  device_add_class_symlinks+0x1cf/0x240
[  402.293458][T11875]  device_add+0x507/0xc20
[  402.297870][T11875]  wiphy_register+0x1dad/0x2ae0
[  402.302804][T11875]  ? cfg80211_event_work+0x40/0x40
[  402.307978][T11875]  ? minstrel_ht_alloc+0x88a/0x990
[  402.313155][T11875]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  402.319283][T11875]  ieee80211_register_hw+0x3464/0x4250
[  402.324824][T11875]  ? ieee80211_tasklet_handler+0x20/0x20
[  402.330516][T11875]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  402.336470][T11875]  ? __debug_object_init+0xec/0x450
[  402.341732][T11875]  ? __asan_memset+0x22/0x40
[  402.346373][T11875]  ? __hrtimer_init+0x186/0x270
[  402.351277][T11875]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  402.357098][T11875]  ? mac80211_hwsim_free+0x220/0x220
[  402.362450][T11875]  ? rcu_is_watching+0x15/0xb0
[  402.367267][T11875]  ? kstrndup+0xbd/0x140
[  402.371577][T11875]  hwsim_new_radio_nl+0xdc9/0x1a90
[  402.376747][T11875]  ? mark_lock+0x94/0x320
[  402.381129][T11875]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  402.387178][T11875]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  402.393583][T11875]  ? lockdep_hardirqs_on+0x98/0x150
[  402.398832][T11875]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  402.405055][T11875]  ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290
[  402.411454][T11875]  genl_family_rcv_msg_doit+0x211/0x310
[  402.417070][T11875]  ? end_current_label_crit_section+0x170/0x170
[  402.423365][T11875]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  402.429325][T11875]  ? bpf_lsm_capable+0x9/0x10
[  402.434058][T11875]  ? security_capable+0x89/0xb0
[  402.438974][T11875]  genl_rcv_msg+0x619/0x7a0
[  402.443549][T11875]  ? genl_bind+0x360/0x360
[  402.448024][T11875]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  402.454429][T11875]  netlink_rcv_skb+0x241/0x4d0
[  402.459261][T11875]  ? genl_bind+0x360/0x360
[  402.463750][T11875]  ? netlink_ack+0x1180/0x1180
[  402.468679][T11875]  ? __lock_acquire+0x7d40/0x7d40
[  402.473764][T11875]  ? down_read+0x1ac/0x2e0
[  402.478248][T11875]  genl_rcv+0x28/0x40
[  402.482332][T11875]  netlink_unicast+0x751/0x8d0
[  402.487163][T11875]  netlink_sendmsg+0x8d0/0xbf0
[  402.491996][T11875]  ? netlink_getsockopt+0x590/0x590
[  402.497251][T11875]  ? aa_sock_msg_perm+0x94/0x150
[  402.502246][T11875]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  402.507581][T11875]  ? security_socket_sendmsg+0x80/0xa0
[  402.513084][T11875]  ? netlink_getsockopt+0x590/0x590
[  402.518336][T11875]  ____sys_sendmsg+0x5ba/0x960
[  402.523152][T11875]  ? __asan_memset+0x22/0x40
[  402.527800][T11875]  ? __sys_sendmsg_sock+0x30/0x30
[  402.532871][T11875]  ? __import_iovec+0x5f2/0x850
[  402.537799][T11875]  ? import_iovec+0x73/0xa0
[  402.542367][T11875]  ___sys_sendmsg+0x2a6/0x360
[  402.547104][T11875]  ? __sys_sendmsg+0x2a0/0x2a0
[  402.552041][T11875]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  402.558365][T11875]  __se_sys_sendmsg+0x1c2/0x2b0
[  402.563290][T11875]  ? __x64_sys_sendmsg+0x80/0x80
[  402.568306][T11875]  ? lockdep_hardirqs_on+0x98/0x150
[  402.573554][T11875]  do_syscall_64+0x55/0xa0
[  402.578021][T11875]  ? clear_bhb_loop+0x40/0x90
[  402.582755][T11875]  ? clear_bhb_loop+0x40/0x90
[  402.587502][T11875]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  402.593450][T11875] RIP: 0033:0x7f6e1059bf79
[  402.597918][T11875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.617585][T11875] RSP: 002b:00007f6e113b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  402.626072][T11875] RAX: ffffffffffffffda RBX: 00007f6e10815fa0 RCX: 00007f6e1059bf79
[  402.634106][T11875] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  402.642123][T11875] RBP: 00007f6e106327e0 R08: 0000000000000000 R09: 0000000000000000
[  402.650152][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.658180][T11875] R13: 00007f6e10816038 R14: 00007f6e10815fa0 R15: 00007ffd7d46f558
[  402.666221][T11875]  </TASK>
[  404.045190][T11889] netlink: 'syz.2.1809': attribute type 1 has an invalid length.
[  404.058666][T11889] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1809'.
[  404.735903][T11903] netlink: 'syz.1.1812': attribute type 29 has an invalid length.
[  404.795216][T11893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1810'.
[  404.951282][T11903] netlink: 'syz.1.1812': attribute type 29 has an invalid length.
[  404.973630][T11904] netlink: 'syz.1.1812': attribute type 29 has an invalid length.
[  405.055552][T11900] netlink: 'syz.1.1812': attribute type 29 has an invalid length.
[  405.378097][T11909] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[  405.416773][T11909] mac80211_hwsim hwsim2 wlan0: left allmulticast mode
[  406.633605][T11927] netlink: 'syz.3.1819': attribute type 1 has an invalid length.
[  406.655698][T11927] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1819'.
[  406.684821][T11931] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1818'.
[  406.700340][T11931] netlink: del zone limit has 4 unknown bytes
[  407.023219][T11935] netlink: 'syz.3.1822': attribute type 21 has an invalid length.
[  407.048615][T11935] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1822'.
[  407.079028][T11941] sit0: left promiscuous mode
[  407.225364][T11946] netlink: 'syz.2.1823': attribute type 21 has an invalid length.
[  407.381578][ T5084] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  407.917451][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  408.069402][T11967] netlink: 'syz.2.1830': attribute type 1 has an invalid length.
[  408.102442][T11967] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1830'.
[  408.505817][T11974] netlink: 'syz.2.1832': attribute type 10 has an invalid length.
[  408.754540][T11984] netlink: 'syz.0.1834': attribute type 29 has an invalid length.
[  410.634770][T12030] validate_nla: 3 callbacks suppressed
[  410.634788][T12030] netlink: 'syz.3.1854': attribute type 10 has an invalid length.
[  410.655658][T12030] syz_tun: entered promiscuous mode
[  410.770894][T12032] netlink: 'syz.2.1855': attribute type 10 has an invalid length.
[  411.597440][T12048] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  411.631927][T12048] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  411.985289][ T5084] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  413.406759][T12097] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  413.414784][T12097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1872'.
[  413.450432][T12097] dummy0: entered promiscuous mode
[  413.466296][T12097] dummy0: entered allmulticast mode
[  413.491224][T12097] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  413.537648][T12103] netlink: 'syz.3.1874': attribute type 3 has an invalid length.
[  413.567549][T12105] netlink: 'syz.3.1874': attribute type 3 has an invalid length.
[  413.723462][T12110] netlink: 'syz.0.1876': attribute type 21 has an invalid length.
[  413.735077][T12110] netlink: 'syz.0.1876': attribute type 1 has an invalid length.
[  413.744670][T12110] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.1876'.
[  414.736374][T12142] FAULT_INJECTION: forcing a failure.
[  414.736374][T12142] name failslab, interval 1, probability 0, space 0, times 0
[  414.756921][T12139] netlink: 'syz.1.1889': attribute type 1 has an invalid length.
[  414.760278][T12141] netlink: 'syz.2.1888': attribute type 29 has an invalid length.
[  414.764734][T12139] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1889'.
[  414.782558][T12142] CPU: 0 PID: 12142 Comm: syz.3.1890 Not tainted syzkaller #0
[  414.790051][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  414.790069][T12142] Call Trace:
[  414.790079][T12142]  <TASK>
[  414.790089][T12142]  dump_stack_lvl+0x18c/0x250
[  414.790129][T12142]  ? show_regs_print_info+0x20/0x20
[  414.790159][T12142]  ? load_image+0x400/0x400
[  414.790188][T12142]  ? __might_sleep+0xe0/0xe0
[  414.790215][T12142]  ? __lock_acquire+0x7d40/0x7d40
[  414.790238][T12142]  ? mark_lock+0x94/0x320
[  414.790268][T12142]  should_fail_ex+0x39d/0x4d0
[  414.790306][T12142]  should_failslab+0x9/0x20
[  414.844444][T12142]  slab_pre_alloc_hook+0x59/0x310
[  414.849530][T12142]  ? __get_vm_area_node+0x125/0x370
[  414.854789][T12142]  __kmem_cache_alloc_node+0x53/0x250
[  414.860216][T12142]  ? __get_vm_area_node+0x125/0x370
[  414.865456][T12142]  kmalloc_node_trace+0x26/0xe0
[  414.870346][T12142]  __get_vm_area_node+0x125/0x370
[  414.875413][T12142]  __vmalloc_node_range+0x36e/0x1330
[  414.880738][T12142]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  414.886325][T12142]  ? mark_lock+0x94/0x320
[  414.890713][T12142]  ? __lock_acquire+0x1347/0x7d40
[  414.895774][T12142]  ? verify_lock_unused+0x140/0x140
[  414.901018][T12142]  ? free_vm_area+0x50/0x50
[  414.905554][T12142]  ? end_current_label_crit_section+0x170/0x170
[  414.911830][T12142]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  414.917401][T12142]  __vmalloc+0x7a/0x90
[  414.921549][T12142]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  414.927128][T12142]  bpf_prog_alloc_no_stats+0x47/0x440
[  414.932544][T12142]  ? bpf_prog_alloc+0x2b/0x1a0
[  414.937347][T12142]  bpf_prog_alloc+0x3d/0x1a0
[  414.941973][T12142]  bpf_prog_load+0x6eb/0x1670
[  414.946698][T12142]  ? map_freeze+0x420/0x420
[  414.951241][T12142]  ? __might_fault+0xaa/0x120
[  414.955949][T12142]  ? __lock_acquire+0x7d40/0x7d40
[  414.961009][T12142]  ? file_end_write+0x159/0x250
[  414.965902][T12142]  ? __might_fault+0xaa/0x120
[  414.970604][T12142]  ? __might_fault+0xc6/0x120
[  414.975300][T12142]  ? __might_fault+0xaa/0x120
[  414.980009][T12142]  ? bpf_lsm_bpf+0x9/0x10
[  414.984368][T12142]  ? security_bpf+0x7e/0xa0
[  414.988901][T12142]  __sys_bpf+0x5ba/0x890
[  414.993181][T12142]  ? bpf_link_show_fdinfo+0x390/0x390
[  414.998594][T12142]  ? lock_chain_count+0x20/0x20
[  415.003485][T12142]  __x64_sys_bpf+0x7c/0x90
[  415.007946][T12142]  do_syscall_64+0x55/0xa0
[  415.012419][T12142]  ? clear_bhb_loop+0x40/0x90
[  415.017132][T12142]  ? clear_bhb_loop+0x40/0x90
[  415.021863][T12142]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  415.027791][T12142] RIP: 0033:0x7f93a119bf79
[  415.032236][T12142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.051870][T12142] RSP: 002b:00007f93a2099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  415.060321][T12142] RAX: ffffffffffffffda RBX: 00007f93a1415fa0 RCX: 00007f93a119bf79
[  415.068331][T12142] RDX: 0000000000000094 RSI: 0000200000001b40 RDI: 0000000000000005
[  415.076419][T12142] RBP: 00007f93a2099090 R08: 0000000000000000 R09: 0000000000000000
[  415.084418][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.092412][T12142] R13: 00007f93a1416038 R14: 00007f93a1415fa0 R15: 00007ffea03b0e08
[  415.100430][T12142]  </TASK>
[  415.115654][T12142] syz.3.1890: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[  415.136613][T12141] netlink: 'syz.2.1888': attribute type 29 has an invalid length.
[  415.151961][T12142] CPU: 1 PID: 12142 Comm: syz.3.1890 Not tainted syzkaller #0
[  415.159507][T12142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  415.169613][T12142] Call Trace:
[  415.172944][T12142]  <TASK>
[  415.175922][T12142]  dump_stack_lvl+0x18c/0x250
[  415.180686][T12142]  ? show_regs_print_info+0x20/0x20
[  415.185962][T12142]  ? load_image+0x400/0x400
[  415.190532][T12142]  ? __rcu_read_unlock+0x7c/0xd0
[  415.195615][T12142]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  415.202093][T12142]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  415.208659][T12142]  warn_alloc+0x246/0x340
[  415.213056][T12142]  ? __get_vm_area_node+0x125/0x370
[  415.218318][T12142]  ? zone_watermark_ok_safe+0x230/0x230
[  415.223929][T12142]  ? rcu_is_watching+0x15/0xb0
[  415.228757][T12142]  ? __get_vm_area_node+0x356/0x370
[  415.234027][T12142]  __vmalloc_node_range+0x393/0x1330
[  415.239384][T12142]  ? mark_lock+0x94/0x320
[  415.243779][T12142]  ? __lock_acquire+0x1347/0x7d40
[  415.248862][T12142]  ? verify_lock_unused+0x140/0x140
[  415.254132][T12142]  ? free_vm_area+0x50/0x50
[  415.258686][T12142]  ? end_current_label_crit_section+0x170/0x170
[  415.264975][T12142]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  415.270549][T12142]  __vmalloc+0x7a/0x90
[  415.274653][T12142]  ? bpf_prog_alloc_no_stats+0x47/0x440
[  415.280243][T12142]  bpf_prog_alloc_no_stats+0x47/0x440
[  415.285649][T12142]  ? bpf_prog_alloc+0x2b/0x1a0
[  415.290446][T12142]  bpf_prog_alloc+0x3d/0x1a0
[  415.295075][T12142]  bpf_prog_load+0x6eb/0x1670
[  415.299799][T12142]  ? map_freeze+0x420/0x420
[  415.304344][T12142]  ? __might_fault+0xaa/0x120
[  415.309054][T12142]  ? __lock_acquire+0x7d40/0x7d40
[  415.314109][T12142]  ? file_end_write+0x159/0x250
[  415.318990][T12142]  ? __might_fault+0xaa/0x120
[  415.323691][T12142]  ? __might_fault+0xc6/0x120
[  415.328396][T12142]  ? __might_fault+0xaa/0x120
[  415.333118][T12142]  ? bpf_lsm_bpf+0x9/0x10
[  415.337482][T12142]  ? security_bpf+0x7e/0xa0
[  415.342023][T12142]  __sys_bpf+0x5ba/0x890
[  415.346299][T12142]  ? bpf_link_show_fdinfo+0x390/0x390
[  415.351712][T12142]  ? lock_chain_count+0x20/0x20
[  415.356602][T12142]  __x64_sys_bpf+0x7c/0x90
[  415.361047][T12142]  do_syscall_64+0x55/0xa0
[  415.365498][T12142]  ? clear_bhb_loop+0x40/0x90
[  415.370238][T12142]  ? clear_bhb_loop+0x40/0x90
[  415.374949][T12142]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  415.380870][T12142] RIP: 0033:0x7f93a119bf79
[  415.385308][T12142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  415.404940][T12142] RSP: 002b:00007f93a2099028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  415.413378][T12142] RAX: ffffffffffffffda RBX: 00007f93a1415fa0 RCX: 00007f93a119bf79
[  415.421375][T12142] RDX: 0000000000000094 RSI: 0000200000001b40 RDI: 0000000000000005
[  415.429372][T12142] RBP: 00007f93a2099090 R08: 0000000000000000 R09: 0000000000000000
[  415.437372][T12142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.445400][T12142] R13: 00007f93a1416038 R14: 00007f93a1415fa0 R15: 00007ffea03b0e08
[  415.453444][T12142]  </TASK>
[  415.486257][T12142] Mem-Info:
[  415.489456][T12142] active_anon:8994 inactive_anon:0 isolated_anon:0
[  415.489456][T12142]  active_file:18290 inactive_file:40059 isolated_file:0
[  415.489456][T12142]  unevictable:768 dirty:199 writeback:0
[  415.489456][T12142]  slab_reclaimable:10784 slab_unreclaimable:94686
[  415.489456][T12142]  mapped:25415 shmem:1361 pagetables:590
[  415.489456][T12142]  sec_pagetables:0 bounce:0
[  415.489456][T12142]  kernel_misc_reclaimable:0
[  415.489456][T12142]  free:1335778 free_pcp:9047 free_cma:0
[  415.592767][T12142] Node 0 active_anon:36076kB inactive_anon:0kB active_file:73160kB inactive_file:160036kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101660kB dirty:796kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11760kB pagetables:2360kB sec_pagetables:0kB all_unreclaimable? no
[  415.669226][T12142] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  415.701941][T12142] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  415.751407][T12147] validate_nla: 2 callbacks suppressed
[  415.751426][T12147] netlink: 'syz.1.1891': attribute type 64 has an invalid length.
[  415.752790][T12142] lowmem_reserve[]: 0 2521 2522 2522 2522
[  415.780798][T12142] Node 0 DMA32 free:1437400kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36140kB inactive_anon:0kB active_file:73160kB inactive_file:159212kB unevictable:1536kB writepending:796kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:13772kB local_pcp:1312kB free_cma:0kB
[  415.817045][T12142] lowmem_reserve[]: 0 0 0 0 0
[  415.824364][T12142] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  415.857228][T12142] lowmem_reserve[]: 0 0 0 0 0
[  415.862043][T12142] Node 1 Normal free:3889232kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:22944kB local_pcp:10560kB free_cma:0kB
[  415.892046][T12142] lowmem_reserve[]: 0 0 0 0 0
[  415.897579][T12142] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  415.910470][T12142] Node 0 DMA32: 326*4kB (UME) 1270*8kB (UM) 1081*16kB (UM) 1424*32kB (UM) 694*64kB (UME) 240*128kB (UME) 61*256kB (UME) 19*512kB (UME) 13*1024kB (UM) 10*2048kB (UM) 300*4096kB (UM) = 1437400kB
[  415.930614][T12142] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  415.942270][T12142] Node 1 Normal: 244*4kB (UME) 56*8kB (UME) 42*16kB (UME) 37*32kB (UME) 16*64kB (UME) 7*128kB (UME) 2*256kB (UM) 1*512kB (E) 2*1024kB (UE) 1*2048kB (E) 947*4096kB (M) = 3889232kB
[  415.963595][T12142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  415.976472][T12142] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  415.985829][T12142] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  416.024433][T12142] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  416.034047][T12142] 59710 total pagecache pages
[  416.040178][T12142] 0 pages in swap cache
[  416.044377][T12142] Free swap  = 124996kB
[  416.049343][T12142] Total swap = 124996kB
[  416.054191][T12142] 2097051 pages RAM
[  416.061098][T12142] 0 pages HighMem/MovableOnly
[  416.065826][T12142] 416922 pages reserved
[  416.081134][T12142] 0 pages cma reserved
[  416.216623][T12154] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1893'.
[  416.524998][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'.
[  417.464284][T12202] IPv6: Can't replace route, no match found
[  417.553247][T12202] delete_channel: no stack
[  418.228122][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1920'.
[  418.473511][T12243] netlink: 'syz.0.1923': attribute type 21 has an invalid length.
[  418.836439][T12232] netlink: 'syz.3.1921': attribute type 17 has an invalid length.
[  418.942608][T12257] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  419.006388][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.051712][T12257] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  419.077484][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.117769][T12257] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  419.146057][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.176238][T12257] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  419.196366][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.229135][T12257] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  419.256182][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.289866][T12257] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  419.328180][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.357422][T12257] netlink: 'syz.0.1927': attribute type 10 has an invalid length.
[  419.392593][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.403585][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.424609][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  419.446073][T12257] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1927'.
[  420.301601][T12278] IPv6: Can't replace route, no match found
[  420.357395][T12278] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  421.253397][T12303] wg2: entered allmulticast mode
[  421.351742][T12306] wg2: entered promiscuous mode
[  421.612685][T12311] validate_nla: 63 callbacks suppressed
[  421.612723][T12311] netlink: 'syz.1.1944': attribute type 10 has an invalid length.
[  421.650325][T12311] team0: Device hsr_slave_0 failed to register rx_handler
[  422.561652][T12337] netlink: 'syz.3.1952': attribute type 10 has an invalid length.
[  422.576979][T12337] syz_tun: left promiscuous mode
[  422.603623][T12337] `: Port device syz_tun added
[  422.633136][T12338] netlink: 'syz.3.1952': attribute type 10 has an invalid length.
[  424.049540][T12377] netlink: 'syz.2.1960': attribute type 29 has an invalid length.
[  424.072757][T12377] netlink: 'syz.2.1960': attribute type 29 has an invalid length.
[  424.114557][T12377] netlink: 'syz.2.1960': attribute type 29 has an invalid length.
[  424.138975][T12377] netlink: 'syz.2.1960': attribute type 29 has an invalid length.
[  425.129538][T12400] __nla_validate_parse: 99 callbacks suppressed
[  425.129562][T12400] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1966'.
[  426.672688][T12440] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1977'.
[  426.727534][T12445] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1977'.
[  426.850983][T12445] netlink: 'syz.3.1977': attribute type 29 has an invalid length.
[  426.863539][T12445] netlink: 'syz.3.1977': attribute type 29 has an invalid length.
[  426.876330][T12445] netlink: 'syz.3.1977': attribute type 29 has an invalid length.
[  426.885676][T12445] netlink: 'syz.3.1977': attribute type 29 has an invalid length.
[  427.161239][T12454] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.1986'.
[  428.363517][T12473] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1992'.
[  431.273263][T12506] netlink: 'syz.0.1998': attribute type 10 has an invalid length.
[  431.305785][T12506] netlink: 'syz.0.1998': attribute type 10 has an invalid length.
[  431.403797][T12506] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1998'.
[  431.415239][T12506] openvswitch: netlink: Message has 4 unknown bytes.
[  431.951265][T12524] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2005'.
[  433.735392][T12562] netlink: 'syz.1.2015': attribute type 1 has an invalid length.
[  433.756657][T12562] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2015'.
[  434.987836][T12588] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2021'.
[  435.514516][T12597] netlink: 'syz.2.2026': attribute type 1 has an invalid length.
[  435.545498][T12597] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2026'.
[  436.742457][T12627] netlink: 'syz.1.2036': attribute type 5 has an invalid length.
[  437.149711][T12632] netlink: 'syz.1.2039': attribute type 8 has an invalid length.
[  437.165428][T12632] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2039'.
[  437.263815][T12639] netlink: 'syz.0.2040': attribute type 1 has an invalid length.
[  437.292355][T12639] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2040'.
[  437.334491][T12643] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2041'.
[  437.345508][T12643] veth0_to_bond: entered promiscuous mode
[  437.575386][T12646] netlink: 'syz.0.2050': attribute type 1 has an invalid length.
[  437.612079][T12646] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2050'.
[  438.027910][T12655] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.2045'.
[  438.722551][T12661] netlink: 'syz.2.2046': attribute type 10 has an invalid length.
[  438.736188][T12661] netlink: 'syz.2.2046': attribute type 10 has an invalid length.
[  438.744420][T12661] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2046'.
[  438.778274][T12661] openvswitch: netlink: Message has 4 unknown bytes.
[  438.851662][T12667] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2049'.
[  438.948165][T12669] netlink: 'syz.3.2048': attribute type 19 has an invalid length.
[  439.072687][T12671] netlink: 'syz.1.2051': attribute type 29 has an invalid length.
[  439.102165][T12671] netlink: 'syz.1.2051': attribute type 29 has an invalid length.
[  439.130488][T12674] netlink: 'syz.1.2051': attribute type 29 has an invalid length.
[  439.908549][T12684] netlink: 'syz.3.2053': attribute type 1 has an invalid length.
[  439.946310][T12684] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2053'.
[  440.330843][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  440.335923][T12692] IPv6: Can't replace route, no match found
[  440.337694][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  442.111073][T12720] netlink: 'syz.1.2064': attribute type 8 has an invalid length.
[  442.129245][T12720] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2064'.
[  442.564787][T12724] netlink: 'syz.1.2066': attribute type 10 has an invalid length.
[  442.608086][T12724] netlink: 'syz.1.2066': attribute type 10 has an invalid length.
[  442.655476][T12724] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.2066'.
[  442.681428][T12727] netlink: 'syz.3.2067': attribute type 1 has an invalid length.
[  442.726645][T12724] openvswitch: netlink: Message has 4 unknown bytes.
[  442.755997][T12727] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2067'.
[  443.196508][T12734] IPv6: Can't replace route, no match found
[  443.494807][T12736] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.2070'.
[  443.988401][T12744] can: request_module (can-proto-0) failed.
[  445.053246][T12769] netlink: 'syz.3.2079': attribute type 1 has an invalid length.
[  445.093171][T12769] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2079'.
[  445.172350][T12768] netlink: 'syz.1.2078': attribute type 2 has an invalid length.
[  445.202675][T12771] netlink: 'syz.0.2077': attribute type 22 has an invalid length.
[  445.218063][T12768] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2078'.
[  445.278374][T12771] netlink: 'syz.0.2077': attribute type 9 has an invalid length.
[  445.414918][T12771] netlink: 303 bytes leftover after parsing attributes in process `syz.0.2077'.
[  446.237590][T12793] netlink: 'syz.3.2084': attribute type 10 has an invalid length.
[  446.277961][T12793] batman_adv: batadv0: Adding interface: netdevsim0
[  446.284647][T12793] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  446.363319][T12793] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  446.425471][T12799] netlink: 'syz.2.2086': attribute type 22 has an invalid length.
[  446.465988][T12799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2086'.
[  447.472645][T12807] netlink: 'syz.3.2087': attribute type 10 has an invalid length.
[  447.510601][T12807] netlink: 'syz.3.2087': attribute type 10 has an invalid length.
[  447.541456][T12807] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.2087'.
[  447.586032][T12807] openvswitch: netlink: Message has 4 unknown bytes.
[  450.080149][T12849] netlink: 'syz.3.2104': attribute type 6 has an invalid length.
[  450.093454][T12849] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2104'.
[  450.699827][T12862] netlink: 'syz.0.2106': attribute type 21 has an invalid length.
[  450.758402][T12862] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2106'.
[  450.825258][T12869] netlink: 'syz.2.2110': attribute type 10 has an invalid length.
[  450.837460][T12869] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2110'.
[  451.322782][T12881] netlink: 'syz.0.2113': attribute type 1 has an invalid length.
[  451.325556][T12885] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2114'.
[  451.451172][T12881] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2113'.
[  451.564248][T12890] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2117'.
[  452.310585][T12900] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2120'.
[  452.342040][T12900] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  452.625293][T12911] netlink: 'syz.2.2123': attribute type 10 has an invalid length.
[  452.644158][T12911] batman_adv: batadv0: Adding interface: netdevsim0
[  452.655730][T12911] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  452.681848][T12911] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  453.094597][T12920] veth0_vlan: entered allmulticast mode
[  453.369575][T12924] veth0_vlan: left promiscuous mode
[  453.375657][T12924] veth0_vlan: entered promiscuous mode
[  453.498464][T12927] netlink: 'syz.0.2128': attribute type 1 has an invalid length.
[  453.516098][T12927] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2128'.
[  453.632244][T12933] netlink: 'syz.1.2129': attribute type 10 has an invalid length.
[  454.159052][T12946] netlink: 'syz.0.2136': attribute type 39 has an invalid length.
[  455.727812][T12962] netlink: 'syz.3.2141': attribute type 1 has an invalid length.
[  455.735660][T12962] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2141'.
[  455.941683][T12966] netlink: 'syz.1.2140': attribute type 10 has an invalid length.
[  455.977187][T12966] batman_adv: batadv0: Adding interface: netdevsim0
[  455.987619][T12966] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  456.067111][T12966] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  457.722904][T13016] netlink: 'syz.2.2159': attribute type 39 has an invalid length.
[  458.210522][T13024] netlink: 'syz.2.2159': attribute type 21 has an invalid length.
[  458.210735][T13032] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2163'.
[  458.242499][T13032] netlink: 'syz.1.2163': attribute type 29 has an invalid length.
[  458.246169][T13024] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2159'.
[  458.350677][T13029] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2163'.
[  458.392219][T13032] netlink: 'syz.1.2163': attribute type 29 has an invalid length.
[  458.499468][T13033] netlink: 'syz.1.2163': attribute type 29 has an invalid length.
[  458.508492][T13034] netlink: 'syz.1.2163': attribute type 29 has an invalid length.
[  458.810537][T13045] netlink: 'syz.1.2167': attribute type 2 has an invalid length.
[  458.835913][T13045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2167'.
[  458.911828][T13048] netlink: 21 bytes leftover after parsing attributes in process `syz.2.2165'.
[  458.949969][T13048] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  461.737739][T13078] netlink: 64967 bytes leftover after parsing attributes in process `syz.1.2174'.
[  461.810277][T13079] netlink: 64967 bytes leftover after parsing attributes in process `syz.1.2174'.
[  462.160875][T13096] delete_channel: no stack
[  462.316942][T13104] netlink: 'syz.1.2177': attribute type 3 has an invalid length.
[  462.345300][T13104] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2177'.
[  462.614622][T13107] netlink: 21 bytes leftover after parsing attributes in process `syz.3.2181'.
[  462.638995][T13107] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  463.419801][T13111] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2190'.
[  463.453155][T13115] netlink: 'syz.0.2190': attribute type 9 has an invalid length.
[  463.481616][T13115] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2190'.
[  463.506238][T13116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2183'.
[  463.515338][T13116] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2183'.
[  463.529770][T13111] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8
[  463.580250][T13117] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2183'.
[  465.041000][T13141] netlink: 'syz.1.2188': attribute type 1 has an invalid length.
[  465.075104][T13141] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2188'.
[  466.025472][T13148] netlink: 'syz.0.2192': attribute type 39 has an invalid length.
[  467.050079][T13164] netlink: 'syz.3.2197': attribute type 21 has an invalid length.
[  467.372874][T13181] netlink: 'syz.1.2201': attribute type 1 has an invalid length.
[  467.386667][T13181] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2201'.
[  468.151132][T13198] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2208'.
[  468.199096][T13198] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  468.398704][T13205] netlink: 'syz.2.2210': attribute type 1 has an invalid length.
[  468.418339][T13205] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2210'.
[  468.518177][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  468.528984][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  468.555985][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  468.567104][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  468.579141][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  468.596186][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  468.675265][T13200] syzkaller0: entered promiscuous mode
[  468.689949][T13200] syzkaller0: entered allmulticast mode
[  469.618292][ T1139] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.640321][ T5084] Bluetooth: hci4: command tx timeout
[  471.368855][ T1139] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.416535][T13236] netlink: 'syz.0.2218': attribute type 17 has an invalid length.
[  471.515767][ T1139] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.618355][ T1139] batman_adv: batadv0: Removing interface: netdevsim0
[  471.654665][ T1139] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.707391][T13207] chnl_net:caif_netlink_parms(): no params data found
[  472.716619][ T5084] Bluetooth: hci4: command tx timeout
[  473.500085][T13207] bridge0: port 1(bridge_slave_0) entered blocking state
[  473.576042][T13207] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.583379][T13207] bridge_slave_0: entered allmulticast mode
[  473.666897][T13207] bridge_slave_0: entered promiscuous mode
[  473.706805][T13207] bridge0: port 2(bridge_slave_1) entered blocking state
[  473.714022][T13207] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.756173][T13207] bridge_slave_1: entered allmulticast mode
[  473.767842][T13207] bridge_slave_1: entered promiscuous mode
[  473.880661][T13207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  473.918093][T13207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  474.064125][T13207] team0: Port device team_slave_0 added
[  474.125000][T13207] team0: Port device team_slave_1 added
[  474.242492][T13207] batman_adv: batadv0: Adding interface: batadv_slave_0
[  474.276019][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.364662][T13207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  474.408431][T13207] batman_adv: batadv0: Adding interface: batadv_slave_1
[  474.415446][T13207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  474.524360][T13207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  474.796156][ T5084] Bluetooth: hci4: command tx timeout
[  475.271181][T13207] hsr_slave_0: entered promiscuous mode
[  475.313315][T13207] hsr_slave_1: entered promiscuous mode
[  475.643577][T13287] netlink: 'syz.3.2226': attribute type 4 has an invalid length.
[  475.673195][T13287] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2226'.
[  476.876296][ T5084] Bluetooth: hci4: command tx timeout
[  477.657917][T13334] sctp: [Deprecated]: syz.0.2235 (pid 13334) Use of int in maxseg socket option.
[  477.657917][T13334] Use struct sctp_assoc_value instead
[  477.947877][T13334] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  478.590130][T13207] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  478.601549][T13207] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  478.613438][T13207] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  478.630966][T13207] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  478.823410][T13207] 8021q: adding VLAN 0 to HW filter on device bond0
[  478.885653][T13207] 8021q: adding VLAN 0 to HW filter on device team0
[  478.938912][T10116] bridge0: port 1(bridge_slave_0) entered blocking state
[  478.946170][T10116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  478.961230][T10116] bridge0: port 2(bridge_slave_1) entered blocking state
[  478.968473][T10116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  479.344324][ T1139] hsr_slave_0: left promiscuous mode
[  479.372686][ T1139] hsr_slave_1: left promiscuous mode
[  479.387494][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  479.394992][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  479.407040][ T1139] batman_adv: batadv0: Interface deactivated: 
€Â0
[  479.413801][ T1139] batman_adv: batadv0: Removing interface: 
€Â0
[  479.424488][ T1139] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  479.431931][ T1139] batman_adv: batadv0: Removing interface: virt_wifi0
[  479.442140][ T1139] bridge0: port 3(team0) entered disabled state
[  479.460169][ T1139] bridge_slave_1: left allmulticast mode
[  479.471723][ T1139] bridge_slave_1: left promiscuous mode
[  479.478360][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.488407][ T1139] bridge_slave_0: left allmulticast mode
[  479.494113][ T1139] bridge_slave_0: left promiscuous mode
[  479.506776][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.542124][ T1139] veth0_macvtap: left promiscuous mode
[  480.022372][ T1139] team_slave_1 (unregistering): left promiscuous mode
[  480.029560][ T1139] team_slave_1 (unregistering): left allmulticast mode
[  480.041567][ T1139] team0 (unregistering): Port device team_slave_1 removed
[  480.088557][ T1139] team_slave_0 (unregistering): left promiscuous mode
[  480.095435][ T1139] team_slave_0 (unregistering): left allmulticast mode
[  480.103661][ T1139] team0 (unregistering): Port device team_slave_0 removed
[  480.552993][T13207] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.639904][T13207] veth0_vlan: entered promiscuous mode
[  480.674998][T13207] veth1_vlan: entered promiscuous mode
[  480.772875][T13207] veth0_macvtap: entered promiscuous mode
[  480.785043][T13207] veth1_macvtap: entered promiscuous mode
[  480.829072][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  480.842401][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.854156][T13207] batman_adv: batadv0: Interface activated: batadv_slave_0
[  480.866112][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.877482][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.887542][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.898155][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.908184][T13207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  480.918702][T13207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  480.932378][T13207] batman_adv: batadv0: Interface activated: batadv_slave_1
[  480.954597][T13207] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  480.974116][T13207] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  480.984375][T13207] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  480.993536][T13207] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.173211][T10115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.196208][T10115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.244762][T10116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  481.260480][T10116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  481.494697][T13398] raw_sendmsg: syz.0.2249 forgot to set AF_INET. Fix it!
[  481.536393][T13394] sit0: left promiscuous mode
[  483.371366][T13435] sctp: [Deprecated]: syz.2.2254 (pid 13435) Use of struct sctp_assoc_value in delayed_ack socket option.
[  483.371366][T13435] Use struct sctp_sack_info instead
[  483.729699][T13437] netlink: 'syz.3.2255': attribute type 1 has an invalid length.
[  483.744632][T13437] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2255'.
[  483.806830][T13443] netlink: 'syz.2.2257': attribute type 3 has an invalid length.
[  483.814643][T13443] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2257'.
[  483.993959][T13448] netlink: 'syz.3.2259': attribute type 3 has an invalid length.
[  484.019851][T13453] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2259'.
[  484.026987][T13448] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2259'.
[  484.907393][T13490] netlink: 'syz.0.2271': attribute type 39 has an invalid length.
[  485.318822][T13501] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2276'.
[  485.335154][T13501] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2276'.
[  485.552558][T13507] bridge_slave_1: left allmulticast mode
[  485.566034][T13507] bridge_slave_1: left promiscuous mode
[  485.578220][T13507] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.593218][T13508] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2279'.
[  485.645392][T13507] bridge_slave_0: left allmulticast mode
[  485.651719][T13507] bridge_slave_0: left promiscuous mode
[  485.658532][T13507] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.813083][T13517] netlink: 'syz.0.2281': attribute type 1 has an invalid length.
[  485.826694][T13517] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2281'.
[  485.843502][T13512] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2278'.
[  485.855662][T13512] hsr_slave_0: left promiscuous mode
[  485.879634][T13512] hsr_slave_1: left promiscuous mode
[  485.954098][T13515] pim6reg0: tun_chr_ioctl cmd 1074025675
[  485.960778][T13515] pim6reg0: persist enabled
[  485.965561][T13518] pim6reg0: tun_chr_ioctl cmd 1074812117
[  485.980566][T13520] netlink: 'syz.2.2282': attribute type 29 has an invalid length.
[  485.993558][T13520] netlink: 'syz.2.2282': attribute type 29 has an invalid length.
[  486.016707][T13520] netlink: 'syz.2.2282': attribute type 29 has an invalid length.
[  486.139839][T13522] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2283'.
[  486.297989][T13531] C: renamed from team_slave_0 (while UP)
[  486.401820][T13531] netlink: 'syz.1.2286': attribute type 3 has an invalid length.
[  486.416475][T13531] netlink: 'syz.1.2286': attribute type 1 has an invalid length.
[  487.776411][T13547] pim6reg1: entered promiscuous mode
[  487.797229][T13547] pim6reg1: entered allmulticast mode
[  488.891116][T13580] __nla_validate_parse: 4 callbacks suppressed
[  488.891135][T13580] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2301'.
[  490.085505][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2316'.
[  490.129100][T13631] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2316'.
[  490.217577][T13634] validate_nla: 3 callbacks suppressed
[  490.217597][T13634] netlink: 'syz.3.2318': attribute type 10 has an invalid length.
[  490.255946][T13634] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2318'.
[  490.265196][T13634] `: entered promiscuous mode
[  490.286354][T13634] C: entered promiscuous mode
[  490.291543][T13634] team_slave_1: entered promiscuous mode
[  490.320007][T13634] dummy0: entered promiscuous mode
[  490.338912][T13634] syz_tun: entered promiscuous mode
[  490.346469][T13634] `: entered allmulticast mode
[  490.367794][T13634] C: entered allmulticast mode
[  490.395216][T13634] team_slave_1: entered allmulticast mode
[  490.425004][T13634] dummy0: entered allmulticast mode
[  490.464949][T13634] syz_tun: entered allmulticast mode
[  490.482448][T13634] bridge0: port 3(`) entered blocking state
[  490.506129][T13634] bridge0: port 3(`) entered disabled state
[  490.545246][T13634] bridge0: port 3(`) entered blocking state
[  490.551921][T13634] bridge0: port 3(`) entered forwarding state
[  490.818470][T13642] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2319'.
[  490.960972][T13647] netlink: 'syz.2.2321': attribute type 2 has an invalid length.
[  491.091473][T13647] netlink: 7994 bytes leftover after parsing attributes in process `syz.2.2321'.
[  491.142126][T13654] Ÿë
: port 1(gretap0) entered blocking state
[  491.150455][T13654] Ÿë
: port 1(gretap0) entered disabled state
[  491.157003][T13654] gretap0: entered allmulticast mode
[  491.164066][T13654] gretap0: entered promiscuous mode
[  491.189891][T13652] Ÿë
: port 2(veth0_to_team) entered blocking state
[  491.216447][T13652] Ÿë
: port 2(veth0_to_team) entered disabled state
[  491.224104][T13652] veth0_to_team: entered allmulticast mode
[  491.270665][T13652] veth0_to_team: entered promiscuous mode
[  491.584748][T13675] pim6reg1: entered promiscuous mode
[  491.600354][T13675] pim6reg1: entered allmulticast mode
[  491.756185][T13684] netlink: 'syz.1.2333': attribute type 2 has an invalid length.
[  492.251150][T13693] netlink: 'syz.1.2336': attribute type 1 has an invalid length.
[  492.259847][T13693] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2336'.
[  492.470096][T13699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  492.977930][T13718] netlink: 'syz.1.2345': attribute type 29 has an invalid length.
[  492.996406][T13718] netlink: 'syz.1.2345': attribute type 29 has an invalid length.
[  493.013978][T13718] netlink: 'syz.1.2345': attribute type 29 has an invalid length.
[  493.029513][T13718] netlink: 'syz.1.2345': attribute type 29 has an invalid length.
[  493.096394][T13718] netlink: 'syz.1.2345': attribute type 2 has an invalid length.
[  493.114612][T13718] netlink: 'syz.1.2345': attribute type 1 has an invalid length.
[  493.124761][T13718] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2345'.
[  495.388816][T13763] validate_nla: 1 callbacks suppressed
[  495.388854][T13763] netlink: 'syz.1.2359': attribute type 2 has an invalid length.
[  495.521189][T13763] netlink: 7994 bytes leftover after parsing attributes in process `syz.1.2359'.
[  495.891061][T13778] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2365'.
[  496.244904][ T5771] syz_tun (unregistering): left promiscuous mode
[  496.262150][ T5771] syz_tun (unregistering): left allmulticast mode
[  496.279329][T13786] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2367'.
[  496.293733][ T5771] `: Port device syz_tun removed
[  496.318330][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  496.335262][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  496.345722][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  496.367578][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  496.380070][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  496.394449][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  496.505190][T10110] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.663409][T10110] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.707479][T13804] netlink: 'syz.2.2372': attribute type 9 has an invalid length.
[  496.715402][T13804] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2372'.
[  496.741001][T13802] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2373'.
[  496.872452][T10110] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  496.900763][T13811] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2375'.
[  497.088721][T10110] batman_adv: batadv0: Removing interface: netdevsim0
[  497.112520][T10110] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.351989][T13829] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  497.383196][T13829] batman_adv: batadv0: Removing interface: batadv_slave_1
[  497.449363][T13833] netlink: 'syz.2.2378': attribute type 3 has an invalid length.
[  497.467201][T13829] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  497.467235][T13829] batman_adv: batadv0: Removing interface: virt_wifi0
[  497.495982][T13833] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.2378'.
[  497.767084][T13829] batman_adv: batadv0: Removing interface: netdevsim0
[  498.476180][ T5084] Bluetooth: hci1: command tx timeout
[  500.353020][T13824] syzkaller0: entered promiscuous mode
[  500.358857][T13824] syzkaller0: entered allmulticast mode
[  500.559214][ T5084] Bluetooth: hci1: command tx timeout
[  501.531767][T13862] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.2385'.
[  501.770906][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  501.777431][ T1281] ieee802154 phy1 wpan1: encryption failed: -22
[  502.636564][ T5084] Bluetooth: hci1: command tx timeout
[  502.710946][T13787] chnl_net:caif_netlink_parms(): no params data found
[  503.297137][T13787] bridge0: port 1(bridge_slave_0) entered blocking state
[  503.316541][T13787] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.335271][T13787] bridge_slave_0: entered allmulticast mode
[  503.355267][T13787] bridge_slave_0: entered promiscuous mode
[  503.379661][T13787] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.404675][T13787] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.414794][T13787] bridge_slave_1: entered allmulticast mode
[  503.433052][T13787] bridge_slave_1: entered promiscuous mode
[  503.505653][T13787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.544076][T13787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.635162][T13891] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2391'.
[  503.879148][T13787] team0: Port device team_slave_0 added
[  503.909071][T13903] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2394'.
[  503.985531][T13787] team0: Port device team_slave_1 added
[  504.285938][T13787] batman_adv: batadv0: Adding interface: batadv_slave_0
[  504.321374][T13787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.383346][T13787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  504.457232][T13787] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.471893][T13787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  504.513612][T13787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.713205][T13925] netlink: 'syz.1.2401': attribute type 10 has an invalid length.
[  504.723295][ T5084] Bluetooth: hci1: command tx timeout
[  504.801436][T13937] netlink: 142528 bytes leftover after parsing attributes in process `syz.0.2403'.
[  504.832665][T13925] 8021q: adding VLAN 0 to HW filter on device team0
[  504.874965][T13925] bond0: (slave team0): Enslaving as an active interface with an up link
[  504.906563][T13930] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2401'.
[  504.961517][T13937] netlink: 'syz.0.2403': attribute type 1 has an invalid length.
[  505.043034][T13787] hsr_slave_0: entered promiscuous mode
[  505.067226][T13787] hsr_slave_1: entered promiscuous mode
[  505.106499][T13941] netlink: 'syz.2.2404': attribute type 12 has an invalid length.
[  505.115368][T13941] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2404'.
[  505.239121][T13947] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2406'.
[  505.356548][T13954] netlink: 'syz.2.2408': attribute type 1 has an invalid length.
[  505.385957][T13954] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2408'.
[  505.415985][T13954] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2408'.
[  505.958033][T13978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  505.965536][T13978] batman_adv: batadv0: Removing interface: batadv_slave_1
[  506.155059][T13984] netlink: 'syz.0.2413': attribute type 3 has an invalid length.
[  506.186394][T13984] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.2413'.
[  506.309624][T10110] hsr_slave_0: left promiscuous mode
[  506.316242][T10110] hsr_slave_1: left promiscuous mode
[  506.326994][T10110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  506.344726][T10110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  506.377748][T10110] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  506.395526][T10110] batman_adv: batadv0: Removing interface: batadv_slave_1
[  506.417378][T10110] bridge0: port 3(`) entered disabled state
[  506.433487][T10110] bridge_slave_1: left allmulticast mode
[  506.439939][T10110] bridge_slave_1: left promiscuous mode
[  506.445738][T10110] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.460409][T10110] bridge_slave_0: left promiscuous mode
[  506.468588][T10110] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.535234][T10110] veth0_macvtap: left promiscuous mode
[  506.542427][T10110] veth1_vlan: left promiscuous mode
[  506.557488][T10110] veth0_vlan: left promiscuous mode
[  506.722253][T13998] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2417'.
[  507.270026][T10110] team_slave_1 (unregistering): left promiscuous mode
[  507.277955][T10110] team_slave_1 (unregistering): left allmulticast mode
[  507.289373][T10110] ` (unregistering): Port device team_slave_1 removed
[  507.333471][T10110] C (unregistering): left promiscuous mode
[  507.339405][T10110] C (unregistering): left allmulticast mode
[  507.351922][T10110] ` (unregistering): Port device C removed
[  507.688931][T10110] dummy0 (unregistering): left promiscuous mode
[  507.695290][T10110] dummy0 (unregistering): left allmulticast mode
[  507.704627][T10110] ` (unregistering): Port device dummy0 removed
[  507.844396][T13986] netlink: 'syz.2.2415': attribute type 5 has an invalid length.
[  508.039736][T14003] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2418'.
[  508.488414][T13787] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  508.527082][T13787] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  508.595915][T14022] netlink: 'syz.1.2422': attribute type 21 has an invalid length.
[  508.622401][T14022] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2422'.
[  508.675624][T13787] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  508.715446][T13787] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  508.773056][T14024] netlink: 'syz.2.2423': attribute type 21 has an invalid length.
[  508.828333][T14023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  508.989736][T13787] 8021q: adding VLAN 0 to HW filter on device bond0
[  509.026841][T13787] 8021q: adding VLAN 0 to HW filter on device team0
[  509.054745][T10117] bridge0: port 1(bridge_slave_0) entered blocking state
[  509.061978][T10117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  509.088996][T10117] bridge0: port 2(bridge_slave_1) entered blocking state
[  509.096280][T10117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  509.264817][T14045] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2425'.
[  509.487324][T14054] netlink: 'syz.2.2427': attribute type 3 has an invalid length.
[  509.495545][T14054] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2427'.
[  510.990335][T14074] netlink: 'syz.0.2432': attribute type 10 has an invalid length.
[  511.374127][T13787] 8021q: adding VLAN 0 to HW filter on device batadv0
[  511.513064][T14093] netlink: 'syz.2.2433': attribute type 10 has an invalid length.
[  511.808217][T13787] veth0_vlan: entered promiscuous mode
[  511.859071][T13787] veth1_vlan: entered promiscuous mode
[  511.956148][T13787] veth0_macvtap: entered promiscuous mode
[  512.036495][T13787] veth1_macvtap: entered promiscuous mode
[  512.091992][T13787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  512.112819][T14111] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2437'.
[  512.125919][T13787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  512.140073][T13787] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.153486][T13787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  512.167458][T13787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  512.183000][T13787] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.231561][T13787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.247326][T13787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.257808][T13787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  512.266688][T13787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  512.492766][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.518706][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  512.539779][T14118] netlink: 'syz.2.2439': attribute type 33 has an invalid length.
[  512.566896][T14118] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2439'.
[  512.642849][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.651949][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.456585][T14147] sock: sock_timestamping_bind_phc: sock not bind to device
[  513.956828][T14155] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.2446'.
[  514.370834][T14173] netlink: 'syz.1.2452': attribute type 10 has an invalid length.
[  514.528184][T14173] team0: Port device geneve1 added
[  514.540587][T14176] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2452'.
[  515.086694][ T3449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.130233][T14194] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2459'.
[  515.150938][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  515.164528][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  515.174228][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  515.186236][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  515.194377][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  515.206665][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  515.263183][ T3449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.366724][ T3449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  515.662438][T14210] netlink: 'syz.1.2463': attribute type 2 has an invalid length.
[  515.690814][T14210] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2463'.
[  516.170350][ T3449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  516.443743][T14196] chnl_net:caif_netlink_parms(): no params data found
[  516.741810][T14236] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2470'.
[  517.277381][ T5084] Bluetooth: hci2: command tx timeout
[  517.411726][T14246] netlink: 'syz.2.2471': attribute type 10 has an invalid length.
[  517.809219][T14258] netlink: 'syz.2.2474': attribute type 1 has an invalid length.
[  517.833944][T14258] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2474'.
[  517.904214][T14196] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.911801][T14196] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.919154][T14196] bridge_slave_0: entered allmulticast mode
[  517.926849][T14196] bridge_slave_0: entered promiscuous mode
[  517.943796][T14196] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.952326][T14196] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.960229][T14196] bridge_slave_1: entered allmulticast mode
[  517.968227][T14196] bridge_slave_1: entered promiscuous mode
[  518.005510][T14261] netlink: 'syz.2.2474': attribute type 1 has an invalid length.
[  518.013547][T14261] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2474'.
[  518.271218][T14196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  518.307558][T14196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  518.522596][T14278] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2480'.
[  518.648793][T14196] team0: Port device team_slave_0 added
[  518.701072][T14196] team0: Port device team_slave_1 added
[  519.355951][ T5084] Bluetooth: hci2: command tx timeout
[  519.503227][T14297] netlink: 'syz.3.2483': attribute type 2 has an invalid length.
[  519.556525][T14196] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.563563][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.568044][T14297] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2483'.
[  519.695987][T14196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.873320][T14196] batman_adv: batadv0: Adding interface: batadv_slave_1
[  519.884179][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  519.921739][T14196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  519.933576][T14309] sctp: [Deprecated]: syz.2.2486 (pid 14309) Use of int in max_burst socket option deprecated.
[  519.933576][T14309] Use struct sctp_assoc_value instead
[  520.021916][T14310] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2487'.
[  520.142632][T14196] hsr_slave_0: entered promiscuous mode
[  520.170015][T14196] hsr_slave_1: entered promiscuous mode
[  520.206346][T14196] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  520.224592][T14196] Cannot create hsr debugfs directory
[  520.512687][T14318] netlink: 'syz.1.2490': attribute type 29 has an invalid length.
[  520.540971][T14318] netlink: 'syz.1.2490': attribute type 29 has an invalid length.
[  520.554558][T14321] netlink: 'syz.1.2490': attribute type 29 has an invalid length.
[  520.598415][T14318] netlink: 'syz.1.2490': attribute type 29 has an invalid length.
[  520.695497][ T3449] veth1_vlan: left promiscuous mode
[  520.708643][ T3449] veth0_vlan: left promiscuous mode
[  521.437442][ T5084] Bluetooth: hci2: command tx timeout
[  521.923098][T14330] netlink: 'syz.1.2490': attribute type 29 has an invalid length.
[  521.931357][T14332] tun0: tun_chr_ioctl cmd 1074025675
[  521.940580][T14332] tun0: persist enabled
[  521.945132][T14335] netlink: 'syz.2.2494': attribute type 21 has an invalid length.
[  521.953893][T14337] tun0: tun_chr_ioctl cmd 1074025675
[  521.963852][T14337] tun0: persist disabled
[  521.995559][T14341] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2492'.
[  522.059434][T14345] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.067313][T14345] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.101387][T14345] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.108968][T14345] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.117233][T14345] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.125039][T14345] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.159203][T14345] team0: Port device bridge0 added
[  523.423290][T14196] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  523.477830][T14384] validate_nla: 3 callbacks suppressed
[  523.477849][T14384] netlink: 'syz.2.2496': attribute type 2 has an invalid length.
[  523.516455][ T5084] Bluetooth: hci2: command tx timeout
[  523.619600][T14384] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2496'.
[  524.684107][T14386] netlink: 'syz.1.2500': attribute type 21 has an invalid length.
[  524.696042][T14386] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2500'.
[  524.730404][T14196] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  524.772778][T14196] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  524.837282][T14196] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  525.067994][T14405] netlink: 'syz.1.2502': attribute type 10 has an invalid length.
[  525.103634][T14405] veth1_macvtap: left promiscuous mode
[  525.308345][T14409] netlink: 'syz.3.2505': attribute type 39 has an invalid length.
[  525.841760][T14196] 8021q: adding VLAN 0 to HW filter on device bond0
[  526.053103][T14196] 8021q: adding VLAN 0 to HW filter on device team0
[  526.127961][  T160] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.135281][  T160] bridge0: port 1(bridge_slave_0) entered forwarding state
[  526.301280][  T160] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.308673][  T160] bridge0: port 2(bridge_slave_1) entered forwarding state
[  526.661216][T14439] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2513'.
[  527.162334][T14459] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2516'.
[  527.284699][T14196] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.305024][T14468] netlink: 'syz.1.2519': attribute type 21 has an invalid length.
[  527.329529][T14468] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2519'.
[  527.539813][T14473] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.2520'.
[  527.541299][T14196] veth0_vlan: entered promiscuous mode
[  527.612405][T14196] veth1_vlan: entered promiscuous mode
[  527.784361][T14196] veth0_macvtap: entered promiscuous mode
[  527.825225][T14196] veth1_macvtap: entered promiscuous mode
[  527.905387][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  527.939346][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  527.970751][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.011157][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.053832][T14196] batman_adv: batadv0: Interface activated: batadv_slave_0
[  528.125853][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.157036][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.187706][T14196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.221529][T14196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.258188][T14196] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.322737][T14196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.353536][T14196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.381266][T14196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.406283][T14196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.759347][T14494] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  528.783403][T14494] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  528.873644][T10116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.916071][T10116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.117088][T10116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.135290][T10116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.251407][T14506] netlink: 'syz.3.2524': attribute type 10 has an invalid length.
[  529.336425][T14506] veth1_macvtap: left promiscuous mode
[  529.634256][T14519] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.2529'.
[  530.802122][T14542] C: renamed from team_slave_0 (while UP)
[  530.839409][T14542] netlink: 'syz.3.2532': attribute type 3 has an invalid length.
[  530.874922][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  530.906163][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  530.914742][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  530.926738][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  530.933519][T14542] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  530.958947][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  530.968185][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  531.696111][T14576] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.2539'.
[  531.754827][T14573] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode
[  531.771898][T14573] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode
[  531.982261][T14588] netlink: 'syz.0.2541': attribute type 29 has an invalid length.
[  531.990765][T14588] netlink: 'syz.0.2541': attribute type 29 has an invalid length.
[  531.999880][T14588] netlink: 'syz.0.2541': attribute type 29 has an invalid length.
[  532.020530][T14588] netlink: 'syz.0.2541': attribute type 29 has an invalid length.
[  532.029180][T14588] netlink: 'syz.0.2541': attribute type 29 has an invalid length.
[  532.052591][T14588] netlink: 'syz.0.2541': attribute type 12 has an invalid length.
[  532.083759][T14588] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2541'.
[  532.388429][T14548] chnl_net:caif_netlink_parms(): no params data found
[  533.036814][ T5084] Bluetooth: hci0: command tx timeout
[  533.228610][T14635] netlink: 199644 bytes leftover after parsing attributes in process `syz.3.2548'.
[  533.283819][T14548] bridge0: port 1(bridge_slave_0) entered blocking state
[  533.293573][T14548] bridge0: port 1(bridge_slave_0) entered disabled state
[  533.305592][T14548] bridge_slave_0: entered allmulticast mode
[  533.320977][T14548] bridge_slave_0: entered promiscuous mode
[  533.422274][T14548] bridge0: port 2(bridge_slave_1) entered blocking state
[  533.446029][T14548] bridge0: port 2(bridge_slave_1) entered disabled state
[  533.463575][T14548] bridge_slave_1: entered allmulticast mode
[  533.475019][T14548] bridge_slave_1: entered promiscuous mode
[  533.670737][T14645] netlink: 'syz.3.2550': attribute type 2 has an invalid length.
[  533.689613][T14645] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2550'.
[  533.722413][T14548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.741622][T14648] sctp: [Deprecated]: syz.0.2551 (pid 14648) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.741622][T14648] Use struct sctp_sack_info instead
[  533.768334][T14548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.827609][T10116] gretap0 (unregistering): left allmulticast mode
[  533.834117][T10116] gretap0 (unregistering): left promiscuous mode
[  533.852282][T10116] Ÿë
: port 1(gretap0) entered disabled state
[  533.937874][T14654] netlink: 'syz.3.2550': attribute type 1 has an invalid length.
[  533.945718][T14654] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.2550'.
[  534.308523][T14659] netlink: 'syz.0.2552': attribute type 9 has an invalid length.
[  534.419570][T14659] netlink: 359 bytes leftover after parsing attributes in process `syz.0.2552'.
[  534.583151][T14548] team0: Port device team_slave_0 added
[  534.667856][T14548] team0: Port device team_slave_1 added
[  534.751275][T14548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.758789][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.813746][T14548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.865457][T14548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.876940][T14548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.913543][T14548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.992266][T14676] netlink: 199644 bytes leftover after parsing attributes in process `syz.3.2557'.
[  535.094059][T14548] hsr_slave_0: entered promiscuous mode
[  535.119576][ T5084] Bluetooth: hci0: command tx timeout
[  535.142115][T14548] hsr_slave_1: entered promiscuous mode
[  535.165258][T14548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  535.187710][T14548] Cannot create hsr debugfs directory
[  535.560451][T14702] IPv6: Can't replace route, no match found
[  536.189197][T10116] veth1_macvtap: left promiscuous mode
[  536.215712][T10116] veth0_macvtap: left promiscuous mode
[  536.257353][T10116] veth1_vlan: left promiscuous mode
[  536.361321][T14726] netlink: 199644 bytes leftover after parsing attributes in process `syz.0.2568'.
[  537.200011][ T5084] Bluetooth: hci0: command tx timeout
[  537.407977][T14722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2567'.
[  538.394054][T14548] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  538.458951][T14548] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  538.504050][T14548] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  538.529109][T14548] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  539.223070][T14784] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2579'.
[  539.276202][ T5084] Bluetooth: hci0: command tx timeout
[  540.202789][T14548] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.304902][T14548] 8021q: adding VLAN 0 to HW filter on device team0
[  540.341588][T10118] bridge0: port 1(bridge_slave_0) entered blocking state
[  540.348819][T10118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  540.445823][T10118] bridge0: port 2(bridge_slave_1) entered blocking state
[  540.453048][T10118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  540.495776][T14792] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode
[  540.514244][T14792] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode
[  540.945062][T14810] netlink: 'syz.3.2585': attribute type 2 has an invalid length.
[  541.270722][T14823] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2589'.
[  541.299372][T14548] 8021q: adding VLAN 0 to HW filter on device batadv0
[  541.407003][T14548] veth0_vlan: entered promiscuous mode
[  541.472381][T14548] veth1_vlan: entered promiscuous mode
[  541.547659][T14548] veth0_macvtap: entered promiscuous mode
[  541.568833][T14548] veth1_macvtap: entered promiscuous mode
[  541.604462][T14548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.622191][T14548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.635896][T14548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.665127][T14548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.681981][T14548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  541.718375][T14548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.850047][T14548] batman_adv: batadv0: Interface activated: batadv_slave_0
[  541.863626][T14548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  541.903519][T14548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  541.998451][T14548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.014120][T14548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.036245][T14548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  542.066126][T14548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.114110][T14548] batman_adv: batadv0: Interface activated: batadv_slave_1
[  542.332868][T14847] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2593'.
[  542.362248][T14548] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  542.386041][T14548] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  542.394918][T14548] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  542.430810][T14548] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  542.471830][T14847] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2593'.
[  544.088690][T10110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.121993][T10110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.191123][T10110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  544.209933][T10110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  544.231180][T14870] netlink: 'syz.1.2597': attribute type 21 has an invalid length.
[  545.722140][T14898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2605'.
[  545.825570][T14898] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2605'.
[  548.154945][T14921] netlink: 'syz.0.2612': attribute type 21 has an invalid length.
[  548.381339][T14937] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.2617'.
[  549.181173][T14948] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2620'.
[  549.248320][T14949] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  549.283299][T14949] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode
[  549.429427][T14956] netlink: 'syz.2.2624': attribute type 21 has an invalid length.
[  549.452902][T14954] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2622'.
[  549.784037][T14965] netlink: 'syz.3.2625': attribute type 2 has an invalid length.
[  550.877291][T14974] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2628'.
[  550.896326][T14975] netlink: 'syz.1.2628': attribute type 21 has an invalid length.
[  550.905040][T14975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2628'.
[  552.204673][T15007] can: request_module (can-proto-0) failed.
[  553.235722][T15017] netlink: 'syz.1.2650': attribute type 9 has an invalid length.
[  553.265637][T15017] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2650'.
[  553.585400][T15026] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2647'.
[  553.635452][T15026] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.2647'.
[  553.666527][T15026] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2647'.
[  554.468555][T15036] netlink: 'syz.0.2651': attribute type 29 has an invalid length.
[  554.476975][T15036] netlink: 'syz.0.2651': attribute type 29 has an invalid length.
[  554.489779][T15034] netlink: 'syz.0.2651': attribute type 29 has an invalid length.
[  554.661431][T15041] netlink: 'syz.2.2654': attribute type 3 has an invalid length.
[  554.686025][T15041] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2654'.
[  554.701348][T15036] netlink: 'syz.0.2651': attribute type 21 has an invalid length.
[  554.710420][T15036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2651'.
[  554.724597][T15040] netlink: 'syz.2.2654': attribute type 3 has an invalid length.
[  554.732783][T15040] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2654'.
[  555.115054][T15058] netlink: 'syz.2.2656': attribute type 3 has an invalid length.
[  555.129643][T15058] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2656'.
[  556.674507][T15103] netlink: 'syz.1.2668': attribute type 6 has an invalid length.
[  556.743309][T15107] netlink: 'syz.0.2666': attribute type 29 has an invalid length.
[  556.865452][T15112] FAULT_INJECTION: forcing a failure.
[  556.865452][T15112] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.884921][T15112] CPU: 1 PID: 15112 Comm: syz.1.2670 Not tainted syzkaller #0
[  556.892449][T15112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  556.902556][T15112] Call Trace:
[  556.905882][T15112]  <TASK>
[  556.908850][T15112]  dump_stack_lvl+0x18c/0x250
[  556.913596][T15112]  ? show_regs_print_info+0x20/0x20
[  556.918860][T15112]  ? load_image+0x400/0x400
[  556.923416][T15112]  ? __might_fault+0xaa/0x120
[  556.928177][T15112]  ? __lock_acquire+0x7d40/0x7d40
[  556.933279][T15112]  should_fail_ex+0x39d/0x4d0
[  556.938019][T15112]  _copy_from_user+0x2f/0xe0
[  556.942659][T15112]  btf_new_fd+0x366/0x9f0
[  556.947043][T15112]  ? bpf_btf_show_fdinfo+0x80/0x80
[  556.952218][T15112]  ? capable+0x88/0xe0
[  556.956338][T15112]  __sys_bpf+0x670/0x890
[  556.960629][T15112]  ? bpf_link_show_fdinfo+0x390/0x390
[  556.966060][T15112]  ? lock_chain_count+0x20/0x20
[  556.970972][T15112]  __x64_sys_bpf+0x7c/0x90
[  556.975424][T15112]  do_syscall_64+0x55/0xa0
[  556.979896][T15112]  ? clear_bhb_loop+0x40/0x90
[  556.984617][T15112]  ? clear_bhb_loop+0x40/0x90
[  556.989349][T15112]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  556.995286][T15112] RIP: 0033:0x7f7a96b9bf79
[  556.999765][T15112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.019432][T15112] RSP: 002b:00007f7a97ac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  557.027906][T15112] RAX: ffffffffffffffda RBX: 00007f7a96e15fa0 RCX: 00007f7a96b9bf79
[  557.035924][T15112] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012
[  557.043936][T15112] RBP: 00007f7a97ac4090 R08: 0000000000000000 R09: 0000000000000000
[  557.051945][T15112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  557.059952][T15112] R13: 00007f7a96e16038 R14: 00007f7a96e15fa0 R15: 00007fff803ad548
[  557.067984][T15112]  </TASK>
[  557.331195][T15118] syzkaller0: entered promiscuous mode
[  557.336889][T15118] syzkaller0: entered allmulticast mode
[  557.413236][    C1] 
[  557.413245][    C1] ================================
[  557.413251][    C1] WARNING: inconsistent lock state
[  557.413268][    C1] syzkaller #0 Not tainted
[  557.413277][    C1] --------------------------------
[  557.413282][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  557.413289][    C1] syz.1.2673/15118 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  557.413309][    C1] ffff88807c94d0f8 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300
[  557.413366][    C1] {INITIAL USE} state was registered at:
[  557.413372][    C1]   lock_acquire+0x19e/0x420
[  557.413391][    C1]   _raw_spin_lock+0x2e/0x40
[  557.413408][    C1]   htab_lock_bucket+0x17d/0x300
[  557.413425][    C1]   htab_map_delete_elem+0x1a4/0x650
[  557.413440][    C1]   bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  557.413456][    C1]   bpf_overflow_handler+0x1fc/0x510
[  557.413479][    C1]   __perf_event_overflow+0x447/0x630
[  557.413497][    C1]   perf_swevent_event+0x542/0x630
[  557.413515][    C1]   perf_bp_event+0x2a7/0x380
[  557.413532][    C1]   hw_breakpoint_exceptions_notify+0x23e/0x670
[  557.413550][    C1]   notifier_call_chain+0x197/0x380
[  557.413570][    C1]   atomic_notifier_call_chain+0xda/0x180
[  557.413589][    C1]   notify_die+0x145/0x1a0
[  557.413608][    C1]   notify_debug+0x2e/0x50
[  557.413621][    C1]   noist_exc_debug+0x77/0x120
[  557.413645][    C1]   asm_exc_debug+0x33/0x40
[  557.413661][    C1] irq event stamp: 9056
[  557.413667][    C1] hardirqs last  enabled at (9055): [<ffffffff8a842b25>] exc_debug+0xf5/0x140
[  557.413697][    C1] hardirqs last disabled at (9056): [<ffffffff8a842aa3>] exc_debug+0x73/0x140
[  557.413725][    C1] softirqs last  enabled at (8486): [<ffffffff81964f56>] bpf_prog_load+0x1266/0x1670
[  557.413749][    C1] softirqs last disabled at (8484): [<ffffffff819458fd>] bpf_ksym_add+0x2d/0x340
[  557.413773][    C1] 
[  557.413773][    C1] other info that might help us debug this:
[  557.413777][    C1]  Possible unsafe locking scenario:
[  557.413777][    C1] 
[  557.413780][    C1]        CPU0
[  557.413782][    C1]        ----
[  557.413785][    C1]   lock(&htab->lockdep_key);
[  557.413795][    C1]   <Interrupt>
[  557.413797][    C1]     lock(&htab->lockdep_key);
[  557.413807][    C1] 
[  557.413807][    C1]  *** DEADLOCK ***
[  557.413807][    C1] 
[  557.413810][    C1] no locks held by syz.1.2673/15118.
[  557.413818][    C1] 
[  557.413818][    C1] stack backtrace:
[  557.413823][    C1] CPU: 1 PID: 15118 Comm: syz.1.2673 Not tainted syzkaller #0
[  557.413840][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  557.413850][    C1] Call Trace:
[  557.413857][    C1]  <#DB>
[  557.413863][    C1]  dump_stack_lvl+0x18c/0x250
[  557.413891][    C1]  ? show_regs_print_info+0x20/0x20
[  557.413919][    C1]  ? print_usage_bug+0x475/0x690
[  557.413940][    C1]  ? verify_lock_unused+0x18/0x140
[  557.413962][    C1]  lock_acquire+0x2c2/0x420
[  557.413998][    C1]  ? look_up_lock_class+0x75/0x140
[  557.414019][    C1]  ? htab_lock_bucket+0x17d/0x300
[  557.414041][    C1]  ? read_lock_is_recursive+0x20/0x20
[  557.414062][    C1]  ? lock_release+0xb5/0x8c0
[  557.414088][    C1]  _raw_spin_lock+0x2e/0x40
[  557.414107][    C1]  ? htab_lock_bucket+0x17d/0x300
[  557.414126][    C1]  htab_lock_bucket+0x17d/0x300
[  557.414148][    C1]  ? htab_lru_map_delete_node+0x760/0x760
[  557.414169][    C1]  ? look_up_lock_class+0x75/0x140
[  557.414188][    C1]  ? verify_lock_unused+0x18/0x140
[  557.414210][    C1]  ? jhash+0x2e8/0x740
[  557.414230][    C1]  htab_map_delete_elem+0x1a4/0x650
[  557.414252][    C1]  ? htab_map_update_elem+0x1040/0x1040
[  557.414271][    C1]  ? perf_callchain+0x220/0x220
[  557.414289][    C1]  bpf_prog_2c29ac5cdc6b1842+0x42/0x46
[  557.414304][    C1]  bpf_overflow_handler+0x1fc/0x510
[  557.414325][    C1]  ? perf_prepare_header+0x1e0/0x1e0
[  557.414341][    C1]  ? bpf_overflow_handler+0xde/0x510
[  557.414369][    C1]  ? tp_perf_event_destroy+0x20/0x20
[  557.414390][    C1]  ? __irq_work_queue_local+0x118/0x3b0
[  557.414408][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  557.414426][    C1]  __perf_event_overflow+0x447/0x630
[  557.414445][    C1]  perf_swevent_event+0x542/0x630
[  557.414464][    C1]  ? perf_tp_event+0x1450/0x1450
[  557.414479][    C1]  ? perf_trace_lock+0xfc/0x3b0
[  557.414505][    C1]  perf_bp_event+0x2a7/0x380
[  557.414524][    C1]  ? perf_event_free_bpf_prog+0x120/0x120
[  557.414539][    C1]  ? rcu_is_watching+0x15/0xb0
[  557.414559][    C1]  ? trace_call_bpf+0xc3/0x6c0
[  557.414593][    C1]  ? lock_acquire+0x2c2/0x420
[  557.414613][    C1]  hw_breakpoint_exceptions_notify+0x23e/0x670
[  557.414634][    C1]  notifier_call_chain+0x197/0x380
[  557.414653][    C1]  ? atomic_notifier_call_chain+0x26/0x180
[  557.414672][    C1]  atomic_notifier_call_chain+0xda/0x180
[  557.414691][    C1]  notify_die+0x145/0x1a0
[  557.414710][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  557.414732][    C1]  ? rcu_is_watching+0x15/0xb0
[  557.414752][    C1]  notify_debug+0x2e/0x50
[  557.414765][    C1]  exc_debug+0xde/0x140
[  557.414787][    C1]  asm_exc_debug+0x1e/0x40
[  557.414801][    C1] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  557.414824][    C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01
[  557.414837][    C1] RSP: 0018:ffffc9000504f838 EFLAGS: 00050206
[  557.414849][    C1] RAX: ffffffff84272301 RBX: 0000000000001000 RCX: 0000000000000f8c
[  557.414859][    C1] RDX: 0000000000000001 RSI: 0000200000000304 RDI: ffff888070d88074
[  557.414870][    C1] RBP: ffffc9000504f998 R08: ffff888070d88fff R09: 1ffff1100e1b11ff
[  557.414881][    C1] R10: dffffc0000000000 R11: ffffed100e1b1200 R12: ffff888070d88000
[  557.414892][    C1] R13: 0000200000000290 R14: ffffc9000504fdb8 R15: 1ffff92000a09fb7
[  557.414906][    C1]  ? _copy_from_iter+0x151/0x12e0
[  557.414931][    C1]  </#DB>
[  557.414935][    C1]  <TASK>
[  557.414939][    C1]  _copy_from_iter+0x24e/0x12e0
[  557.414959][    C1]  ? __might_fault+0xaa/0x120
[  557.414974][    C1]  ? _copy_from_iter+0x24e/0x12e0
[  557.415005][    C1]  ? __virt_addr_valid+0x18c/0x540
[  557.415023][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  557.415038][    C1]  ? copyout_mc+0x70/0x70
[  557.415058][    C1]  ? copyout_mc+0x70/0x70
[  557.415075][    C1]  ? __virt_addr_valid+0x18c/0x540
[  557.415094][    C1]  ? page_copy_sane+0x16a/0x270
[  557.415114][    C1]  copy_page_from_iter+0x7b/0x100
[  557.415135][    C1]  skb_copy_datagram_from_iter+0x2e4/0x6e0
[  557.415159][    C1]  tun_get_user+0x15db/0x3ca0
[  557.415178][    C1]  ? aa_file_perm+0x11b/0xee0
[  557.415198][    C1]  ? rcu_read_unlock+0xa0/0xa0
[  557.415218][    C1]  ? tun_get+0x1c/0x2e0
[  557.415232][    C1]  ? __lock_acquire+0x7d40/0x7d40
[  557.415249][    C1]  ? tun_get+0x1c/0x2e0
[  557.415266][    C1]  tun_chr_write_iter+0x119/0x200
[  557.415282][    C1]  vfs_write+0x46c/0x990
[  557.415302][    C1]  ? file_end_write+0x250/0x250
[  557.415322][    C1]  ? __fget_files+0x43d/0x4b0
[  557.415344][    C1]  ? __fdget_pos+0x1d8/0x330
[  557.415366][    C1]  ? ksys_write+0x75/0x260
[  557.415384][    C1]  ksys_write+0x150/0x260
[  557.415403][    C1]  ? __ia32_sys_read+0x90/0x90
[  557.415422][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  557.415441][    C1]  do_syscall_64+0x55/0xa0
[  557.415459][    C1]  ? clear_bhb_loop+0x40/0x90
[  557.415473][    C1]  ? clear_bhb_loop+0x40/0x90
[  557.415488][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  557.415502][    C1] RIP: 0033:0x7f7a96b9bf79
[  557.415512][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  557.415523][    C1] RSP: 002b:00007f7a97ac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  557.415536][    C1] RAX: ffffffffffffffda RBX: 00007f7a96e15fa0 RCX: 00007f7a96b9bf79
[  557.415546][    C1] RDX: 000000000000ffdd RSI: 0000200000000280 RDI: 0000000000000007
[  557.415555][    C1] RBP: 00007f7a96c327e0 R08: 0000000000000000 R09: 0000000000000000
[  557.415563][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  557.415570][    C1] R13: 00007f7a96e16038 R14: 00007f7a96e15fa0 R15: 00007fff803ad548
[  557.415586][    C1]  </TASK>
[  558.375372][T15123] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2674'.
[  558.385146][T15123] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2674'.
[  558.404414][T15123] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2674'.
[  563.198562][ T1281] ieee802154 phy0 wpan0: encryption failed: -22
[  563.204900][ T1281] ieee802154 phy1 wpan1: encryption failed: -22