last executing test programs:

5.137034701s ago: executing program 0 (id=3391):
socket$kcm(0xa, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x5, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48084) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) (async)
recvmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020)
recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0xac5d, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x9, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @mcast1}, 0x80, 0x0}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) (async)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.98864484s ago: executing program 1 (id=3393):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(r1)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x6, 0x95, &(0x7f0000000000)=""/149}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x88)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)

4.755891083s ago: executing program 0 (id=3394):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x10000000}, 0x94)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x98, &(0x7f0000000340)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000400)}}, 0x10)
r5 = socket$kcm(0x2, 0x1000000000000005, 0x0)
bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000004080)=@base={0x8, 0x4, 0x4, 0xbf26, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000}, 0x50)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x55, 0x7a, &(0x7f00000006c0)="9b42a9f8bb881b48858e894b0b97104c6afa246f897578db857bd6642d4b6bfc67bcecf8ae86a41f0891ec4d2ad984c8a0a907219585a84cb78178c43a3bff83cad28a332b56afa0c6a2cc1c7f753bb3c546bd9380", &(0x7f0000000800)=""/122, 0x0, 0x0, 0x5a, 0xf1, &(0x7f0000000880)="2dc4cd9a3739c345537f78658e21498f5c7867a8988af7f5b7c64b655389c4d6810f3bfb30655a39648c15ce4d09710ae73dd51ee89607dbe0dfc5084dbf22d556bb87ddf9a4d5c76ca1b20868be29195983dc4f7a00c2034dc2", &(0x7f0000000900)="89d703d0fd50ac8bda8020175ba336d37ae88620d7075aa24b27aefbcd0f3c930f76d1cb7eb8f3f5ebef52fe8d1ed1aae0f6a88d728e0775699e81d6ebe88eec3e3ff1904ea48c72d0782ccd475cb8ff68f80a731aabeb1760c7640db08c05c23be96717542dacd8e4da7f507b119e33e62b7b9551731867df29abf0185d31c0ce9bf0000e0fa160e112c6bcefd108a77cce98e8676202aa888f9de4b9595f9946c9760e0b127ddccc804e9b4b1e1f38846b1733c33e4d271ac6872e5775a6403dc0b1aaa3cd6b7ba0e7ec50b3b5e531f39114b3ee46d955f8e34e30c070bb607caa279673af23535c9a20ed374209f6ac", 0x1, 0x0, 0x7}, 0x50)
close(r6)
r7 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r7, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x1, 0x7, &(0x7f0000000180), 0x43)
ioctl$SIOCSIFHWADDR(r6, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0xf, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f00000001c0)='syzkaller\x00', 0x3c, 0x29, &(0x7f0000000240)=""/41, 0x40f00, 0xc, '\x00', r4, 0x0, r6, 0x8, &(0x7f0000000580)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x0, 0x5, 0xe, 0x80000001}, 0x10, 0x1027c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))

4.364028186s ago: executing program 1 (id=3397):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(0x0, r1, 0x5, r0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map, 0xc, 0x0, 0x2, &(0x7f0000001340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001380)=[0x0, 0x0], &(0x7f00000013c0), 0x0, <r2=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r0, 0xffffffffffffffff, 0x1, 0x14, 0x0, @void, @value, @void, @void, r2}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x3, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x20, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)

4.363612926s ago: executing program 2 (id=3398):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) (fail_nth: 1)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(0x0, r1, 0x5, r0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map, 0xc, 0x0, 0x2, &(0x7f0000001340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001380)=[0x0, 0x0], &(0x7f00000013c0), 0x0, <r2=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r0, 0xffffffffffffffff, 0x1, 0x14, 0x0, @void, @value, @void, @void, r2}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x3, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x20, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)

3.790972919s ago: executing program 3 (id=3400):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)

3.675754416s ago: executing program 1 (id=3401):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$kcm(0x10, 0x3, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x6402, 0x0, 0xfffffffc, 0x0, 0x0, 0xd17a, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x6402, 0x0, 0xfffffffc, 0x0, 0x0, 0xd17a, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xeffffffc, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvmsg(0xffffffffffffffff, 0x0, 0x41) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x41)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x95fa, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x0, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xd) (async)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x6, 0xf3, 0x6, 0x0, 0x95fa, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x0, 0xc8, 0x94a, 0x7, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xd)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300000023000000000000000000000000ac"], 0xfdef)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

3.619769039s ago: executing program 2 (id=3402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
close(r1)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x5c}, 0x0, 0x0, 0x4, 0x9, 0x3, 0x9, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r7 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r6}, 0x8)
close(r7)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r6}, 0x10)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x1d, 0x0, 0x2}, {0x2}, {}, {0x6}]})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000140)="2669ad47e89d7b5efc2d551eac8acec6989b02680a515777b6b96907ce354bae0493e3d4682bee99beb5a81e29a0125fe858a64ec64f3c98bee55fa11c7411c98f8b21036d", &(0x7f00000003c0)=""/199}, 0x20)

3.618335579s ago: executing program 0 (id=3413):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(0x0, r1, 0x5, r0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map, 0xc, 0x0, 0x2, &(0x7f0000001340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001380)=[0x0, 0x0], &(0x7f00000013c0), 0x0, <r2=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r0, 0xffffffffffffffff, 0x1, 0x14, 0x0, @void, @value, @void, @void, r2}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x3, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x20, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)

3.449276609s ago: executing program 3 (id=3403):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(0x0, r1, 0x5, r0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map, 0xc, 0x0, 0x2, &(0x7f0000001340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001380)=[0x0, 0x0], &(0x7f00000013c0), 0x0, <r2=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r0, 0xffffffffffffffff, 0x1, 0x14, 0x0, @void, @value, @void, @void, r2}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x3)
r6 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10006}]}, 0x90)
r7 = socket$kcm(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000001c0)={r6})
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3d}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x3, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x20, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)

3.419996251s ago: executing program 4 (id=3404):
r0 = socket$kcm(0x2c, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0x3d95, 0xffffffffffffffff}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x4000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="f303664b250581f96fa5fdc0d9c98112e1da", 0x12}, {&(0x7f00000005c0)="a4eafcb1702e3d3b3336da0ca16f41bcdc6aef175427d9ddb7e8bb987ec17682ce11da33b27a7b4d31b601a4a8480e169d1d608ac03ee22e20c2fc0f99e07d03d88234f95bfc23f7076f3c94c177c549370b18533406e536d197965404dbac62353dae6a86c23cad5f428baedb596d893136e58c3b21addf461b9c7aa958591cf60bd79caeddedb1636b7df05d5b34ef3ab873ed7004f4a132a129ba7c3316201c27eb6e1aa9d30ebd0eb1c8a1e45d1b065cf584dbbc18138cb8b1f632065e6f590ef744a05462113986c3224f591136aa994496a2cd6bdb237aa3209e905da67fc07f4f7d30ec652e38", 0xea}, {&(0x7f00000002c0)="a97206f5b61d66c8fdae3fcb1cb870e28a0ced629c0c08f0594cfe3ebc7308cfb1e6ef807c2671a3a903056d310b25636d9372d605ae8fd1629f187e78a8812a73bf9054273b74d289aea84aaf1581199c646dee63dbb947cdfde6b9e6e5d823294d25101db283d32465bd1f9c3a0ff3e780d6c755f4b69ae1e90d7e38c543119a8d3bd40ec2fb4b3c14ec6d28d850a8242279155276c92f35895b67286fd9", 0x9f}, {&(0x7f00000000c0)="ec57540da3378eab7f52f3ea62e69ed302bb68cb48611aab726d210c7436311c8db338138c725e25359fd41014b5ef523142d48638c8968693dbad36ab873c805446f69e08c061adfdadddf14b292114d0cbce0c2204cfd4", 0x58}, {&(0x7f00000003c0)="4111902a1cdf92534940ca5fe762582bd4091136", 0x14}], 0x5}, 0x4000000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

3.145702497s ago: executing program 2 (id=3405):
socketpair(0x2c, 0xa, 0xe247, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$kcm(r0, &(0x7f00000026c0)={&(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x800}, 0x80, &(0x7f0000001240)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="378bfeb201dae078dc7a82b7d7012a22e7d102601e9bcb7c0a7fabf81d3b3f4540446e1a2b324fcd8961272ae6072d0cf493bbf7fc5ce55eea", 0x39}, {&(0x7f0000001100)="0d5a297b7d4fcd33751b2ef533e4", 0xe}, {&(0x7f0000001140)="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", 0xfe}], 0x4, &(0x7f0000001280)=[{0x80, 0x10f, 0x7, "4f09320b783872258ba479cf26e3bc9f46964118f0042984db2c87e936a829924ed65b0440463e2edba84700e20873032469478479703c50c352eaaee8c206a74bbf201a1a0bf787f4995719ad0edc00e02a5f02ba18e7c413456020053823edf15114d7668455cf47d60097e275a37e"}, {0xf8, 0x10f, 0x3, "aafef0609b4a6ab54567b83bdd2aa33c239404e502e7e547941861857402f9c118ccf396be4893da08879b6963fce930591ebf763a061750fd0dfa1b10b393cb7351ddfc404735f683d5fd44b384977d5945082ca14069a8f884a08adfd122aa81098dea7d1c76df4e07cded4b33f07e502f282d0a74af4238edb9cd5d5a05da6f3b658cc00ee32c1fb52312bafea1ec70fd9daf320fead1c0090ca35b5af68e04986bf25fc71ff18f5f542f4969c84946b31b8676b3f47601410c6e5332c197a0445cc8665e3f0b7755dfa3ecb9a0918560c916b7398cda521e1ca40cab2bb0fd3c90475be3"}, {0x1010, 0xd02aa23bc5aaee03, 0x100b6a48, "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"}, {0xe0, 0x118, 0xe, "1c67a23dc2cf83d884b439abeda9691c752113bd8b7d305db7391bae0c011da44764ad3d84c5fcad235e6323c26b161334313d636c3c1af8b3ca1c815370eedda57256dd2a432193079248245a79b38a1cfdff665dec8d7492a300e0e6a6080ab7fe37965e18c58a8f9ea870f97b14bf9269bd3cbe77015d585f313b601ce58360c31d7e1fb144bdf9f1dda97887eb61f8748819b6be57c8ec99e5a291fa500cc314df19cc600d32bac80a2bc2750ef71e15289bc2995f473d2e8e78b1f5d83f5dd8a809798ed2423e7b563a"}, {0x70, 0x10b, 0x3, "e368106db1c1d0a12cfa161c45f35f93adb2b570f8f9bf48752851ea9c3a2b712d9acd2d3cc376eb7686277e5a0428f10a716d45128aac0a1c651d2d88aeb987c6ac105ce49d20dba576d8c4721b5f1b2bbcefa56aa12581fef8e1654ffb"}, {0xc8, 0x102, 0x3, "a28a0edca90ae3e7b20d00a0854511b1ccedf569dde99323115e7f5cc73b31e7039f57b0b5411fa0540bb9e79fe5a883680a8cc9c65e1ec8c1e68a340669be68440d1e1eff8f5349d7d08fbaee4d19fff92240368e2d02c5d2584c83dd2f1f6511ad1e9960e1a5b470118a34051b75333aaaef9dfa9357781d0e9ee327b4a3b07d57ed80638e890ccc311c73a146821fff5fa544a0dae35725c6f9000eeef30ff91da29b213f8a5bb3436a72c5b16e29f51c39e220bb92a4"}, {0x70, 0x102, 0x40, "1a31b407a02977824201715e46f408074bd24d0856fe3444bd466569350cf3975d5fb2f6eb01bcc6ce3bccd7c0323b7580078b8e121ed6d4c725f7cce973303afffb20fe12909a4534d0228f0dbe150a115bc36665aeb7d8c6516179540a"}], 0x1410}, 0x400c054)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002880)=@bpf_ext={0x1c, 0x8, &(0x7f0000002700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x79}, @generic={0x58, 0x4, 0xd, 0x27f7, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb76e, 0x0, 0x0, 0x0, 0xe}, @ldst={0x2, 0x1, 0x3, 0x0, 0x9, 0x10, 0xfffffffffffffff0}]}, &(0x7f0000002740)='GPL\x00', 0x80, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002780)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000027c0)={0x4, 0xd, 0x81, 0x6}, 0x10, 0x1916f, 0xffffffffffffffff, 0x1, &(0x7f0000002800)=[0x1, 0x1], &(0x7f0000002840)=[{0x5, 0x4, 0x2}], 0x10, 0x80000001}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002940)=r2, 0x4)
sendmsg$sock(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000002980)="6d1931c6e7bf56c9d3859ef1402e2415aca8825b29c42b05120bde4d7a133b627cde35db8dd2407ab58423651bdef42b66f9a945bb7dbf784b3f2a6deb4546f48d547a01675050bdbc28c04c4675c8546e379716e5933b7df79acf66814de3ddaac20d83b74f8b1a8bd814f3d50abebacdc280877224a0697db40d848b23a72e80521cb10ad5f815b7ab3442979e9c35cb8ada803805ae2df8ace32c48ca94694e2c289788aefd23114d4bd0476e3c14b28c7cb2dea15ea9ac940f72bde5358f5891c4fcff75760d558010e6638072daca6d341ff5c8d3150cb96f3cfc84b876ae9e953185829e929d9979fe29320c771062ffd8", 0xf4}, {&(0x7f0000002a80)="8d1e", 0x2}], 0x2, &(0x7f0000002b00)=[@mark={{0x14, 0x1, 0x24, 0x80000}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xf8b}}], 0x48}, 0x4000000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002bc0)={<r3=>0xffffffffffffffff})
close(0xffffffffffffffff)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c00), 0x280600, 0x0)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002c80)=@o_path={&(0x7f0000002c40)='./file0\x00', 0x0, 0x10, r1}, 0x18)
ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000002cc0)=r5)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000002d00)=0xffffffffffffffff, 0x4)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000002d40)={r6}, 0x8)
recvmsg(r3, &(0x7f00000030c0)={&(0x7f0000002d80)=@isdn, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e00)=""/12, 0xc}, {&(0x7f0000002e40)=""/32, 0x20}, {&(0x7f0000002e80)=""/225, 0xe1}], 0x3, &(0x7f0000002fc0)=""/253, 0xfd}, 0x43)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000003100)={r1, r7, 0x0, r7}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000003140)={0x0, r5}, 0x8)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003280)={@map=r7, 0x13, 0x1, 0x2, &(0x7f0000003180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000031c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003200)=[0x0], &(0x7f0000003240)=[0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003340)={0x0, r7, 0x0, 0x1, &(0x7f0000003300)='\x00', <r9=>0x0}, 0x30)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000032c0)={@fallback=r5, r2, 0x24, 0x28, r5, @void, @void, @void, @value=r9, r8}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r5)
sendmsg$kcm(r7, &(0x7f0000003b80)={&(0x7f0000003380)=@nfc_llcp={0x27, 0x0, 0x1, 0x3, 0x1, 0x2, "1fd710871227ca3a76c6b6e16ff775ff14bff25c49f0d54de5f698e00e197f7e34c224c513ac7e8e29691a066691b6331b95e47debdb5e6ab0a88f4e69a416", 0x35}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003400)="87aa90edc09b56eb8b8709dc7cc53516f70b99aebd8c5189b0690c42a5ca8fe2d2f18d47c0812d9f290b42af76b8b8c5b09e4aaa20", 0x35}, {&(0x7f0000003440)="2f9c22946dbde60b27d2fc88b6fac54617228b05c7e4f8895f4639c897c591d93db0501ea29d1049c3af6afa2bbfa765ecd57ab45487837802eb675233216889ad45c8c4254f51c3412c116dc3652c47bd6c0ee8afe64e97f9ab6f4545d74205df11c19f9389689d2cff1a43aba060e396d85c4d0e2e25f8c405517df05eb8bac27ab7da61b16b4e3575af2ece0217d082b95c9c049fd7e2c24a2a160255770dbbfbab205fce88a2b453b9b149a0eb61a0569f436f36b279494f8e2ffba135f2a50d82559d448ea05a9f98878dc9", 0xce}, {&(0x7f0000003540)="ed564170445d9c6540cac28ca2e2df7189b0434b9c87081fadebed9beb89197403157ec2dcca9f4b2230786930ea51af07a15f66af2e87d168cff6eec766987089c0017095c104786e65168c85d4427bfb8a998ea9996b8471cefa9047f5c2e0d1292200a143ba0b77069efba3502bf99d2721", 0x73}, {&(0x7f00000035c0)}, {&(0x7f0000003600)="f72f77859e270be409d916210567d99352b3a146804f5e4c259d5f295e315050696b69ebf6fd8d2a9e52f66c0f1b836db42a4c7c5bb0daab9947370c31e72d0ac163827a3383798412e9ef9cb13a1d006c084464afba01d9de70e105005cb5df59512520c7f510da052f40f7540bedb6", 0x70}, {&(0x7f0000003680)="bd8e70c740c5981b5d214a52a073ef26a25db28c9f70a40156fbdacd45cab75e9e50589a3e27cd072626cc93da3fdf827eff2bcf46d7953ae47d96229e2c20afc0b19cc5f3913ee7dce2313001554c0e4eadd62d0e715207f6fe982be8deba6ff6eedaf037834e5c00cb49ae095c26b2e27060c985d7065fc3bf91761d208c87e2d1a62bed13cfed8f8316ac99bec62029", 0x91}], 0x6, &(0x7f00000037c0)=[{0x30, 0x114, 0x8, "18aa2a54cdc32e787797fc2d2d3ad61c08ad678c9772ea51ed81"}, {0xd8, 0x10f, 0x6, "33aede4840f007b5d3caee67e0e9f4e24785555fedceba8433d3955cf584eb03e0c941483739415ff2662f6e306e71ac6c260fc28e562f9cfa0825259f296826a706d17999b8a895800a07fa680ef2a02548248ed3c64055e54fa41d634edf5c1f2c4479d1556ca4314f7d7498b9756ed311f7da2b6cde09e816bdf14235f98cba277a673763c28632eadb5076c09b2152f26536017499552b80bf3150ed444052e3af630f9696975938c46f6c83b66a61c74778f492b99c308a79cbe8c894c2e1e979c823"}, {0x58, 0x10a, 0xff, "a9406bd6abb72fce38dc1228f60a7bf281d89ab34d085e6580489409df11c2c556842fe90c5801a69b9feda88d82a90792fd83df961bc3372f4685a94827bda605d80049e1"}, {0x30, 0x102, 0x4, "dbe5ad767fbc3694d8a4cbc5d47b22120fc4d31a5e583ea83986b9e31076eec1"}, {0xa0, 0x10b, 0xff, "8e8b1f66b3d1a5247005c8c418eebf3246e56aa27bd0e26bc5e0f82783f01107a0de8163d5a33e2d696e06a7c132bb85b9fd683070adf067bc316d3abfc7700e1662fdee9c942ca9a72eb8cd74e8a749e1334f0be992b8fd515e96e4a8ccf3ae57f24bf6cdf2545465659271659e027bce0ad30e059fee147f1bb8862f0aca594d67c7bf9128c00f0307217ded7d6b82"}, {0xc8, 0x119, 0x7, "8de95fcf8d282176a4e0a800f22aa2a94ba18a4d5f0204ffceebb3fcdad28ce9d7a2afaff7c59f8bfee2738d6a03e3a255ac3a554fd30c8c19cde99318a7edd9654b6d5a0997ac8cc6b45717314a5056504e0d76bee36fffcff0d63d3d4ab25b866be210a2c29078038633f40a392e7a6b72d8786473c28a505315911ae61577bb9b8f06559f1b3bc7b228d030d03a80652cfb184d068c8ce1622c17ec7566aacdf90ef1a0ecf42aa9d557806f7ebdebce68"}, {0xb8, 0x0, 0x7, "f56d0ec56250c338d87be21058d3d474540d208bc492b47b334dea57fc364f6b23116b25a9d109c4c0e2139b354479a720fc7a1a815d25a09cedfb0c8f47f382e70b90f773c58e5467c9cde143559d7c9f266f3cf4ec08b9691e00de1665b7f7c4586401c13841a4d94ebdcc85ba6930b3fb74cf654586082c297adf8e344de0cced558da7c96e34eb9d5f0b4b1d875f762affee52a50833834a6c328db708b93530b2e5"}], 0x3b0}, 0x4048840)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003e80)={r5, 0xe0, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000003bc0)=[0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000003c00)=[0x0, 0x0, 0x0], &(0x7f0000003c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x36, &(0x7f0000003c80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003cc0), &(0x7f0000003d00), 0x8, 0xc2, 0x8, 0x8, &(0x7f0000003d40)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003ec0)={0x1b, 0x0, 0x0, 0xd51, 0x0, 0xffffffffffffffff, 0xa6, '\x00', r10, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50)
ioctl$TUNSETVNETBE(r4, 0x400454de, &(0x7f0000003f40))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004180)={r5, 0x0, 0x37, 0x56, &(0x7f0000003f80)="262c92023c0f12af159261860f5824c19b8ad0b1865dcc58d1625c84e918acc96653a9a643dcca8bd758c96ed0a20ff3ea1eccb612f682", &(0x7f0000003fc0)=""/86, 0x100, 0x0, 0x47, 0x8a, &(0x7f0000004040)="5cb1571f1a8675ca4998b1a952a1e08e670311728da83297b0b9285a548fe3fa3f032e5810c6926d7591212cf9112fad0cdbfe489dd64ef5959883345b8c25f778f8f1f30a9ad6", &(0x7f00000040c0)="71947f3d2d94a6d7eff73f46e90ab2bac9209706dcbf23b48faa4d21519f752f6449e4a6541036182289652965691fa998de5c0ba1e5243418273706ebaafbce9080a7f587c6a4e37c36c965bc759e207607b367d1eab44fb94be21717e1c63cfbd7a57f61aa87bd97685cf64373cc69c38f20221a57dac8551c3492f8312afe25d91788ea646a7d1f1f", 0x1, 0x0, 0x1}, 0x50)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f0000004200)=""/87)
ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0)
ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000004280)={'syz_tun\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x2400, 0x6000000000000)
r11 = syz_clone(0x0, &(0x7f0000004340)="08fc959dd09c0f5c1601b344276de00805857e0ed49dc23d79373dc1b9d87f6b757ce0317586d4db9dfbb67c432a7419d695fe2c6fe49fc349257afc1d312b386d0f52edfa5a08814dd8f77230a901a19a4ef3616778930b23b576d7a3367303384537992c0942aa0838f4afd1a39859c3f5c07e2090c2d6", 0x78, &(0x7f00000043c0), &(0x7f0000004400), &(0x7f0000004440)="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")
perf_event_open(&(0x7f00000042c0)={0x1, 0x80, 0xc, 0x3, 0x6, 0x8, 0x0, 0x5, 0x200, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x0, 0x100}, 0x2002, 0x54d, 0x1ff, 0x8, 0x80000000, 0x1, 0x9, 0x0, 0x8001, 0x0, 0xff}, r11, 0xd, r7, 0xa)

2.988671346s ago: executing program 4 (id=3406):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
mkdir(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r7, &(0x7f00000005c0)=r2, 0x12)
r8 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) (async, rerun: 32)
openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x6, [{0x4, 0x5, 0x6}, {0xa, 0x8, 0xe}]}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @fwd={0xe}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x2e, 0x0]}}, &(0x7f0000000700)=""/195, 0x70, 0xc3, 0x0, 0x3ff, 0x10000, @value=r8}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit, @exit]}, &(0x7f0000000100)='GPL\x00', 0xc, 0xc6, &(0x7f0000000600)=""/198, 0x41000, 0x8, '\x00', 0x0, @fallback=0x30, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x9, &(0x7f0000000380)=[r8, r8], &(0x7f0000000500)=[{0x3, 0x4, 0x1, 0xc}, {0x1, 0x2, 0xa}, {0x3, 0x4, 0x1, 0x4}, {0x3, 0x4, 0x1}, {0x1, 0x2, 0xf}, {0x0, 0x2, 0x7, 0xa}, {0x0, 0x1, 0xc, 0x4}, {0x5, 0x1, 0x3, 0x3}, {0x5, 0x5, 0xf, 0x6}], 0x10, 0x6}, 0x94)

2.757516819s ago: executing program 0 (id=3407):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x50)
socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$cgroup_subtree(r1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000004000000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xb, 0x0, &(0x7f0000000140)="63eced8e46dc3f2ddf33c9", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28)
sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="296c6c6bb0ba2d10a53be11a67e2c1912e5302873f4d9bf31e34d53f9c0558591d796663d90413533f9fe4816b962d6c32338bb5ba12daf16f43", 0x3a}], 0x2, &(0x7f0000000240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffb3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x4008004)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000100)=0x8, 0x12)
ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2000)

2.691790084s ago: executing program 2 (id=3408):
socket$kcm(0x10, 0x7, 0x10) (async, rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001004000000002e"], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0200007c0000000000000000000000000000000000000000000000000010ab1b3e57900f9a15a17990d0b442ae8808580c0a2c57140b43202a22f5f53aae39a9dffdade9bed601a21bc7fdc14f510767863a4c92646f78e8d0f56458b4081692965e2c25e4cafa77e10cb6e4fff170a41f9f620303eafdfb1fc2a47b4cdfd595774178aa588535b521e13ff562d74b0010dc68c896042fa7ad00ad5774983ff5eb83e9b25fad985476a1432279ab090451846cf440929a8177f32a912485fb5e3c8541441c9200ab0dd516cbf0"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11}, 0x94) (async)
socket$kcm(0x10, 0x400000002, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32)
socket$kcm(0x2, 0x2, 0x0) (rerun: 32)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='1-N'], 0x31)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x9, 0x3e19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x1, r1, 0x3) (async)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) (async)
r4 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x60)
sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006007c06e8fe55a10a0015400100142603600e120800060000000201a80016000900014003e01100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r5 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02008125d7e1"})
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x65bf, 0x40, 0x0, 0x1, 0xcb00, '\x00', 0x0, 0xffffffffffffffff, 0x40000, 0x4}, 0x50)

2.552240741s ago: executing program 4 (id=3410):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.464975746s ago: executing program 3 (id=3411):
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000080), 0x619, r0}, 0x38)

2.40377199s ago: executing program 1 (id=3412):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x336}, 0x50) (async, rerun: 32)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) (rerun: 32)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="200000001e006bcd9e3fe3dc6e08000007000000190000007ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
r3 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0x0, 0x3}, 0xbf, 0x0, 0x0, &(0x7f0000000500)=[{0x10, 0x29, 0xb}], 0x10}, 0x0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x4, 0x9, 0xfb, 0x83, 0x0, 0x1, 0x90024, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x9, 0x8}, 0x12a2, 0x4, 0x1, 0x5, 0x9, 0x9cb7, 0x9, 0x0, 0x3, 0x0, 0xfff}, 0x0, 0x10, 0xffffffffffffffff, 0x1) (async)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$kcm(0x2, 0x2, 0x73)
sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x90) (async)
recvmsg(r5, &(0x7f00000006c0)={&(0x7f00000001c0)=@ax25={{}, [@remote, @bcast, @rose, @rose, @null, @netrom, @rose, @null]}, 0x80, 0x0}, 0x2000)
close(r4) (async)
socket$kcm(0x10, 0x400000002, 0x0)

2.40342641s ago: executing program 2 (id=3414):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) (fail_nth: 2)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(0x0, r1, 0x5, r0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map, 0xc, 0x0, 0x2, &(0x7f0000001340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001380)=[0x0, 0x0], &(0x7f00000013c0), 0x0, <r2=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r0, 0xffffffffffffffff, 0x1, 0x14, 0x0, @void, @value, @void, @void, r2}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r3, 0x3, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x20, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)

2.255417809s ago: executing program 4 (id=3415):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)

2.165808324s ago: executing program 1 (id=3416):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xf0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8001}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1e, 0xc, 0xe, 0x10000, 0x40000, r3, 0x0, '\x00', r2, r0, 0x1, 0x2, 0x5}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r4, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x25, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2757, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x59, &(0x7f00000000c0)=""/89, 0x41100, 0x69, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x2, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000200)=[r4], &(0x7f0000000280)=[{0x4, 0x1, 0x4, 0x5}, {0x2, 0x2, 0xd, 0x7}], 0x10, 0x3}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a4000140", 0x38}], 0x1, 0x0, 0x0, 0x6000}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)

1.901450289s ago: executing program 0 (id=3417):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x80, 0x0, 0x8, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}})
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
r6 = socket$kcm(0x1e, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000140), 0x4d)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r7=>0x0, <r8=>0x0})
close(r7)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000f800000070e6772aabad3e83977b4043d3a2dea0880e402c2e3b5af47e9e0d6080d0d18de0f2294f4f3615ba02a288db45aa5136661a88984632be65771b5494d582cb6a5a0c9d1e030221dbe5f3755dcc39c21265cf8972f6161e823fabc546d2f7401160b31d05de6cc3e516ed1bdb45bd0b"], 0x48)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
close(0x3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
gettid()
socketpair(0x2a, 0xa, 0x3, &(0x7f00000002c0))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
syz_clone(0x2a020600, &(0x7f0000000300)="4e159d92ce4e466744ae3704fbcbecdf6d177309d6887a9d4f6083f01ff4b38bc7e0302ffc3a39d616b8f204f4e6067102b40bf64b442dedd91fed311fefd48b50ae9b46d11c86ae78e3f153dacb1199b2571171df", 0x55, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000004c0)="df2239a5abfe7f736463aa3ae5541525d85b9df771aae02a28043c0e57aead8f2a4b3a139507dd43ac6862d4dca5877e23f4111791863277a703b41bea7d69d3a8a7ca074f8c3f27cffde6d291cb265ddfc009e96d29")
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f0000000080))

1.901163589s ago: executing program 3 (id=3418):
r0 = socket$kcm(0x2c, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0x3d95, 0xffffffffffffffff}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x4000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1e, 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x28209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x7, 0x0, 0x200, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffb, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="f303664b250581f96fa5fdc0d9c98112e1da", 0x12}, {&(0x7f00000005c0)="a4eafcb1702e3d3b3336da0ca16f41bcdc6aef175427d9ddb7e8bb987ec17682ce11da33b27a7b4d31b601a4a8480e169d1d608ac03ee22e20c2fc0f99e07d03d88234f95bfc23f7076f3c94c177c549370b18533406e536d197965404dbac62353dae6a86c23cad5f428baedb596d893136e58c3b21addf461b9c7aa958591cf60bd79caeddedb1636b7df05d5b34ef3ab873ed7004f4a132a129ba7c3316201c27eb6e1aa9d30ebd0eb1c8a1e45d1b065cf584dbbc18138cb8b1f632065e6f590ef744a05462113986c3224f591136aa994496a2cd6bdb237aa3209e905da67fc07f4f7d30ec652e38", 0xea}, {&(0x7f00000002c0)="a97206f5b61d66c8fdae3fcb1cb870e28a0ced629c0c08f0594cfe3ebc7308cfb1e6ef807c2671a3a903056d310b25636d9372d605ae8fd1629f187e78a8812a73bf9054273b74d289aea84aaf1581199c646dee63dbb947cdfde6b9e6e5d823294d25101db283d32465bd1f9c3a0ff3e780d6c755f4b69ae1e90d7e38c543119a8d3bd40ec2fb4b3c14ec6d28d850a8242279155276c92f35895b67286fd9", 0x9f}, {&(0x7f00000000c0)="ec57540da3378eab7f52f3ea62e69ed302bb68cb48611aab726d210c7436311c8db338138c725e25359fd41014b5ef523142d48638c8968693dbad36ab873c805446f69e08c061adfdadddf14b292114d0cbce0c2204cfd4", 0x58}, {&(0x7f00000003c0)="4111902a1cdf92534940ca5fe762582bd4091136", 0x14}], 0x5}, 0x4000000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

1.900660059s ago: executing program 4 (id=3419):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@fwd={0x9}, @fwd={0x9}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x4}, @volatile={0x1, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x61]}}, &(0x7f00000000c0)=""/218, 0x4b, 0xda, 0x0, 0x3}, 0x28)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r0, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000030c0)={&(0x7f0000002f40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@fwd={0x4}, @ptr={0x3, 0x0, 0x0, 0x2, 0x5}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x15}]}, {0x0, [0x30]}}, &(0x7f0000002fc0)=""/214, 0x43, 0xd6, 0x0, 0x8}, 0x28)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002800)={0x1b, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x3, 0x1}, 0x50)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002d00)={r0, 0x20, &(0x7f0000002cc0)={&(0x7f0000002b00)=""/139, 0x8b, <r6=>0x0, &(0x7f0000002bc0)=""/194, 0xc2}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002dc0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000002d40), &(0x7f0000002d80)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x6, 0x1c, &(0x7f0000002880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa000000, 0x0, 0x0, 0x0, 0x6114}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x7, 0x8, 0xe, 0x12dc, 0x91c}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x100}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002980)='GPL\x00', 0x2, 0x5a, &(0x7f0000002a00)=""/90, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, r0, 0x8, &(0x7f0000002a80)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002ac0)={0x0, 0x8, 0x7, 0x2}, 0x10, r6, r1, 0x1, &(0x7f0000002e00)=[r7], &(0x7f0000002e40)=[{0x2, 0x4, 0x1}], 0x10, 0x6}, 0x94)
r8 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="150a000000000000791048000000000061041c000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25}, 0x6c)
write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.sectors\x00', 0x0, 0x0)
r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={r1, 0xe0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000001480)=[0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0], 0x0, 0x77, &(0x7f0000001500)=[{}, {}], 0x10, 0x10, &(0x7f0000001540), &(0x7f0000001580), 0x8, 0x84, 0x8, 0x8, &(0x7f00000015c0)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002680)={r1, 0xe0, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f00000023c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002440)=[0x0], <r12=>0x0, 0xed, &(0x7f0000002480)=[{}, {}], 0x10, 0x10, &(0x7f00000024c0), &(0x7f0000002500), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000002540)}}, 0x10)
r13 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r13, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r13, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
close(r15)
recvmsg$unix(r14, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r16=>0xffffffffffffffff]}}], 0x18}, 0x101c0)
write$cgroup_subtree(r16, &(0x7f0000000500)=ANY=[@ANYRES8=r15, @ANYBLOB="3ee90135e48e0967304a9906f6eca07d0aea5a1ff8b4565a9bd71382b9ac21bc38ffad26cff2a6b18a513450"], 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r17=>0xffffffffffffffff})
r18 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r18}, &(0x7f0000000040), &(0x7f0000000940)=r17}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r18, &(0x7f00000000c0), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x10, 0x23, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, @jmp={0x5, 0x0, 0x2, 0x3, 0x0, 0xffffffffffffffb1, 0x4}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x3308f762}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000400)='GPL\x00', 0x80000000, 0x1000, &(0x7f0000000440)=""/4096, 0x41000, 0x8, '\x00', r11, @fallback=0x11, r0, 0x8, &(0x7f0000001740)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0x9, 0x2}, 0x10, r12, r1, 0x2, &(0x7f00000026c0)=[r16, r18], &(0x7f0000002700)=[{0x4, 0x4, 0x2, 0x4}, {0x1, 0x3, 0x10, 0x5}], 0x10, 0x4}, 0x94)

1.777497556s ago: executing program 2 (id=3420):
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x9c082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x810, 0x2c6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffffe}, 0x100, 0x0, 0xc2ba, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000100)) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000340)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x42, &(0x7f00000006c0)="0001000000002305", &(0x7f0000000700)=""/8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9b", 0x0, 0x0, 0x0}, 0x38) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc)
r5 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) (async)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000200), 0x0}, 0x20) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.762854907s ago: executing program 1 (id=3421):
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000038c0)=""/4047, 0xfcf}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000000500)=""/178, 0xb2}], 0x3}, 0x0)

1.447210855s ago: executing program 3 (id=3422):
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0xb701, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x3) (async)
r1 = socket$kcm(0xa, 0x5, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x75, 0x2a, &(0x7f00000004c0)="b264d2a0ca5ed91ae2cc6b8f4d1a47b81597a139a54a0cc51dbd8117b4045a74b7671b7b0e8fd970b487133ac943b313384745398d2db32571423822a388838d9567a334c5fb363da72c3d44902af29220edaadc1fdb277b526a55ddc26fac4238cab2b3b5879cecb2d0d8f5bbe8e4b7306fb476e4", &(0x7f00000000c0)=""/42, 0x1, 0x0, 0x94, 0xfd, &(0x7f0000000780)="4c61f91b58f33280299a4ff7d611fc3c5f769ec70ac11e9bba9bcf8beda3139fb7853e17b13e944bb60991c1f2d508f0e59106b3eac530b78b83576617175659b9a1aadd6cc8880f2f58cdfe4f1126d6926d5cb0a9075b2f39532592fce94181379a326edaee923b7843dab703658d6acb8e6d7adf049ee1fe176376d9fbe24b331bfa4a2654a4a6e31abf82f0ba0d967edf85a7", &(0x7f0000000940)="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", 0x7, 0x0, 0x8d5}, 0x50) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x0, r0}, 0x18)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x20}, 0x0) (async)
r3 = perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x3, 0xd, 0x7, 0x4, 0x0, 0x3, 0x0, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x303f, 0x0, @perf_bp={&(0x7f0000000200)}, 0x100000, 0x1, 0x800, 0x4, 0x2, 0xffffff56, 0x53, 0x0, 0x7f8800, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r0) (async)
setsockopt$sock_attach_bpf(r1, 0x29, 0x1d, 0x0, 0x0) (async)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
close(0xffffffffffffffff) (async)
socketpair$unix(0x1, 0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41000000}, 0x94) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000080)="df33c9f7b9a600000000e32853c3", 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x3) (async)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)

1.386306729s ago: executing program 4 (id=3423):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x450, 0x16ac, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000)=r2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0x1000cc, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(0x0, r4, 0x5, r3, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map, 0xc, 0x0, 0x2, &(0x7f0000001340)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001380)=[0x0, 0x0], &(0x7f00000013c0), 0x0, <r5=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@fallback=r3, 0xffffffffffffffff, 0x1, 0x14, 0x0, @void, @value, @void, @void, r5}, 0x20)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, r6, 0x3, 0x5, 0x5}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x20, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0xfe}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r9, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)

1.385241189s ago: executing program 0 (id=3424):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000200)=r2, 0x78)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x1, 0x2}, 0x2}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="5efb9b0591b551d74424329b77e18831c9138904a2744fa2abc6cb9a2a30d494c3c3d13759554bc52ff3940566fc7270f8ead62932b62ab9c664cae30592ae54867c291390a558a4c947e7a4e25e93378310cb35e36bfbcdf1c91ed8fe17606ea604803c25d888ba2216b60c47ec6f5702665d94379ca218dd4dfcd304d4e97ab6971ab2de8637f1ce3f4c4c7095e550d471917caa3c803b18e1ae42a91c4b2db1a74497f1b659dae28ab18d30f8afe07e17", 0xb2}, {&(0x7f0000000140)="4dcb5a68ebd30f1042023153efc0a9", 0xf}, {&(0x7f00000001c0)="87e052ef4e8ade5ff4fe8d13a10f5a17c1475a8e7c21f8426d59e03d06cb2ae2bf6c9486b8c94ad3ba43c124b1a9b5b7edd7b3a39f775d01f37f343193139efb08fc0091841ef15a2e0633626f03ab67e87fa5c362a86af3be1a119e6b66b3bd69fd03565557fcac4515315454adcef6", 0x70}, {&(0x7f0000000240)="86e8fcd6bed62e4c52dd0e02d34f6050830116789919dda8dda8bdd21f6e449010c831248534c072c7fcea237f951cc51e74880d807b638ea477d48602f97ddd36d255332e5a0d6d321dc5bfaaf8a984f3bba3531a6f7c7c4403cdf4", 0x5c}, {&(0x7f00000002c0)="ddec4d3a741df501998ada34e8310a78140158cab264cc5ed8c148ed2cb88d392eb858a7faf67ce51695b366ed7f03e6b0091fec177db6e781fed39be1b0f38e66112ef0af9bff56e062b1fe06c343f8f8642be7679558fcb491ca1fb9bff4e220a444b3979687b46ec94e22b3cb655b19b728", 0x73}], 0x5, &(0x7f00000003c0)="a303b9d36aea7cb20758b32854e5333c73454747eb53099f4c2d5e82b4984dd985f2", 0x22, 0x48800}, 0x400008c0)

0s ago: executing program 3 (id=3425):
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
r1 = perf_event_open$cgroup(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x77b)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe4b, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) (async)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="6000000010000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) (async)
openat$cgroup_ro(r4, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')

kernel console output (not intermixed with test programs):

 family 0 port 6081 - 0
[  341.518536][T10386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  341.896925][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.918549][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.943690][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  342.133096][ T8156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.149274][ T8156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.180909][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  342.499713][T10646] device vcan0 entered promiscuous mode
[  342.505995][T10646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  342.832575][T10662] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1950'.
[  344.552586][T10711] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.1966'.
[  345.541739][T10746] netlink: 'syz.2.1976': attribute type 21 has an invalid length.
[  345.602294][T10749] netlink: 'syz.0.1977': attribute type 10 has an invalid length.
[  345.643829][T10749] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1977'.
[  345.890121][T10756] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1978'.
[  346.147828][T10762] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.1982'.
[  346.661830][T10783] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1985'.
[  347.845404][T10802] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.1994'.
[  347.897661][T10812] netlink: 'syz.1.1998': attribute type 39 has an invalid length.
[  347.946538][T10812] device veth0_macvtap left promiscuous mode
[  349.102062][T10834] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2005'.
[  349.390998][T10834] device hsr_slave_1 left promiscuous mode
[  350.128774][T10847] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2007'.
[  350.282089][T10858] netlink: 'syz.2.2010': attribute type 3 has an invalid length.
[  350.293284][T10858] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2010'.
[  350.361265][T10855] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2012'.
[  350.455005][T10862] netlink: 'syz.2.2010': attribute type 3 has an invalid length.
[  350.483406][T10862] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2010'.
[  350.617452][T10867] netlink: 64807 bytes leftover after parsing attributes in process `syz.0.2014'.
[  350.936749][T10876] netlink: 'syz.3.2017': attribute type 4 has an invalid length.
[  350.986062][T10876] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2017'.
[  351.178466][T10882] netlink: 'syz.0.2019': attribute type 10 has an invalid length.
[  351.197939][T10882] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2019'.
[  351.407723][T10892] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2024'.
[  351.663778][T10904] Â: renamed from pim6reg1
[  352.874908][T10960] netlink: 'syz.1.2045': attribute type 46 has an invalid length.
[  353.954669][T11009] netlink: 'syz.3.2060': attribute type 21 has an invalid length.
[  353.972921][T11009] netlink: 'syz.3.2060': attribute type 6 has an invalid length.
[  354.010364][T11009] __nla_validate_parse: 4 callbacks suppressed
[  354.010380][T11009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2060'.
[  354.065023][T11021] netlink: 'syz.3.2060': attribute type 3 has an invalid length.
[  354.075350][T11021] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2060'.
[  354.838455][T11047] netlink: 'syz.4.2073': attribute type 1 has an invalid length.
[  354.872483][T11047] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2073'.
[  356.786294][T11110] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.2091'.
[  357.409576][T11135] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.2099'.
[  358.734715][T11181] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2112'.
[  358.770150][T11182] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2112'.
[  359.179681][T11190] FAULT_INJECTION: forcing a failure.
[  359.179681][T11190] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  359.258385][T11190] CPU: 0 PID: 11190 Comm: syz.2.2114 Not tainted syzkaller #0
[  359.266005][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  359.276106][T11190] Call Trace:
[  359.279416][T11190]  <TASK>
[  359.282386][T11190]  dump_stack_lvl+0x188/0x24e
[  359.287139][T11190]  ? show_regs_print_info+0x12/0x12
[  359.292386][T11190]  ? load_image+0x400/0x400
[  359.296928][T11190]  ? __lock_acquire+0x7d10/0x7d10
[  359.302014][T11190]  should_fail_ex+0x399/0x4d0
[  359.306753][T11190]  _copy_from_user+0x2c/0x170
[  359.311486][T11190]  ___sys_sendmsg+0x1c3/0x360
[  359.316221][T11190]  ? __sys_sendmsg+0x290/0x290
[  359.321040][T11190]  ? __lock_acquire+0x7d10/0x7d10
[  359.326127][T11190]  __se_sys_sendmsg+0x1bb/0x2a0
[  359.331024][T11190]  ? __x64_sys_sendmsg+0x80/0x80
[  359.336030][T11190]  ? lockdep_hardirqs_on+0x94/0x140
[  359.341301][T11190]  do_syscall_64+0x4c/0xa0
[  359.345751][T11190]  ? clear_bhb_loop+0x60/0xb0
[  359.350474][T11190]  ? clear_bhb_loop+0x60/0xb0
[  359.355200][T11190]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  359.361131][T11190] RIP: 0033:0x7fea25d9aeb9
[  359.365591][T11190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.385245][T11190] RSP: 002b:00007fea26cda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.393701][T11190] RAX: ffffffffffffffda RBX: 00007fea26015fa0 RCX: 00007fea25d9aeb9
[  359.401729][T11190] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  359.409742][T11190] RBP: 00007fea26cda090 R08: 0000000000000000 R09: 0000000000000000
[  359.417740][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  359.425753][T11190] R13: 00007fea26016038 R14: 00007fea26015fa0 R15: 00007ffd3c743cf8
[  359.433780][T11190]  </TASK>
[  359.754748][T11206] netlink: 'syz.4.2118': attribute type 29 has an invalid length.
[  359.827529][T11210] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2118'.
[  359.892995][T11206] netlink: 'syz.4.2118': attribute type 29 has an invalid length.
[  360.231303][T11216] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2123'.
[  360.491894][   T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  361.508313][   T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  361.722344][T11248] FAULT_INJECTION: forcing a failure.
[  361.722344][T11248] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  361.758306][T11248] CPU: 1 PID: 11248 Comm: syz.4.2133 Not tainted syzkaller #0
[  361.765924][T11248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  361.776027][T11248] Call Trace:
[  361.779332][T11248]  <TASK>
[  361.782297][T11248]  dump_stack_lvl+0x188/0x24e
[  361.787031][T11248]  ? show_regs_print_info+0x12/0x12
[  361.792270][T11248]  ? load_image+0x400/0x400
[  361.796810][T11248]  ? __lock_acquire+0x7d10/0x7d10
[  361.801882][T11248]  should_fail_ex+0x399/0x4d0
[  361.806614][T11248]  _copy_from_user+0x2c/0x170
[  361.811350][T11248]  __copy_msghdr+0x3b7/0x580
[  361.815982][T11248]  ___sys_sendmsg+0x210/0x360
[  361.820701][T11248]  ? __sys_sendmsg+0x290/0x290
[  361.825522][T11248]  ? __lock_acquire+0x7d10/0x7d10
[  361.830609][T11248]  __se_sys_sendmsg+0x1bb/0x2a0
[  361.835546][T11248]  ? __x64_sys_sendmsg+0x80/0x80
[  361.840546][T11248]  ? lockdep_hardirqs_on+0x94/0x140
[  361.845793][T11248]  do_syscall_64+0x4c/0xa0
[  361.850250][T11248]  ? clear_bhb_loop+0x60/0xb0
[  361.854968][T11248]  ? clear_bhb_loop+0x60/0xb0
[  361.859693][T11248]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  361.865626][T11248] RIP: 0033:0x7f694139aeb9
[  361.870078][T11248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  361.889718][T11248] RSP: 002b:00007f694230f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  361.898169][T11248] RAX: ffffffffffffffda RBX: 00007f6941615fa0 RCX: 00007f694139aeb9
[  361.906175][T11248] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  361.914183][T11248] RBP: 00007f694230f090 R08: 0000000000000000 R09: 0000000000000000
[  361.922191][T11248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  361.930218][T11248] R13: 00007f6941616038 R14: 00007f6941615fa0 R15: 00007ffed462d648
[  361.938230][T11248]  </TASK>
[  361.962011][T11257] netlink: 'syz.2.2132': attribute type 4 has an invalid length.
[  361.976799][T11257] netlink: 'syz.2.2132': attribute type 8 has an invalid length.
[  361.985130][T11257] netlink: 193092 bytes leftover after parsing attributes in process `syz.2.2132'.
[  362.641440][T11279] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2142'.
[  363.896394][ T4281] Bluetooth: hci2: Malformed HCI Event: 0x22
[  363.904576][T11303] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2147'.
[  363.965904][T11309] netlink: 134268 bytes leftover after parsing attributes in process `syz.2.2149'.
[  364.190361][T11318] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2152'.
[  364.422503][T11328] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2155'.
[  366.387421][T11367] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2164'.
[  367.346130][T11385] netlink: 'syz.4.2170': attribute type 40 has an invalid length.
[  367.534760][T11390] netlink: 'syz.1.2172': attribute type 21 has an invalid length.
[  367.569885][T11390] netlink: 'syz.1.2172': attribute type 21 has an invalid length.
[  367.848579][T11411] netlink: 'syz.1.2176': attribute type 25 has an invalid length.
[  367.898310][T11411] netlink: 'syz.1.2176': attribute type 1 has an invalid length.
[  367.912621][T11411] bridge0: port 1(bridge_slave_0) entered learning state
[  367.927888][T11405] netlink: 'syz.2.2174': attribute type 10 has an invalid length.
[  367.954248][T11405] device veth1_macvtap left promiscuous mode
[  368.071173][T11418] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.2179'.
[  368.407168][T11410] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2177'.
[  368.831610][T11434] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.2184'.
[  369.515125][T11465] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2191'.
[  369.809945][T11471] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2193'.
[  370.389189][T11503] delete_channel: no stack
[  370.408601][T11503] delete_channel: no stack
[  370.780272][T11507] netlink: 'syz.1.2206': attribute type 3 has an invalid length.
[  370.818257][T11507] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2206'.
[  371.207449][T11525] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2209'.
[  372.052007][T11541] netlink: 'syz.4.2212': attribute type 10 has an invalid length.
[  372.116362][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2212'.
[  372.203682][T11541] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  372.422050][T11536] delete_channel: no stack
[  372.892405][T11555] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2218'.
[  373.173371][T11573] FAULT_INJECTION: forcing a failure.
[  373.173371][T11573] name failslab, interval 1, probability 0, space 0, times 0
[  373.205004][T11572] netlink: 'syz.0.2223': attribute type 1 has an invalid length.
[  373.255474][T11573] CPU: 1 PID: 11573 Comm: syz.2.2224 Not tainted syzkaller #0
[  373.263012][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  373.273106][T11573] Call Trace:
[  373.276417][T11573]  <TASK>
[  373.279382][T11573]  dump_stack_lvl+0x188/0x24e
[  373.284113][T11573]  ? show_regs_print_info+0x12/0x12
[  373.289347][T11573]  ? load_image+0x400/0x400
[  373.293892][T11573]  ? __might_sleep+0xd0/0xd0
[  373.298516][T11573]  ? __lock_acquire+0x7d10/0x7d10
[  373.303585][T11573]  ? memset+0x1e/0x40
[  373.307613][T11573]  should_fail_ex+0x399/0x4d0
[  373.312347][T11573]  should_failslab+0x5/0x20
[  373.316906][T11573]  slab_pre_alloc_hook+0x59/0x310
[  373.322001][T11573]  ? sctp_copy_one_addr+0x324/0x660
[  373.327243][T11573]  __kmem_cache_alloc_node+0x4f/0x260
[  373.332656][T11573]  ? sctp_copy_one_addr+0x324/0x660
[  373.337907][T11573]  kmalloc_trace+0x26/0xe0
[  373.342371][T11573]  sctp_copy_one_addr+0x324/0x660
[  373.347527][T11573]  sctp_bind_addr_copy+0xaf/0x3c0
[  373.352604][T11573]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  373.358987][T11573]  sctp_connect_new_asoc+0x2f5/0x6a0
[  373.364325][T11573]  ? __sctp_connect+0xd80/0xd80
[  373.369231][T11573]  ? __local_bh_enable_ip+0x136/0x1c0
[  373.374645][T11573]  ? _local_bh_enable+0xa0/0xa0
[  373.379534][T11573]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  373.385479][T11573]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  373.391329][T11573]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  373.396939][T11573]  ? security_sctp_bind_connect+0x85/0xb0
[  373.402704][T11573]  sctp_sendmsg+0x15b0/0x2940
[  373.407442][T11573]  ? aa_sk_perm+0x7e1/0x950
[  373.412004][T11573]  ? sctp_getsockopt+0x8a0/0x8a0
[  373.416980][T11573]  ? __might_fault+0xa6/0x120
[  373.421686][T11573]  ? aa_af_perm+0x340/0x340
[  373.426221][T11573]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  373.432684][T11573]  ? inet_sendmsg+0x78/0x2f0
[  373.437314][T11573]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  373.442637][T11573]  ? security_socket_sendmsg+0x7c/0xa0
[  373.448133][T11573]  ? inet_send_prepare+0x260/0x260
[  373.453305][T11573]  ____sys_sendmsg+0x5be/0x970
[  373.458113][T11573]  ? __sys_sendmsg_sock+0x30/0x30
[  373.463182][T11573]  ? __import_iovec+0x315/0x500
[  373.468072][T11573]  ? import_iovec+0x6f/0xa0
[  373.472634][T11573]  ___sys_sendmsg+0x2a2/0x360
[  373.477381][T11573]  ? __sys_sendmsg+0x290/0x290
[  373.482218][T11573]  ? __lock_acquire+0x7d10/0x7d10
[  373.487337][T11573]  __se_sys_sendmsg+0x1bb/0x2a0
[  373.492243][T11573]  ? __x64_sys_sendmsg+0x80/0x80
[  373.497239][T11573]  ? lockdep_hardirqs_on+0x94/0x140
[  373.502496][T11573]  do_syscall_64+0x4c/0xa0
[  373.506967][T11573]  ? clear_bhb_loop+0x60/0xb0
[  373.511682][T11573]  ? clear_bhb_loop+0x60/0xb0
[  373.516406][T11573]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  373.522334][T11573] RIP: 0033:0x7fea25d9aeb9
[  373.526782][T11573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  373.546431][T11573] RSP: 002b:00007fea26cda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  373.554906][T11573] RAX: ffffffffffffffda RBX: 00007fea26015fa0 RCX: 00007fea25d9aeb9
[  373.562926][T11573] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  373.570937][T11573] RBP: 00007fea26cda090 R08: 0000000000000000 R09: 0000000000000000
[  373.578942][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  373.586958][T11573] R13: 00007fea26016038 R14: 00007fea26015fa0 R15: 00007ffd3c743cf8
[  373.594988][T11573]  </TASK>
[  373.643595][T11572] netlink: 'syz.0.2223': attribute type 2 has an invalid length.
[  373.660357][T11572] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2223'.
[  374.911533][T11625] FAULT_INJECTION: forcing a failure.
[  374.911533][T11625] name failslab, interval 1, probability 0, space 0, times 0
[  374.969823][T11625] CPU: 1 PID: 11625 Comm: syz.4.2239 Not tainted syzkaller #0
[  374.977364][T11625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  374.987566][T11625] Call Trace:
[  374.990885][T11625]  <TASK>
[  374.993851][T11625]  dump_stack_lvl+0x188/0x24e
[  374.998576][T11625]  ? show_regs_print_info+0x12/0x12
[  375.003830][T11625]  ? load_image+0x400/0x400
[  375.008390][T11625]  ? __might_sleep+0xd0/0xd0
[  375.013019][T11625]  ? __lock_acquire+0x7d10/0x7d10
[  375.018088][T11625]  should_fail_ex+0x399/0x4d0
[  375.022840][T11625]  should_failslab+0x5/0x20
[  375.027069][T11623] delete_channel: no stack
[  375.027388][T11625]  slab_pre_alloc_hook+0x59/0x310
[  375.036880][T11625]  ? sctp_transport_new+0x7b/0x620
[  375.042034][T11625]  __kmem_cache_alloc_node+0x4f/0x260
[  375.047439][T11625]  ? sctp_transport_new+0x7b/0x620
[  375.052597][T11625]  kmalloc_trace+0x26/0xe0
[  375.057071][T11625]  sctp_transport_new+0x7b/0x620
[  375.062062][T11625]  sctp_assoc_add_peer+0x247/0x1640
[  375.067356][T11625]  ? sctp_bind_addr_copy+0x37c/0x3c0
[  375.072688][T11625]  sctp_connect_new_asoc+0x31f/0x6a0
[  375.078010][T11625]  ? __sctp_connect+0xd80/0xd80
[  375.082900][T11625]  ? __local_bh_enable_ip+0x136/0x1c0
[  375.088291][T11625]  ? _local_bh_enable+0xa0/0xa0
[  375.093180][T11625]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  375.099027][T11625]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  375.104873][T11625]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  375.110549][T11625]  ? security_sctp_bind_connect+0x85/0xb0
[  375.116431][T11625]  sctp_sendmsg+0x15b0/0x2940
[  375.121161][T11625]  ? aa_sk_perm+0x7e1/0x950
[  375.125705][T11625]  ? sctp_getsockopt+0x8a0/0x8a0
[  375.130714][T11625]  ? __might_fault+0xa6/0x120
[  375.135419][T11625]  ? aa_af_perm+0x340/0x340
[  375.139953][T11625]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  375.146423][T11625]  ? inet_sendmsg+0x78/0x2f0
[  375.151039][T11625]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  375.156342][T11625]  ? security_socket_sendmsg+0x7c/0xa0
[  375.161837][T11625]  ? inet_send_prepare+0x260/0x260
[  375.166975][T11625]  ____sys_sendmsg+0x5be/0x970
[  375.171802][T11625]  ? __sys_sendmsg_sock+0x30/0x30
[  375.176884][T11625]  ? __import_iovec+0x315/0x500
[  375.181790][T11625]  ? import_iovec+0x6f/0xa0
[  375.186332][T11625]  ___sys_sendmsg+0x2a2/0x360
[  375.191055][T11625]  ? __sys_sendmsg+0x290/0x290
[  375.195884][T11625]  ? __lock_acquire+0x7d10/0x7d10
[  375.200964][T11625]  __se_sys_sendmsg+0x1bb/0x2a0
[  375.205854][T11625]  ? ct_nmi_exit+0x145/0x1c0
[  375.210474][T11625]  ? __x64_sys_sendmsg+0x80/0x80
[  375.215461][T11625]  ? lockdep_hardirqs_on+0x94/0x140
[  375.220716][T11625]  do_syscall_64+0x4c/0xa0
[  375.225160][T11625]  ? clear_bhb_loop+0x60/0xb0
[  375.229865][T11625]  ? clear_bhb_loop+0x60/0xb0
[  375.234564][T11625]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  375.240481][T11625] RIP: 0033:0x7f694139aeb9
[  375.244911][T11625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  375.264534][T11625] RSP: 002b:00007f694230f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  375.272964][T11625] RAX: ffffffffffffffda RBX: 00007f6941615fa0 RCX: 00007f694139aeb9
[  375.280950][T11625] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  375.288933][T11625] RBP: 00007f694230f090 R08: 0000000000000000 R09: 0000000000000000
[  375.296918][T11625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  375.304902][T11625] R13: 00007f6941616038 R14: 00007f6941615fa0 R15: 00007ffed462d648
[  375.312903][T11625]  </TASK>
[  375.416324][T11632] netlink: 'syz.2.2243': attribute type 21 has an invalid length.
[  376.565154][ T4281] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  376.835625][T11660] netlink: 'syz.4.2250': attribute type 10 has an invalid length.
[  377.424825][T11685] netlink: 'syz.2.2259': attribute type 12 has an invalid length.
[  377.448880][T11685] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2259'.
[  377.539239][T11692] netlink: 'syz.2.2259': attribute type 5 has an invalid length.
[  377.871995][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2268'.
[  378.499205][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  378.505669][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  378.842949][T11732] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2279'.
[  379.122197][T11750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2284'.
[  379.301541][T11760] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2287'.
[  380.886240][T11793] netlink: 'syz.1.2296': attribute type 10 has an invalid length.
[  380.908306][T11793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2296'.
[  381.104990][T11793] batman_adv: batadv0: Adding interface: virt_wifi0
[  381.148367][T11793] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.209749][T11793] batman_adv: batadv0: Interface activated: virt_wifi0
[  381.326283][T11819] pimreg1: tun_chr_ioctl cmd 1074025677
[  381.349240][T11819] pimreg1: linktype set to 769
[  381.361163][ T4281] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  382.593310][T11860] netlink: 'syz.3.2315': attribute type 25 has an invalid length.
[  382.610878][T11860] netlink: 'syz.3.2315': attribute type 1 has an invalid length.
[  382.636891][T11860] bridge0: port 1(bridge_slave_0) entered learning state
[  382.971104][T11870] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2317'.
[  383.105133][T11873] netlink: 'syz.4.2320': attribute type 10 has an invalid length.
[  383.128750][T11873] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2320'.
[  383.163957][T11873] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  383.353759][T11881] netlink: 'syz.2.2322': attribute type 29 has an invalid length.
[  383.398959][T11881] netlink: 'syz.2.2322': attribute type 29 has an invalid length.
[  383.435326][T11881] netlink: 'syz.2.2322': attribute type 29 has an invalid length.
[  383.448355][ T4281] Bluetooth: hci3: command 0x2016 tx timeout
[  383.551355][T11871] netlink: 146340 bytes leftover after parsing attributes in process `syz.1.2319'.
[  383.585128][T11871] openvswitch: netlink: Key type 386 is out of range max 32
[  383.964763][T11895] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  385.710116][T11956] FAULT_INJECTION: forcing a failure.
[  385.710116][T11956] name failslab, interval 1, probability 0, space 0, times 0
[  385.746639][T11956] CPU: 0 PID: 11956 Comm: syz.3.2339 Not tainted syzkaller #0
[  385.754272][T11956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  385.764456][T11956] Call Trace:
[  385.767788][T11956]  <TASK>
[  385.770749][T11956]  dump_stack_lvl+0x188/0x24e
[  385.775508][T11956]  ? show_regs_print_info+0x12/0x12
[  385.780753][T11956]  ? load_image+0x400/0x400
[  385.785297][T11956]  should_fail_ex+0x399/0x4d0
[  385.790033][T11956]  should_failslab+0x5/0x20
[  385.794573][T11956]  slab_pre_alloc_hook+0x59/0x310
[  385.799635][T11956]  kmem_cache_alloc+0x56/0x2f0
[  385.804427][T11956]  ? _sctp_make_chunk+0x14e/0x420
[  385.809503][T11956]  _sctp_make_chunk+0x14e/0x420
[  385.814394][T11956]  sctp_make_init+0x565/0x1f80
[  385.819207][T11956]  ? sctp_addto_chunk+0x220/0x220
[  385.824273][T11956]  sctp_sf_do_prm_asoc+0xce/0x3e0
[  385.829345][T11956]  sctp_do_sm+0x245/0x55f0
[  385.833812][T11956]  ? __stack_depot_save+0x35/0x460
[  385.838982][T11956]  ? __kasan_kmalloc+0x8e/0xa0
[  385.843782][T11956]  ? sctp_stream_init_ext+0x53/0x160
[  385.849113][T11956]  ? sctp_sendmsg_to_asoc+0x1320/0x1830
[  385.854698][T11956]  ? sctp_generate_t3_rtx_event+0x340/0x340
[  385.860630][T11956]  ? __se_sys_sendmsg+0x1bb/0x2a0
[  385.865698][T11956]  ? do_syscall_64+0x4c/0xa0
[  385.870363][T11956]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  385.876517][T11956]  ? __sk_mem_raise_allocated+0xa48/0x13d0
[  385.882388][T11956]  sctp_primitive_ASSOCIATE+0x91/0xc0
[  385.887826][T11956]  sctp_sendmsg_to_asoc+0x10a2/0x1830
[  385.893281][T11956]  ? sctp_assoc_add_peer+0xeb7/0x1640
[  385.898720][T11956]  ? sctp_sendmsg_check_sflags+0x2d0/0x2d0
[  385.904581][T11956]  ? __sctp_connect+0xd80/0xd80
[  385.909486][T11956]  ? __local_bh_enable_ip+0x136/0x1c0
[  385.914982][T11956]  ? _local_bh_enable+0xa0/0xa0
[  385.919872][T11956]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  385.925768][T11956]  ? sctp_endpoint_lookup_assoc+0x77/0x260
[  385.931633][T11956]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  385.937220][T11956]  ? security_sctp_bind_connect+0x85/0xb0
[  385.942975][T11956]  sctp_sendmsg+0x1984/0x2940
[  385.947703][T11956]  ? aa_sk_perm+0x7e1/0x950
[  385.952255][T11956]  ? sctp_getsockopt+0x8a0/0x8a0
[  385.957245][T11956]  ? __might_fault+0xa6/0x120
[  385.961962][T11956]  ? aa_af_perm+0x340/0x340
[  385.966504][T11956]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  385.973009][T11956]  ? inet_sendmsg+0x78/0x2f0
[  385.977653][T11956]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  385.982972][T11956]  ? security_socket_sendmsg+0x7c/0xa0
[  385.988490][T11956]  ? inet_send_prepare+0x260/0x260
[  385.993641][T11956]  ____sys_sendmsg+0x5be/0x970
[  385.998461][T11956]  ? __sys_sendmsg_sock+0x30/0x30
[  386.003524][T11956]  ? __import_iovec+0x315/0x500
[  386.008414][T11956]  ? import_iovec+0x6f/0xa0
[  386.012962][T11956]  ___sys_sendmsg+0x2a2/0x360
[  386.017688][T11956]  ? __sys_sendmsg+0x290/0x290
[  386.022517][T11956]  ? __lock_acquire+0x7d10/0x7d10
[  386.027613][T11956]  __se_sys_sendmsg+0x1bb/0x2a0
[  386.032535][T11956]  ? __x64_sys_sendmsg+0x80/0x80
[  386.037555][T11956]  ? lockdep_hardirqs_on+0x94/0x140
[  386.042816][T11956]  do_syscall_64+0x4c/0xa0
[  386.047263][T11956]  ? clear_bhb_loop+0x60/0xb0
[  386.051979][T11956]  ? clear_bhb_loop+0x60/0xb0
[  386.056707][T11956]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  386.062641][T11956] RIP: 0033:0x7fda9e99aeb9
[  386.067082][T11956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  386.086731][T11956] RSP: 002b:00007fda9f8ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  386.095188][T11956] RAX: ffffffffffffffda RBX: 00007fda9ec15fa0 RCX: 00007fda9e99aeb9
[  386.103188][T11956] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  386.111203][T11956] RBP: 00007fda9f8ab090 R08: 0000000000000000 R09: 0000000000000000
[  386.119214][T11956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  386.127210][T11956] R13: 00007fda9ec16038 R14: 00007fda9ec15fa0 R15: 00007ffdeadf6038
[  386.135226][T11956]  </TASK>
[  386.247158][T11965] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2342'.
[  386.573805][T11970] netlink: 'syz.0.2346': attribute type 46 has an invalid length.
[  386.662766][T11970] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2346'.
[  388.415398][T12012] device syzkaller0 entered promiscuous mode
[  388.444684][T12011] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2359'.
[  392.074749][T12040] netlink: 'syz.0.2366': attribute type 21 has an invalid length.
[  392.088398][ T8139] device 0 left promiscuous mode
[  392.624946][T12060] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2371'.
[  392.742495][T12063] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  392.946819][T12075] netlink: 'syz.4.2375': attribute type 3 has an invalid length.
[  392.975068][T12075] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2375'.
[  393.622706][T12088] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2370'.
[  394.116130][T12111] FAULT_INJECTION: forcing a failure.
[  394.116130][T12111] name failslab, interval 1, probability 0, space 0, times 0
[  394.250066][T12122] netlink: 'syz.4.2387': attribute type 3 has an invalid length.
[  394.255201][T12111] CPU: 1 PID: 12111 Comm: syz.0.2384 Not tainted syzkaller #0
[  394.265372][T12111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  394.275460][T12111] Call Trace:
[  394.278776][T12111]  <TASK>
[  394.281740][T12111]  dump_stack_lvl+0x188/0x24e
[  394.286467][T12111]  ? sctp_sendmsg+0x15b0/0x2940
[  394.289741][T12122] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.2387'.
[  394.291340][T12111]  ? ___sys_sendmsg+0x2a2/0x360
[  394.291373][T12111]  ? show_regs_print_info+0x12/0x12
[  394.310698][T12111]  ? load_image+0x400/0x400
[  394.315258][T12111]  should_fail_ex+0x399/0x4d0
[  394.319988][T12111]  should_failslab+0x5/0x20
[  394.324545][T12111]  slab_pre_alloc_hook+0x59/0x310
[  394.329647][T12111]  ? sctp_add_bind_addr+0x89/0x350
[  394.334811][T12111]  __kmem_cache_alloc_node+0x4f/0x260
[  394.340229][T12111]  ? sctp_add_bind_addr+0x89/0x350
[  394.345389][T12111]  kmalloc_trace+0x26/0xe0
[  394.349860][T12111]  sctp_add_bind_addr+0x89/0x350
[  394.354850][T12111]  sctp_copy_local_addr_list+0x311/0x4e0
[  394.360537][T12111]  ? sctp_copy_local_addr_list+0xa1/0x4e0
[  394.366304][T12111]  ? sctp_do_8_2_transport_strike+0x8a0/0x8a0
[  394.372420][T12111]  ? sctp_v4_is_any+0x31/0x50
[  394.377157][T12111]  ? sctp_copy_one_addr+0x93/0x660
[  394.382315][T12111]  sctp_bind_addr_copy+0xaf/0x3c0
[  394.387365][T12111]  ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190
[  394.393733][T12111]  sctp_connect_new_asoc+0x2f5/0x6a0
[  394.399062][T12111]  ? __sctp_connect+0xd80/0xd80
[  394.404020][T12111]  ? __local_bh_enable_ip+0x136/0x1c0
[  394.409420][T12111]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  394.414995][T12111]  ? security_sctp_bind_connect+0x85/0xb0
[  394.420732][T12111]  sctp_sendmsg+0x15b0/0x2940
[  394.425449][T12111]  ? aa_sk_perm+0x7e1/0x950
[  394.429982][T12111]  ? sctp_getsockopt+0x8a0/0x8a0
[  394.434939][T12111]  ? __might_fault+0xa6/0x120
[  394.439631][T12111]  ? aa_af_perm+0x340/0x340
[  394.444150][T12111]  ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0
[  394.450588][T12111]  ? inet_sendmsg+0xe5/0x2f0
[  394.455200][T12111]  ? inet_send_prepare+0x260/0x260
[  394.460336][T12111]  ____sys_sendmsg+0x5be/0x970
[  394.465136][T12111]  ? __sys_sendmsg_sock+0x30/0x30
[  394.470181][T12111]  ? __import_iovec+0x315/0x500
[  394.475051][T12111]  ? import_iovec+0x6f/0xa0
[  394.479574][T12111]  ___sys_sendmsg+0x2a2/0x360
[  394.484284][T12111]  ? __sys_sendmsg+0x290/0x290
[  394.489091][T12111]  ? __lock_acquire+0x7d10/0x7d10
[  394.494157][T12111]  __se_sys_sendmsg+0x1bb/0x2a0
[  394.499027][T12111]  ? __x64_sys_sendmsg+0x80/0x80
[  394.504001][T12111]  ? lockdep_hardirqs_on+0x94/0x140
[  394.509227][T12111]  do_syscall_64+0x4c/0xa0
[  394.513676][T12111]  ? clear_bhb_loop+0x60/0xb0
[  394.518365][T12111]  ? clear_bhb_loop+0x60/0xb0
[  394.523059][T12111]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  394.528959][T12111] RIP: 0033:0x7fd73339aeb9
[  394.533385][T12111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.553003][T12111] RSP: 002b:00007fd734265028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.561430][T12111] RAX: ffffffffffffffda RBX: 00007fd733615fa0 RCX: 00007fd73339aeb9
[  394.569420][T12111] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005
[  394.577421][T12111] RBP: 00007fd734265090 R08: 0000000000000000 R09: 0000000000000000
[  394.585406][T12111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  394.593394][T12111] R13: 00007fd733616038 R14: 00007fd733615fa0 R15: 00007fff22b06878
[  394.601412][T12111]  </TASK>
[  394.807779][T12124] netlink: 'syz.2.2383': attribute type 1 has an invalid length.
[  394.842492][T12124] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2383'.
[  395.039559][T12129] netlink: 'syz.1.2388': attribute type 21 has an invalid length.
[  395.048763][T12129] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2388'.
[  395.221138][T12133] delete_channel: no stack
[  395.310326][T12133] delete_channel: no stack
[  396.158521][ T8139] device hsr_slave_0 left promiscuous mode
[  396.499719][ T8139] device hsr_slave_1 left promiscuous mode
[  396.651318][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.662811][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  397.523612][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.537149][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  398.301532][ T8139] bridge0: port 4(dummy0) entered disabled state
[  398.309584][ T8139] bridge0: port 3(team0) entered disabled state
[  398.317147][ T8139] device bridge_slave_1 left promiscuous mode
[  398.326405][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.335258][ T8139] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.355738][ T8139] device veth1_macvtap left promiscuous mode
[  398.361914][ T8139] device veth0_macvtap left promiscuous mode
[  398.367990][ T8139] device veth1_vlan left promiscuous mode
[  398.374267][ T8139] device veth0_vlan left promiscuous mode
[  398.886507][ T8139] device team_slave_1 left promiscuous mode
[  398.895908][ T8139] team0 (unregistering): Port device team_slave_1 removed
[  399.292137][T12151] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  399.300778][T12151] device syzkaller0 entered promiscuous mode
[  399.321208][T12166] wlan1: mtu greater than device maximum
[  400.006682][T12193] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.028150][T12193] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.343210][T12201] delete_channel: no stack
[  400.409463][T12201] delete_channel: no stack
[  401.420960][T12232] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2418'.
[  402.937798][T12256] delete_channel: no stack
[  402.943857][T12256] delete_channel: no stack
[  403.252051][T12262] netlink: 'syz.1.2427': attribute type 3 has an invalid length.
[  403.260170][T12262] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2427'.
[  403.317498][T12263] device syzkaller0 entered promiscuous mode
[  403.366211][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2428'.
[  403.591330][T12275] netlink: 'syz.2.2431': attribute type 8 has an invalid length.
[  403.608444][T12275] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2431'.
[  403.639845][T12278] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2432'.
[  403.723141][T12281] netlink: 'syz.3.2433': attribute type 19 has an invalid length.
[  403.734544][T12281] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2433'.
[  404.249900][T12300] netlink: 'syz.1.2440': attribute type 2 has an invalid length.
[  404.269651][T12301] netlink: 4871 bytes leftover after parsing attributes in process `syz.3.2441'.
[  404.281993][T12300] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2440'.
[  404.294842][T12303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2442'.
[  404.304609][T12303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2442'.
[  405.483695][T12344] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4
[  405.716807][T12352] netlink: 'syz.3.2455': attribute type 21 has an invalid length.
[  405.771903][T12352] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  405.820878][T12352] batman_adv: batadv0: Removing interface: batadv_slave_0
[  405.894766][T12354] delete_channel: no stack
[  406.456493][T12373] __nla_validate_parse: 2 callbacks suppressed
[  406.456511][T12373] netlink: 126632 bytes leftover after parsing attributes in process `syz.4.2462'.
[  406.541867][T12373] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.2462'.
[  407.278998][T12387] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2465'.
[  407.960050][T12428] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  408.491048][T12448] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2482'.
[  408.929567][T12470] netlink: 'syz.4.2488': attribute type 1 has an invalid length.
[  408.955024][T12466] netlink: 'syz.3.2486': attribute type 21 has an invalid length.
[  409.056920][T12466] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2486'.
[  409.527940][T12488] netlink: 'syz.0.2494': attribute type 10 has an invalid length.
[  409.631483][T12498] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2495'.
[  410.423020][T12523] netlink: 'syz.4.2503': attribute type 21 has an invalid length.
[  410.446078][T12523] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2503'.
[  410.992929][T12536] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2508'.
[  411.735480][T12556] netlink: 'syz.3.2512': attribute type 10 has an invalid length.
[  411.913223][T12556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2512'.
[  412.063377][T12556] bridge0: port 3(veth0_vlan) entered blocking state
[  412.142611][T12556] bridge0: port 3(veth0_vlan) entered disabled state
[  412.225810][T12570] netlink: 'syz.3.2512': attribute type 3 has an invalid length.
[  412.296956][ T4285] Bluetooth: hci4: Received unexpected HCI Event 0x00
[  412.335719][T12570] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2512'.
[  412.374089][T12556] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  412.508298][T12561] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.2512'.
[  412.526779][T12563] netlink: 'syz.0.2516': attribute type 21 has an invalid length.
[  412.563190][T12563] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2516'.
[  412.665180][T12573] netlink: 'syz.1.2518': attribute type 21 has an invalid length.
[  412.707769][T12576] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  412.718996][T12576] batman_adv: batadv0: Removing interface: batadv_slave_0
[  412.732914][T12576] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  412.752680][T12576] batman_adv: batadv0: Removing interface: batadv_slave_1
[  412.767151][T12576] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  412.780154][T12576] batman_adv: batadv0: Removing interface: virt_wifi0
[  413.194202][T12581] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2520'.
[  413.377089][T12592] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2524'.
[  414.756268][T12592] device caif0 entered promiscuous mode
[  415.564558][T12606] device syzkaller0 entered promiscuous mode
[  415.884088][T12618] netlink: 'syz.0.2532': attribute type 5 has an invalid length.
[  416.117451][T12635] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2535'.
[  417.199838][T12671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2545'.
[  417.278392][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  417.604786][T12677] netlink: 'syz.4.2545': attribute type 10 has an invalid length.
[  418.275694][T12662] device syzkaller0 entered promiscuous mode
[  420.924249][T12689] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2550'.
[  420.941229][T12697] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2552'.
[  421.607340][T12722] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.2560'.
[  422.184438][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2563'.
[  422.353946][T12743] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2565'.
[  422.793731][T12753] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  423.776571][ T8147] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  424.337751][T12783] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2575'.
[  424.800364][ T8139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  425.166010][T12795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2581'.
[  425.483717][T12800] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2580'.
[  425.684227][T12808] netlink: 'syz.4.2582': attribute type 2 has an invalid length.
[  426.066551][T12821] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2587'.
[  426.108412][T12821] netlink: zone id is out of range
[  426.113715][T12821] netlink: zone id is out of range
[  426.158445][T12821] netlink: zone id is out of range
[  426.174536][T12821] netlink: zone id is out of range
[  426.194216][T12821] netlink: zone id is out of range
[  426.216954][T12821] netlink: zone id is out of range
[  426.236931][T12821] netlink: zone id is out of range
[  426.278530][T12821] netlink: zone id is out of range
[  426.283807][T12821] netlink: zone id is out of range
[  426.351242][T12826] netlink: 'syz.2.2589': attribute type 10 has an invalid length.
[  427.007065][T12851] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2597'.
[  427.103678][T12856] netlink: 'syz.1.2598': attribute type 10 has an invalid length.
[  427.243166][T12856] team0: Device ipvlan1 failed to register rx_handler
[  427.454652][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2599'.
[  427.995461][T12883] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2605'.
[  428.140499][T12890] netlink: 'syz.0.2606': attribute type 1 has an invalid length.
[  428.160031][T12890] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2606'.
[  428.583502][T12899] netlink: 'syz.2.2609': attribute type 10 has an invalid length.
[  428.718130][T12899] team0: Port device dummy0 added
[  428.733712][T12902] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2611'.
[  429.036868][T12917] netlink: 'syz.2.2617': attribute type 39 has an invalid length.
[  429.643961][T12921] netlink: 'syz.4.2615': attribute type 9 has an invalid length.
[  429.658610][T12921] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2615'.
[  429.698623][T12929] netlink: 'syz.3.2618': attribute type 2 has an invalid length.
[  429.712848][T12929] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2618'.
[  430.074974][T12946] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.2621'.
[  430.127827][T12946] net_ratelimit: 69 callbacks suppressed
[  430.127847][T12946] openvswitch: netlink: Flow actions attr not present in new flow.
[  430.275111][T12955] netlink: 'syz.2.2625': attribute type 11 has an invalid length.
[  430.300668][T12955] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2625'.
[  430.353652][T12955] netlink: 'syz.2.2625': attribute type 3 has an invalid length.
[  430.379204][T12955] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2625'.
[  430.582395][T12961] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2627'.
[  430.592858][T12953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.270671][T13008] netlink: 'syz.0.2640': attribute type 1 has an invalid length.
[  432.553417][T13025] netlink: 'syz.0.2644': attribute type 29 has an invalid length.
[  433.028290][T13025] netlink: 'syz.0.2644': attribute type 29 has an invalid length.
[  433.961199][T13059] __nla_validate_parse: 3 callbacks suppressed
[  433.961237][T13059] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2653'.
[  434.082439][T13063] netlink: 'syz.4.2655': attribute type 3 has an invalid length.
[  434.104755][T13063] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2655'.
[  434.175735][T13065] delete_channel: no stack
[  437.645912][T13087] netlink: 'syz.3.2663': attribute type 10 has an invalid length.
[  437.740157][T13091] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2665'.
[  438.122201][T13100] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2668'.
[  438.603613][T13125] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2674'.
[  438.770533][T13122] device syzkaller0 entered promiscuous mode
[  439.713180][T13129] device syzkaller0 entered promiscuous mode
[  439.932082][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  439.938557][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  445.386160][T13153] netlink: 'syz.2.2688': attribute type 21 has an invalid length.
[  445.396102][T13153] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2688'.
[  445.407770][T13157] netlink: 'syz.4.2678': attribute type 10 has an invalid length.
[  445.430769][T13157] team0: Port device dummy0 added
[  445.440380][T13161] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2679'.
[  445.628897][T13163] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2682'.
[  445.673574][T13166] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2681'.
[  445.835004][T13163] device bridge_slave_1 left promiscuous mode
[  445.854195][T13163] bridge0: port 2(bridge_slave_1) entered disabled state
[  445.927863][T13163] device bridge_slave_0 left promiscuous mode
[  445.944657][T13163] bridge0: port 1(bridge_slave_0) entered disabled state
[  447.055000][T13191] FAULT_INJECTION: forcing a failure.
[  447.055000][T13191] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  447.074152][T13191] CPU: 0 PID: 13191 Comm: syz.0.2689 Not tainted syzkaller #0
[  447.081675][T13191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  447.091771][T13191] Call Trace:
[  447.095080][T13191]  <TASK>
[  447.098041][T13191]  dump_stack_lvl+0x188/0x24e
[  447.102770][T13191]  ? show_regs_print_info+0x12/0x12
[  447.108006][T13191]  ? load_image+0x400/0x400
[  447.112559][T13191]  ? __lock_acquire+0x7d10/0x7d10
[  447.117622][T13191]  ? lockdep_hardirqs_on+0x94/0x140
[  447.122875][T13191]  should_fail_ex+0x399/0x4d0
[  447.127601][T13191]  _copy_from_user+0x2c/0x170
[  447.132321][T13191]  __sys_bpf+0x2ea/0x780
[  447.136623][T13191]  ? bpf_link_show_fdinfo+0x380/0x380
[  447.142065][T13191]  ? lock_chain_count+0x20/0x20
[  447.146964][T13191]  __x64_sys_bpf+0x78/0x90
[  447.151424][T13191]  do_syscall_64+0x4c/0xa0
[  447.155874][T13191]  ? clear_bhb_loop+0x60/0xb0
[  447.160582][T13191]  ? clear_bhb_loop+0x60/0xb0
[  447.165290][T13191]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  447.171214][T13191] RIP: 0033:0x7fd73339aeb9
[  447.175656][T13191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  447.195294][T13191] RSP: 002b:00007fd734265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  447.203757][T13191] RAX: ffffffffffffffda RBX: 00007fd733615fa0 RCX: 00007fd73339aeb9
[  447.211779][T13191] RDX: 0000000000000050 RSI: 0000200000001300 RDI: 000000000000000a
[  447.219785][T13191] RBP: 00007fd734265090 R08: 0000000000000000 R09: 0000000000000000
[  447.227798][T13191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  447.235801][T13191] R13: 00007fd733616038 R14: 00007fd733615fa0 R15: 00007fff22b06878
[  447.243818][T13191]  </TASK>
[  447.833117][T13193] netlink: 126632 bytes leftover after parsing attributes in process `syz.0.2690'.
[  448.955803][T13172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2685'.
[  448.968619][T13193] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2690'.
[  449.399996][T13211] netlink: 'syz.1.2695': attribute type 27 has an invalid length.
[  449.407917][T13211] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2695'.
[  450.052369][T13210] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2696'.
[  451.273925][T13224] netlink: 'syz.1.2699': attribute type 21 has an invalid length.
[  451.352500][T13224] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2699'.
[  451.365652][T13228] netlink: 'syz.3.2701': attribute type 21 has an invalid length.
[  451.378256][T13228] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2701'.
[  451.439491][T13228] netlink: 'syz.3.2701': attribute type 5 has an invalid length.
[  451.472248][T13228] netlink: 'syz.3.2701': attribute type 6 has an invalid length.
[  451.499370][T13228] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2701'.
[  451.531912][T13229] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2701'.
[  452.144148][T13236] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2703'.
[  452.624546][T13249] device syzkaller0 entered promiscuous mode
[  457.378273][ T4285] Bluetooth: hci0: command 0x0406 tx timeout
[  458.051556][T13269] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2711'.
[  458.063522][T13275] netlink: 'syz.3.2714': attribute type 21 has an invalid length.
[  458.088654][T13275] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2714'.
[  458.247812][T13281] netlink: 'syz.2.2718': attribute type 21 has an invalid length.
[  458.269467][T13281] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2718'.
[  458.327994][T13286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2719'.
[  458.764802][T13304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  458.801452][T13304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  459.148018][T13313] netlink: 'syz.3.2726': attribute type 21 has an invalid length.
[  459.185930][T13313] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2726'.
[  459.312745][T13319] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2727'.
[  459.532733][T13323] netlink: 'syz.1.2729': attribute type 2 has an invalid length.
[  459.752576][T13332] device syzkaller0 entered promiscuous mode
[  459.783535][T13331] netlink: 'syz.0.2731': attribute type 21 has an invalid length.
[  459.794221][T13331] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2731'.
[  459.806568][T13337] netlink: 'syz.2.2741': attribute type 21 has an invalid length.
[  459.819292][T13337] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2741'.
[  459.836639][T13338] netlink: 'syz.4.2732': attribute type 21 has an invalid length.
[  459.848231][T13338] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2732'.
[  459.871303][T13341] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2733'.
[  459.928997][T13340] device batadv_slave_1 entered promiscuous mode
[  460.970364][T13368] netlink: 'syz.1.2739': attribute type 3 has an invalid length.
[  462.612021][T13380] netlink: 'syz.4.2746': attribute type 21 has an invalid length.
[  462.743478][T13387] netlink: 'syz.0.2747': attribute type 21 has an invalid length.
[  463.012077][T13392] device veth0_vlan left promiscuous mode
[  463.069691][T13392] device veth0_vlan entered promiscuous mode
[  463.174254][T13392] bridge0: port 3(veth0_vlan) entered blocking state
[  463.204927][T13392] bridge0: port 3(veth0_vlan) entered disabled state
[  463.264728][T13392] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  463.342580][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  463.389492][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  463.417250][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  463.775527][T13410] validate_nla: 3 callbacks suppressed
[  463.775543][T13410] netlink: 'syz.3.2755': attribute type 10 has an invalid length.
[  463.804040][T13410] __nla_validate_parse: 6 callbacks suppressed
[  463.804055][T13410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2755'.
[  463.864976][T13410] device ipvlan1 entered promiscuous mode
[  463.921436][T13410] bridge0: port 3(ipvlan1) entered blocking state
[  463.928222][T13410] bridge0: port 3(ipvlan1) entered disabled state
[  463.936638][T13410] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  464.371342][T13433] netlink: 'syz.3.2760': attribute type 10 has an invalid length.
[  464.407273][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2760'.
[  464.444126][T13433] bridge0: port 3(ipvlan1) entered blocking state
[  464.454523][T13433] bridge0: port 3(ipvlan1) entered disabled state
[  464.475299][T13433] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  464.499391][T13440] netlink: 'syz.1.2761': attribute type 21 has an invalid length.
[  464.515077][T13440] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2761'.
[  464.680697][T13444] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2764'.
[  464.990165][T13454] FAULT_INJECTION: forcing a failure.
[  464.990165][T13454] name failslab, interval 1, probability 0, space 0, times 0
[  465.027048][T13456] netlink: 'syz.2.2769': attribute type 21 has an invalid length.
[  465.035745][T13454] CPU: 0 PID: 13454 Comm: syz.0.2768 Not tainted syzkaller #0
[  465.043259][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  465.053352][T13454] Call Trace:
[  465.056663][T13454]  <TASK>
[  465.059624][T13454]  dump_stack_lvl+0x188/0x24e
[  465.064341][T13454]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  465.070551][T13454]  ? show_regs_print_info+0x12/0x12
[  465.075806][T13454]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  465.082024][T13454]  should_fail_ex+0x399/0x4d0
[  465.086769][T13454]  should_failslab+0x5/0x20
[  465.091329][T13454]  slab_pre_alloc_hook+0x59/0x310
[  465.096385][T13454]  ? trace_call_bpf+0xbf/0x6b0
[  465.101199][T13454]  kmem_cache_alloc+0x56/0x2f0
[  465.105995][T13454]  ? skb_clone+0x1e7/0x370
[  465.110460][T13454]  skb_clone+0x1e7/0x370
[  465.114727][T13454]  bpf_clone_redirect+0xa9/0x3c0
[  465.119689][T13454]  bpf_prog_2658eab614f371a8+0x56/0x5b
[  465.125162][T13454]  ? perf_trace_preemptirq_template+0x268/0x320
[  465.131426][T13454]  ? irqentry_enter+0x33/0x50
[  465.136122][T13454]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  465.142129][T13454]  ? lock_chain_count+0x20/0x20
[  465.147001][T13454]  ? rcu_is_watching+0x11/0xa0
[  465.151808][T13454]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  465.157978][T13454]  ? lockdep_hardirqs_on+0x94/0x140
[  465.163198][T13454]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  465.169372][T13454]  ? 0xffffffffa00024d8
[  465.173536][T13454]  bpf_test_run+0x4c1/0x830
[  465.178074][T13454]  ? convert___skb_to_skb+0x580/0x580
[  465.183469][T13454]  ? eth_get_headlen+0x200/0x200
[  465.188423][T13454]  ? __build_skb+0x257/0x3c0
[  465.193045][T13454]  ? convert___skb_to_skb+0x3d/0x580
[  465.198356][T13454]  bpf_prog_test_run_skb+0xaa6/0x12a0
[  465.203765][T13454]  ? cpu_online+0xa0/0xa0
[  465.208119][T13454]  bpf_prog_test_run+0x31e/0x390
[  465.213082][T13454]  __sys_bpf+0x62b/0x780
[  465.217439][T13454]  ? bpf_link_show_fdinfo+0x380/0x380
[  465.222848][T13454]  ? lock_chain_count+0x20/0x20
[  465.227742][T13454]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  465.233909][T13454]  __x64_sys_bpf+0x78/0x90
[  465.238392][T13454]  do_syscall_64+0x4c/0xa0
[  465.242842][T13454]  ? clear_bhb_loop+0x60/0xb0
[  465.247540][T13454]  ? clear_bhb_loop+0x60/0xb0
[  465.252242][T13454]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  465.258178][T13454] RIP: 0033:0x7fd73339aeb9
[  465.262622][T13454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  465.282350][T13454] RSP: 002b:00007fd734265028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  465.290805][T13454] RAX: ffffffffffffffda RBX: 00007fd733615fa0 RCX: 00007fd73339aeb9
[  465.298809][T13454] RDX: 0000000000000050 RSI: 0000200000001300 RDI: 000000000000000a
[  465.306829][T13454] RBP: 00007fd734265090 R08: 0000000000000000 R09: 0000000000000000
[  465.314849][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  465.322840][T13454] R13: 00007fd733616038 R14: 00007fd733615fa0 R15: 00007fff22b06878
[  465.330842][T13454]  </TASK>
[  465.359905][T13457] netlink: 'syz.2.2769': attribute type 21 has an invalid length.
[  467.926363][T13463] netlink: 'syz.3.2770': attribute type 10 has an invalid length.
[  467.934869][T13466] netlink: 'syz.4.2772': attribute type 2 has an invalid length.
[  467.948264][T13466] netlink: 'syz.4.2772': attribute type 8 has an invalid length.
[  467.966235][T13466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2772'.
[  468.298888][T13476] netlink: 'syz.3.2776': attribute type 3 has an invalid length.
[  468.329818][T13476] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.2776'.
[  470.476371][T13494] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2780'.
[  471.686611][T13541] netlink: 'syz.0.2793': attribute type 3 has an invalid length.
[  471.716488][T13541] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2793'.
[  474.154383][T13569] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2797'.
[  474.355269][T13576] device syzkaller0 entered promiscuous mode
[  476.486060][T13610] device lo entered promiscuous mode
[  476.753216][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2811'.
[  476.805988][T13624] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2812'.
[  477.909319][T13652] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2820'.
[  478.011584][T13658] netlink: 'syz.4.2822': attribute type 10 has an invalid length.
[  478.031023][T13658] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2822'.
[  478.173966][T13659] device syzkaller0 entered promiscuous mode
[  483.870438][T13677] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2826'.
[  484.858155][ T4285] Bluetooth: hci4: ISO packet for unknown connection handle 3852
[  487.610863][T13710] delete_channel: no stack
[  487.864267][T13739] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.2846'.
[  487.881961][T13737] device syzkaller0 entered promiscuous mode
[  487.892160][T13741] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2845'.
[  487.902254][T13739] netlink: zone id is out of range
[  487.907969][T13739] netlink: zone id is out of range
[  487.955231][T13739] netlink: zone id is out of range
[  488.006352][T13739] netlink: get zone limit has 8 unknown bytes
[  492.851721][T13747] netlink: 'syz.1.2846': attribute type 10 has an invalid length.
[  492.863089][T13747] team0: Device ipvlan1 failed to register rx_handler
[  492.900706][T13787] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2859'.
[  493.578551][T13801] netlink: 'syz.0.2865': attribute type 29 has an invalid length.
[  493.608506][T13801] netlink: 'syz.0.2865': attribute type 29 has an invalid length.
[  493.639943][T13805] netlink: 'syz.0.2865': attribute type 29 has an invalid length.
[  493.694613][T13806] netlink: 'syz.0.2865': attribute type 29 has an invalid length.
[  493.734197][T13801] netlink: 'syz.0.2865': attribute type 29 has an invalid length.
[  493.832867][T13801] netlink: 'syz.0.2865': attribute type 29 has an invalid length.
[  496.921495][T13830] netlink: 'syz.3.2870': attribute type 10 has an invalid length.
[  496.935210][T13830] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.950935][T13830] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.967650][T13830] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.004467][T13830] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  497.055467][T13838] netlink: 'syz.4.2871': attribute type 21 has an invalid length.
[  497.068433][T13838] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2871'.
[  497.181626][T13853] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2874'.
[  497.926974][T13882] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2884'.
[  498.470269][T13880] netlink: 'syz.1.2882': attribute type 41 has an invalid length.
[  498.482808][T13880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2882'.
[  498.533295][T13880] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  501.045086][T13897] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2887'.
[  501.054728][T13899] netlink: 'syz.4.2888': attribute type 10 has an invalid length.
[  501.108928][T13899] team0: Port device geneve1 added
[  501.237046][T13906] netlink: 'syz.0.2890': attribute type 21 has an invalid length.
[  501.254024][T13906] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2890'.
[  501.339328][T13915] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2893'.
[  501.371189][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  501.377612][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  501.408131][T13918] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2893'.
[  502.644719][T13938] netlink: 'syz.2.2897': attribute type 10 has an invalid length.
[  502.653798][T13938] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2897'.
[  504.404982][T13954] netlink: 'syz.0.2902': attribute type 10 has an invalid length.
[  504.495191][T13954] team0: Port device geneve1 added
[  504.950666][T13979] delete_channel: no stack
[  505.056935][T13976] device syzkaller0 entered promiscuous mode
[  505.125470][T13987] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2912'.
[  507.659991][T13989] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2912'.
[  507.722847][T13995] device syzkaller0 entered promiscuous mode
[  507.732892][T14001] netlink: 'syz.3.2915': attribute type 41 has an invalid length.
[  507.742083][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2915'.
[  510.998529][T14017] netlink: 'syz.2.2920': attribute type 29 has an invalid length.
[  512.460127][T14017] netlink: 'syz.2.2920': attribute type 29 has an invalid length.
[  512.839509][T14026] device syzkaller0 entered promiscuous mode
[  515.645423][T14060] netlink: 'syz.4.2931': attribute type 21 has an invalid length.
[  515.659076][T14060] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2931'.
[  515.781443][T14072] netlink: 'syz.0.2933': attribute type 21 has an invalid length.
[  515.797553][T14072] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2933'.
[  516.699089][T14102] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2942'.
[  516.977749][T14109] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2944'.
[  517.084216][T14112] netlink: 'syz.3.2946': attribute type 21 has an invalid length.
[  517.144484][T14112] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2946'.
[  517.274010][T14116] netlink: 'syz.4.2948': attribute type 3 has an invalid length.
[  517.284470][T14116] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2948'.
[  517.347352][T14104] device syzkaller0 entered promiscuous mode
[  517.477565][T14114] device syzkaller0 entered promiscuous mode
[  517.565228][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  517.574416][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  517.582286][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  517.590315][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  517.598106][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  517.608582][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  519.701527][ T4281] Bluetooth: hci3: command 0x0409 tx timeout
[  520.677818][T14125] netlink: 'syz.3.2950': attribute type 21 has an invalid length.
[  520.686678][T14125] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2950'.
[  520.700882][T14129] netlink: 'syz.4.2951': attribute type 21 has an invalid length.
[  520.709117][T14129] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2951'.
[  520.744304][ T8139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.891194][ T8139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.041058][ T8139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.073019][T14134] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2952'.
[  521.250808][ T8139] bond0: (slave netdevsim0): Releasing backup interface
[  521.266760][ T8139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.302657][T14146] netlink: 'syz.2.2957': attribute type 21 has an invalid length.
[  521.310995][T14146] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2957'.
[  521.776854][ T4281] Bluetooth: hci3: command 0x041b tx timeout
[  522.104278][T14126] chnl_net:caif_netlink_parms(): no params data found
[  522.508338][T14126] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.515580][T14126] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.539764][T14126] device bridge_slave_0 entered promiscuous mode
[  522.553352][T14166] netlink: 'syz.3.2958': attribute type 10 has an invalid length.
[  522.671516][T14166] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  522.684105][T14181] netlink: 'syz.4.2961': attribute type 29 has an invalid length.
[  522.712548][T14126] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.730050][T14126] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.750242][T14126] device bridge_slave_1 entered promiscuous mode
[  522.814403][T14176] netlink: 'syz.1.2959': attribute type 21 has an invalid length.
[  522.830233][T14176] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2959'.
[  522.858266][T14181] netlink: 'syz.4.2961': attribute type 29 has an invalid length.
[  523.000840][T14189] ip6tnl0: mtu greater than device maximum
[  523.066196][T14126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  523.106733][T14126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  523.215874][T14199] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2965'.
[  523.246958][T14126] team0: Port device team_slave_0 added
[  523.300261][T14126] team0: Port device team_slave_1 added
[  523.403581][T14196] netlink: 'syz.3.2963': attribute type 21 has an invalid length.
[  523.495171][T14196] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2963'.
[  523.581422][T14126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.592148][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.666667][T14126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.679403][T14206] netlink: 'syz.1.2967': attribute type 21 has an invalid length.
[  523.690464][T14206] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2967'.
[  523.811296][T14126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.821755][T14126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.859022][ T4281] Bluetooth: hci3: command 0x040f tx timeout
[  523.901419][T14126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  524.096298][T14126] device hsr_slave_0 entered promiscuous mode
[  524.125437][T14126] device hsr_slave_1 entered promiscuous mode
[  524.149849][T14126] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  524.173103][T14126] Cannot create hsr debugfs directory
[  524.322267][T14219] netlink: 'syz.1.2971': attribute type 21 has an invalid length.
[  524.353225][T14220] netlink: 'syz.1.2971': attribute type 21 has an invalid length.
[  524.826836][T12061] wlan1: Trigger new scan to find an IBSS to join
[  525.151367][T14232] netlink: 'syz.1.2974': attribute type 39 has an invalid length.
[  525.365802][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  525.376860][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_0
[  525.404855][ T8139] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  525.422697][ T8139] batman_adv: batadv0: Removing interface: batadv_slave_1
[  525.476379][ T8139] device veth0_macvtap left promiscuous mode
[  525.831741][ T8139] team0 (unregistering): Port device geneve1 removed
[  525.938267][ T4281] Bluetooth: hci3: command 0x0419 tx timeout
[  526.653741][ T8139] team0 (unregistering): Port device team_slave_1 removed
[  526.749126][ T8139] team0 (unregistering): Port device team_slave_0 removed
[  526.865416][ T8139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.240427][ T8139] bond0 (unregistering): (slave team0): Releasing backup interface
[  527.279970][ T8139] bond0 (unregistering): Released all slaves
[  527.323283][T14243] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2977'.
[  527.421569][T14255] device syzkaller0 entered promiscuous mode
[  527.448426][T14265] netlink: 'syz.2.2979': attribute type 21 has an invalid length.
[  527.456709][T14265] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2979'.
[  529.645874][T14273] netlink: 'syz.2.2982': attribute type 21 has an invalid length.
[  529.655406][T14273] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2982'.
[  529.780709][T12061] wlan1: Trigger new scan to find an IBSS to join
[  530.232524][T14297] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2989'.
[  530.404465][T14299] netlink: 'syz.2.2991': attribute type 21 has an invalid length.
[  530.438596][T14299] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2991'.
[  530.738669][ T7965] wlan1: Creating new IBSS network, BSSID aa:74:a6:80:fc:55
[  530.817148][T14126] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  530.932420][T14321] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2995'.
[  531.027010][T14126] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  531.063746][T14126] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  531.077712][T14325] netlink: 'syz.1.2996': attribute type 29 has an invalid length.
[  531.099986][T14126] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  531.120311][T14325] netlink: 'syz.1.2996': attribute type 29 has an invalid length.
[  531.167344][T14329] netlink: 'syz.1.2996': attribute type 29 has an invalid length.
[  531.201612][T14325] netlink: 'syz.1.2996': attribute type 29 has an invalid length.
[  531.429627][T14126] 8021q: adding VLAN 0 to HW filter on device bond0
[  531.567763][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  531.617655][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  531.663995][T14126] 8021q: adding VLAN 0 to HW filter on device team0
[  531.750463][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  531.771014][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  531.813569][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state
[  531.820842][ T8148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  531.879118][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  531.930166][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  531.969196][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  531.989539][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state
[  531.996749][ T8148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.025341][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  532.045615][T14348] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3002'.
[  532.089464][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  532.144342][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  532.200204][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  532.219752][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  532.240744][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  532.256039][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  532.277028][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  532.303477][T14351] netlink: 'syz.2.3004': attribute type 21 has an invalid length.
[  532.330910][T14351] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3004'.
[  532.383226][T14126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  532.435698][T14126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  532.488373][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  532.496913][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  532.519202][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  533.677232][ T4281] Bluetooth: hci4: ISO packet for unknown connection handle 2622
[  533.933564][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  533.953339][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  534.024121][T14126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.268660][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  534.301840][ T7965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  534.440164][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  534.450165][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  534.484066][T14126] device veth0_vlan entered promiscuous mode
[  534.492542][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  534.523822][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  534.586127][T14126] device veth1_vlan entered promiscuous mode
[  534.725914][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  534.734349][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  534.751291][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  534.772448][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  534.792407][T14126] device veth0_macvtap entered promiscuous mode
[  534.826809][T14126] device veth1_macvtap entered promiscuous mode
[  534.909877][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  534.939118][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  534.960022][T14126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.992131][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  535.049160][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  535.079520][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  535.122010][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  535.188978][T14126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  535.221840][T14126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  535.282665][T14126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.337630][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  535.353895][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  535.385228][T14418] netlink: 'syz.2.3017': attribute type 10 has an invalid length.
[  535.424884][T14126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.446267][T14126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.480294][T14126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.509582][T14126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.822583][T14431] netlink: 'syz.3.3020': attribute type 21 has an invalid length.
[  535.832379][ T8139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.850812][ T8139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.886156][T14431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3020'.
[  535.908417][T14431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3020'.
[  535.957353][T14434] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.3023'.
[  535.977077][T14437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3022'.
[  536.013734][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3022'.
[  536.057497][ T8139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  536.167600][T14437] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3022'.
[  536.296111][T14442] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3022'.
[  536.369330][T14432] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3022'.
[  536.379725][T12061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  536.387875][T12061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  536.436342][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  536.912227][T14462] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.3029'.
[  537.041338][T14468] netlink: 'syz.4.3031': attribute type 21 has an invalid length.
[  537.261807][T14481] netlink: 'syz.1.3034': attribute type 3 has an invalid length.
[  537.414835][T14479] device syzkaller0 entered promiscuous mode
[  537.460067][T14487] __nla_validate_parse: 2 callbacks suppressed
[  537.460081][T14487] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3037'.
[  537.703100][T14495] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3039'.
[  539.452715][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  539.482661][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  539.496082][ T4285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  539.515396][ T4285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  539.528909][ T4285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  539.547260][ T4285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  540.707762][T14490] netlink: 'syz.1.3037': attribute type 11 has an invalid length.
[  540.715799][T14490] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3037'.
[  540.732240][T14519] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3043'.
[  540.745713][T14528] netlink: 'syz.2.3046': attribute type 21 has an invalid length.
[  540.767694][T14528] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3046'.
[  541.203809][T12063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.442991][T12063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.476026][T14561] netlink: 'syz.0.3052': attribute type 10 has an invalid length.
[  541.497406][T14561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3052'.
[  541.547738][T14561] batman_adv: batadv0: Adding interface: hsr_slave_1
[  541.588199][T14561] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  541.621775][ T4285] Bluetooth: hci1: command 0x0409 tx timeout
[  541.691117][T14561] batman_adv: batadv0: Interface activated: hsr_slave_1
[  541.750949][T14550] netlink: 'syz.0.3052': attribute type 21 has an invalid length.
[  541.762093][T14550] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3052'.
[  541.765109][T14577] cgroup: fork rejected by pids controller in /syz3
[  541.790780][T14550] netlink: 'syz.0.3052': attribute type 1 has an invalid length.
[  541.852876][T12063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.865318][T14549] delete_channel: no stack
[  541.933657][T14559] device syzkaller0 entered promiscuous mode
[  542.041463][T12063] device netdevsim0 left promiscuous mode
[  542.048602][T12063] bridge0: port 3(netdevsim0) entered disabled state
[  542.077706][T12063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  543.688916][ T4285] Bluetooth: hci1: command 0x041b tx timeout
[  544.245491][T14698] netlink: 'syz.1.3059': attribute type 1 has an invalid length.
[  544.268209][T14698] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3059'.
[  544.439626][T14708] netlink: 'syz.0.3062': attribute type 21 has an invalid length.
[  544.490356][T14708] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3062'.
[  544.927433][T14530] chnl_net:caif_netlink_parms(): no params data found
[  545.435057][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  545.447739][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  545.451652][T14737] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.3068'.
[  545.464488][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  545.474274][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  545.482259][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  545.489712][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  545.768443][ T4281] Bluetooth: hci1: command 0x040f tx timeout
[  545.822673][T14530] bridge0: port 1(bridge_slave_0) entered blocking state
[  545.833903][T14530] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.852252][T14530] device bridge_slave_0 entered promiscuous mode
[  545.942644][T14530] bridge0: port 2(bridge_slave_1) entered blocking state
[  545.959202][T14530] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.979285][T14530] device bridge_slave_1 entered promiscuous mode
[  546.117726][T14530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  546.175833][T14530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  546.287034][T14530] team0: Port device team_slave_0 added
[  546.353349][T14530] team0: Port device team_slave_1 added
[  546.415259][T14530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  546.436551][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.493776][T14530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  546.735056][T14530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  546.742497][T14530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  546.773106][T14530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  546.965387][T14530] device hsr_slave_0 entered promiscuous mode
[  546.988986][T14530] device hsr_slave_1 entered promiscuous mode
[  546.999027][T14530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  547.018073][T14530] Cannot create hsr debugfs directory
[  547.069926][T12063] device bridge_slave_1 left promiscuous mode
[  547.076212][T12063] bridge0: port 2(bridge_slave_1) entered disabled state
[  547.216874][T12063] bridge0: port 1(bridge_slave_0) entered disabled state
[  547.529979][ T4281] Bluetooth: hci2: command 0x0409 tx timeout
[  547.850483][ T4281] Bluetooth: hci1: command 0x0419 tx timeout
[  548.047859][T14780] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.3074'.
[  549.610928][ T4281] Bluetooth: hci2: command 0x041b tx timeout
[  549.890182][T12063] team0 (unregistering): Port device geneve1 removed
[  550.096140][T12063] team0 (unregistering): Port device team_slave_1 removed
[  550.136549][T12063] team0 (unregistering): Port device team_slave_0 removed
[  550.414089][T12063] team0 (unregistering): Port device dummy0 removed
[  550.530228][T14738] chnl_net:caif_netlink_parms(): no params data found
[  550.552413][T14784] netlink: 'syz.1.3075': attribute type 21 has an invalid length.
[  550.567455][T14784] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3075'.
[  550.904190][T14738] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.924473][T14738] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.935993][T14738] device bridge_slave_0 entered promiscuous mode
[  550.961722][T14738] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.974225][T14738] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.004316][T14738] device bridge_slave_1 entered promiscuous mode
[  551.067266][T14738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  551.109788][T14738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  551.266239][T14738] team0: Port device team_slave_0 added
[  551.346600][T14738] team0: Port device team_slave_1 added
[  551.503677][T14738] batman_adv: batadv0: Adding interface: batadv_slave_0
[  551.516825][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.562789][T14738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  551.598561][T14738] batman_adv: batadv0: Adding interface: batadv_slave_1
[  551.605591][T14738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  551.662248][T14738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  551.704568][ T4281] Bluetooth: hci2: command 0x040f tx timeout
[  552.193218][T14738] device hsr_slave_0 entered promiscuous mode
[  552.206547][T14738] device hsr_slave_1 entered promiscuous mode
[  552.224915][T14738] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  552.242902][T14738] Cannot create hsr debugfs directory
[  552.270375][T12063] bond0: (slave netdevsim0): Releasing backup interface
[  552.370328][T14828] sock: sock_set_timeout: `syz.0.3083' (pid 14828) tries to set negative timeout
[  552.894222][T14530] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  552.957023][T14530] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  553.026634][T14530] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  553.084024][T14530] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  553.151377][T12063] device 0 left promiscuous mode
[  553.234586][T12063] device 1 left promiscuous mode
[  553.332933][T12063] device 2 left promiscuous mode
[  553.457384][T14834] device syzkaller0 entered promiscuous mode
[  553.464833][T12063] device 3 left promiscuous mode
[  553.481026][T14847] netlink: 'syz.0.3086': attribute type 21 has an invalid length.
[  553.490479][T14847] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3086'.
[  553.774608][ T4281] Bluetooth: hci2: command 0x0419 tx timeout
[  555.422767][T12063] device 4 left promiscuous mode
[  555.542872][T14530] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.555035][T12063] device 5 left promiscuous mode
[  555.622409][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  555.635977][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  555.679276][T14530] 8021q: adding VLAN 0 to HW filter on device team0
[  555.704002][T12063] device 6 left promiscuous mode
[  555.773149][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  555.820721][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  555.842642][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  555.849924][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  555.864555][T12063] device 7 left promiscuous mode
[  555.896591][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  555.905716][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  555.915259][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  555.924543][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  555.931727][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  555.941898][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  555.978249][T12063] device 8 left promiscuous mode
[  556.012749][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  556.026786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  556.049227][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  556.086468][T12063] device 9 left promiscuous mode
[  556.109551][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  556.121205][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  556.141733][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  556.170402][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  556.191373][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  556.212481][T14530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  556.232784][T14530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  556.252655][T12063] device 10 left promiscuous mode
[  556.280878][T14738] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  556.292191][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  556.321121][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  556.390407][T14738] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  556.428435][T12063] device 11 left promiscuous mode
[  556.459598][T14738] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  556.486481][T14738] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  556.541658][T12063] device 12 left promiscuous mode
[  556.759887][T12063] device 13 left promiscuous mode
[  557.486721][T14924] device syzkaller0 entered promiscuous mode
[  557.543562][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  557.560264][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  559.620592][T14939] netlink: 'syz.0.3099': attribute type 21 has an invalid length.
[  559.634974][T14939] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3099'.
[  559.714379][T14530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.987473][T14738] 8021q: adding VLAN 0 to HW filter on device bond0
[  560.096896][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  560.139169][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  560.211491][T14738] 8021q: adding VLAN 0 to HW filter on device team0
[  560.260867][T14964] netlink: 'syz.1.3101': attribute type 3 has an invalid length.
[  560.332923][T14964] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3101'.
[  560.605466][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  560.639247][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  560.688086][T12061] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.695322][T12061] bridge0: port 1(bridge_slave_0) entered forwarding state
[  560.734283][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  560.778022][T12064] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  560.853736][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  560.873221][T12061] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  560.913519][T12061] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.920769][T12061] bridge0: port 2(bridge_slave_1) entered forwarding state
[  561.074254][ T8154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  561.125604][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  561.286854][T12063] bond0: (slave wlan1): Releasing backup interface
[  561.326097][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  561.346682][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  561.393452][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  561.791697][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  561.806999][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  561.824432][T14738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  561.843518][T14738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  561.865619][T14997] netlink: 'syz.2.3109': attribute type 10 has an invalid length.
[  561.882680][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  561.891762][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  561.919719][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  561.967973][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  562.005084][T12063] device hsr_slave_0 left promiscuous mode
[  562.125812][T12063] device bridge_slave_1 left promiscuous mode
[  562.134949][T12063] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.178483][T12063] device bridge_slave_0 left promiscuous mode
[  562.200771][T12063] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.254202][T12063] device veth1_vlan left promiscuous mode
[  562.811192][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  562.817701][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  562.902775][T15025] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3113'.
[  563.206603][T12063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  563.249108][T12063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  563.517967][T12063] bond0 (unregistering): Released all slaves
[  563.609323][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  563.620271][T15004] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3110'.
[  563.631161][T15007] netlink: 'syz.2.3111': attribute type 21 has an invalid length.
[  563.645495][T15007] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3111'.
[  563.735315][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  563.760567][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  563.781283][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  563.795769][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  563.856615][T14530] device veth0_vlan entered promiscuous mode
[  563.879196][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  563.896528][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  563.917860][T14530] device veth1_vlan entered promiscuous mode
[  563.948731][T15036] netlink: 15007 bytes leftover after parsing attributes in process `syz.0.3115'.
[  564.026643][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  564.071944][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  564.129400][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  564.169423][T12064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  564.203745][T14530] device veth0_macvtap entered promiscuous mode
[  564.260096][T14530] device veth1_macvtap entered promiscuous mode
[  564.299557][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  564.337037][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  564.347736][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  564.386485][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  564.441361][T15048] netlink: 'syz.0.3118': attribute type 11 has an invalid length.
[  564.466667][T14530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  564.488834][T15048] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3118'.
[  564.499349][T14530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.519748][T14530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  564.536459][T14530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.548451][T15054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.575507][T14530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  564.590539][T14738] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.601622][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  564.612164][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  564.684915][T14530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  564.702609][T14530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.723084][T14530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  564.735895][T14530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  564.759077][T14530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  564.779494][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  564.805144][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  564.936144][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  564.955473][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  565.002426][T14530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  565.026940][T14530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  565.036543][T14530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  565.045924][T14530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  565.137814][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  565.160248][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  565.172237][T14738] device veth0_vlan entered promiscuous mode
[  565.316243][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  565.324873][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  565.345863][T14738] device veth1_vlan entered promiscuous mode
[  565.452083][T15059] syzkaller0: delete flow: hash 571508020 index 1
[  567.275192][T15066] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3124'.
[  567.284912][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  567.296152][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  567.305237][T15068] netlink: 'syz.2.3125': attribute type 21 has an invalid length.
[  567.316931][T15068] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3125'.
[  567.380091][ T8148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.412119][ T8148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.420164][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  567.431140][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  567.467206][T14738] device veth0_macvtap entered promiscuous mode
[  567.476486][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  567.485420][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  567.499475][T14738] device veth1_macvtap entered promiscuous mode
[  567.513741][T12063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  567.537111][T12063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  567.566781][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.598118][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.612123][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.626416][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.676738][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  567.691118][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.712720][T14738] batman_adv: batadv0: Interface activated: batadv_slave_0
[  567.732035][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  567.742447][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  567.759516][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  567.818273][ T8148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  567.860370][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.884184][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  567.914247][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  567.976024][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.032843][T14738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.084816][T14738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.142865][T14738] batman_adv: batadv0: Interface activated: batadv_slave_1
[  568.180377][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  568.202991][T12063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  568.281453][T14738] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.300920][T14738] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.338201][T14738] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.367344][T14738] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.701953][T12063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.745725][T12063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.779567][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  568.827967][T12064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.847731][T12064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.891175][ T8147] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  569.225410][T15097] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3065'.
[  569.575546][T15097] device hsr_slave_1 left promiscuous mode
[  569.604844][T15104] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3136'.
[  569.795628][T15107] netlink: 'syz.4.3135': attribute type 10 has an invalid length.
[  569.956359][T15107] team0: Port device wlan1 added
[  569.997134][T15109] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3137'.
[  570.618684][T15118] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3140'.
[  571.156732][T15128] netlink: 'syz.2.3144': attribute type 10 has an invalid length.
[  571.874412][T15120] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.3142'.
[  571.997144][T15142] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3148'.
[  572.406436][T15150] netlink: 'syz.3.3152': attribute type 10 has an invalid length.
[  572.434626][T15150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3152'.
[  572.484096][T15150] bridge0: port 3(veth0_vlan) entered blocking state
[  572.509516][T15150] bridge0: port 3(veth0_vlan) entered disabled state
[  572.605876][T15150] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  572.632146][T15151] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.3152'.
[  572.856420][T15157] netlink: 'syz.1.3153': attribute type 10 has an invalid length.
[  572.954001][T15157] team0: Port device wlan1 added
[  573.183267][T15162] device syzkaller0 entered promiscuous mode
[  573.744229][T15183] netlink: 'syz.4.3161': attribute type 3 has an invalid length.
[  573.772988][T15183] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3161'.
[  575.943282][T15186] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.3162'.
[  575.953041][T15192] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3165'.
[  576.168536][T15200] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3167'.
[  576.216923][T15200] netlink: 'syz.3.3167': attribute type 39 has an invalid length.
[  576.492244][T15212] netlink: 'syz.2.3170': attribute type 10 has an invalid length.
[  576.570962][T15212] team0: Port device wlan1 added
[  576.858720][T15223] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3174'.
[  577.021303][T15226] netlink: 'syz.3.3174': attribute type 1 has an invalid length.
[  577.056413][T15226] netlink: 'syz.3.3174': attribute type 4 has an invalid length.
[  577.108324][T15226] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3174'.
[  577.193316][T15232] netlink: 'syz.4.3176': attribute type 21 has an invalid length.
[  577.214876][T15232] netlink: 'syz.4.3176': attribute type 3 has an invalid length.
[  577.239552][T15232] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3176'.
[  577.313215][T15229] netlink: 'syz.3.3174': attribute type 1 has an invalid length.
[  577.375802][T15229] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3174'.
[  577.518199][T15237] syzkaller1: tun_chr_ioctl cmd 1074025677
[  577.524285][T15237] syzkaller1: linktype set to 823
[  577.757941][T15241] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3178'.
[  578.702629][T15251] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3190'.
[  578.771212][T15249] device syzkaller0 entered promiscuous mode
[  578.837148][T15251] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  578.868548][T15251] CPU: 0 PID: 15251 Comm: syz.2.3190 Not tainted syzkaller #0
[  578.876180][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  578.886289][T15251] Call Trace:
[  578.889606][T15251]  <TASK>
[  578.892572][T15251]  dump_stack_lvl+0x188/0x24e
[  578.897313][T15251]  ? show_regs_print_info+0x12/0x12
[  578.902576][T15251]  ? load_image+0x400/0x400
[  578.907141][T15251]  sysfs_warn_dup+0x8a/0xa0
[  578.911733][T15251]  sysfs_do_create_link_sd+0xc0/0x110
[  578.917155][T15251]  device_add+0x7ed/0xfb0
[  578.921558][T15251]  wiphy_register+0x1d9f/0x2ac0
[  578.926484][T15251]  ? cfg80211_event_work+0x40/0x40
[  578.931645][T15251]  ? minstrel_ht_alloc+0x894/0xa20
[  578.936800][T15251]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  578.942902][T15251]  ieee80211_register_hw+0x2d00/0x39f0
[  578.948387][T15251]  ? lockdep_hardirqs_on+0x94/0x140
[  578.953615][T15251]  ? ieee80211_register_hw+0xea1/0x39f0
[  578.959204][T15251]  ? ieee80211_register_hw+0xea1/0x39f0
[  578.964786][T15251]  ? ieee80211_tasklet_handler+0x20/0x20
[  578.970451][T15251]  ? memset+0x1e/0x40
[  578.974534][T15251]  ? __hrtimer_init+0x186/0x270
[  578.979462][T15251]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  578.985244][T15251]  hwsim_new_radio_nl+0xafa/0xce0
[  578.990309][T15251]  genl_family_rcv_msg_doit+0x22a/0x330
[  578.995891][T15251]  ? end_current_label_crit_section+0x170/0x170
[  579.002164][T15251]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  579.008102][T15251]  ? bpf_lsm_capable+0x5/0x10
[  579.012806][T15251]  ? security_capable+0x85/0xb0
[  579.017687][T15251]  genl_rcv_msg+0x604/0x790
[  579.022232][T15251]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  579.027984][T15251]  ? genl_bind+0x360/0x360
[  579.032446][T15251]  ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0
[  579.038816][T15251]  netlink_rcv_skb+0x1fb/0x450
[  579.043606][T15251]  ? genl_bind+0x360/0x360
[  579.048059][T15251]  ? netlink_ack+0x1170/0x1170
[  579.052886][T15251]  ? down_read+0x1a8/0x2d0
[  579.057334][T15251]  genl_rcv+0x24/0x40
[  579.061341][T15251]  netlink_unicast+0x74d/0x8d0
[  579.066134][T15251]  netlink_sendmsg+0x8ad/0xbd0
[  579.070937][T15251]  ? netlink_getsockopt+0x550/0x550
[  579.076175][T15251]  ? aa_sock_msg_perm+0x94/0x150
[  579.081159][T15251]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  579.086478][T15251]  ? security_socket_sendmsg+0x7c/0xa0
[  579.091966][T15251]  ? netlink_getsockopt+0x550/0x550
[  579.097193][T15251]  ____sys_sendmsg+0x5be/0x970
[  579.101993][T15251]  ? __sys_sendmsg_sock+0x30/0x30
[  579.107046][T15251]  ? __import_iovec+0x315/0x500
[  579.111938][T15251]  ? import_iovec+0x6f/0xa0
[  579.116462][T15251]  ___sys_sendmsg+0x2a2/0x360
[  579.121174][T15251]  ? __sys_sendmsg+0x290/0x290
[  579.126007][T15251]  __se_sys_sendmsg+0x1bb/0x2a0
[  579.130884][T15251]  ? ct_nmi_exit+0x145/0x1c0
[  579.135515][T15251]  ? __x64_sys_sendmsg+0x80/0x80
[  579.140498][T15251]  ? lockdep_hardirqs_on+0x94/0x140
[  579.145728][T15251]  do_syscall_64+0x4c/0xa0
[  579.150169][T15251]  ? clear_bhb_loop+0x60/0xb0
[  579.154879][T15251]  ? clear_bhb_loop+0x60/0xb0
[  579.159577][T15251]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  579.165490][T15251] RIP: 0033:0x7fea25d9aeb9
[  579.169949][T15251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  579.189578][T15251] RSP: 002b:00007fea26cda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.198029][T15251] RAX: ffffffffffffffda RBX: 00007fea26015fa0 RCX: 00007fea25d9aeb9
[  579.206024][T15251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  579.214036][T15251] RBP: 00007fea25e08c1f R08: 0000000000000000 R09: 0000000000000000
[  579.222024][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.230011][T15251] R13: 00007fea26016038 R14: 00007fea26015fa0 R15: 00007ffd3c743cf8
[  579.238022][T15251]  </TASK>
[  581.399491][T15257] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3181'.
[  581.656845][T15267] validate_nla: 1 callbacks suppressed
[  581.656887][T15267] netlink: 'syz.1.3195': attribute type 21 has an invalid length.
[  581.704039][T15267] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3195'.
[  582.022113][T15282] netlink: 'syz.3.3184': attribute type 10 has an invalid length.
[  582.144558][T15282] team0: Port device wlan1 added
[  582.371931][T15286] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3191'.
[  582.719978][T15293] delete_channel: no stack
[  582.725315][T15293] delete_channel: no stack
[  582.890132][T15297] device syzkaller0 entered promiscuous mode
[  582.921005][T15305] bridge0: port 1(bridge_slave_0) entered forwarding state
[  582.958350][T15304] netlink: 'syz.2.3197': attribute type 9 has an invalid length.
[  583.014647][T15304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3197'.
[  583.064807][T15306] netlink: 'syz.2.3197': attribute type 9 has an invalid length.
[  583.087861][T15306] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3197'.
[  584.368817][T15335] sock: sock_set_timeout: `syz.3.3205' (pid 15335) tries to set negative timeout
[  585.767424][T15318] netlink: 'syz.2.3201': attribute type 21 has an invalid length.
[  585.777443][T15318] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3201'.
[  585.787499][T15321] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3202'.
[  586.081247][T15342] netlink: 'syz.2.3209': attribute type 3 has an invalid length.
[  586.096754][T15342] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3209'.
[  586.163697][T15345] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3208'.
[  586.702433][T15362] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3215'.
[  586.951795][T15372] netlink: 'syz.4.3219': attribute type 21 has an invalid length.
[  586.976095][T15372] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3219'.
[  587.462065][T15386] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3223'.
[  587.697318][T15397] netlink: 'syz.3.3226': attribute type 6 has an invalid length.
[  587.782503][T15391] netlink: 'syz.2.3225': attribute type 19 has an invalid length.
[  587.810497][T15391] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3225'.
[  588.341014][T15401] delete_channel: no stack
[  588.767583][T15422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3235'.
[  588.803469][T15422] device caif0 entered promiscuous mode
[  588.826674][T15424] netlink: 'syz.2.3234': attribute type 21 has an invalid length.
[  588.840272][T15424] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3234'.
[  589.189373][T15438] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.3239'.
[  589.549478][T15440] Ÿë
: port 1(erspan0) entered blocking state
[  589.590450][T15440] Ÿë
: port 1(erspan0) entered disabled state
[  589.709250][T15440] device erspan0 entered promiscuous mode
[  590.012702][T15450] netlink: 'syz.1.3243': attribute type 10 has an invalid length.
[  590.059011][T15450] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.3243'.
[  590.204787][T15444] device syzkaller0 entered promiscuous mode
[  593.234982][T15449] device syzkaller0 entered promiscuous mode
[  594.983237][T15475] netlink: 'syz.3.3248': attribute type 21 has an invalid length.
[  594.991308][T15475] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3248'.
[  595.371958][T15503] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  595.379511][T15503] IPv6: NLM_F_CREATE should be set when creating new route
[  595.387121][T15503] IPv6: NLM_F_CREATE should be set when creating new route
[  595.394587][T15503] IPv6: NLM_F_CREATE should be set when creating new route
[  595.696796][T15514] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3257'.
[  595.776406][T15510] delete_channel: no stack
[  596.568078][T15539] device syzkaller0 entered promiscuous mode
[  596.596718][T15541] netlink: 'syz.4.3265': attribute type 21 has an invalid length.
[  596.608963][T15541] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3265'.
[  598.815909][T15544] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3266'.
[  599.103667][T15567] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3270'.
[  599.923086][T15567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.960804][T15567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.979985][T15567] bond0 (unregistering): Released all slaves
[  599.990309][T15576] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.3275'.
[  600.519097][T15594] netlink: 'syz.3.3281': attribute type 27 has an invalid length.
[  600.532132][T15594] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  600.765424][T15601] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3283'.
[  600.877506][T15612] device syzkaller0 entered promiscuous mode
[  604.946853][T15627] device syzkaller0 entered promiscuous mode
[  604.958140][T15659] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.3298'.
[  607.612788][T15672] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3303'.
[  608.108258][T15708] device syzkaller0 entered promiscuous mode
[  608.155396][T15717] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3315'.
[  608.165524][T15715] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.3314'.
[  608.186894][T15721] netlink: 'syz.4.3315': attribute type 21 has an invalid length.
[  608.243346][T15721] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3315'.
[  610.754846][T15726] netlink: 'syz.0.3318': attribute type 21 has an invalid length.
[  610.763902][T15726] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3318'.
[  610.776896][T15730] netlink: 'syz.4.3320': attribute type 10 has an invalid length.
[  610.785070][T15730] netlink: 56823 bytes leftover after parsing attributes in process `syz.4.3320'.
[  610.802711][T15732] netlink: 'syz.2.3319': attribute type 21 has an invalid length.
[  610.811970][T15732] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3319'.
[  610.821930][T15734] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3320'.
[  611.145419][T15749] netlink: 'syz.4.3325': attribute type 3 has an invalid length.
[  611.228221][T15749] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3325'.
[  611.372105][T15760] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3327'.
[  611.564629][T15769] netlink: 'syz.3.3330': attribute type 1 has an invalid length.
[  611.889619][T15774] netlink: 'syz.1.3333': attribute type 21 has an invalid length.
[  612.128536][T15777] device syzkaller0 entered promiscuous mode
[  612.286074][T15788] netlink: 'syz.4.3335': attribute type 13 has an invalid length.
[  615.009052][T15788] erspan0: refused to change device tx_queue_len
[  615.016732][T15788] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  615.047463][T15797] netlink: 'syz.0.3337': attribute type 21 has an invalid length.
[  615.060558][T15797] __nla_validate_parse: 4 callbacks suppressed
[  615.060597][T15797] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3337'.
[  615.563211][T15811] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3341'.
[  617.343899][T15811] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  618.576133][T15834] netlink: 'syz.4.3348': attribute type 21 has an invalid length.
[  618.593979][T15834] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3348'.
[  618.848382][T15856] device vcan0 entered promiscuous mode
[  618.857067][T15856] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  619.327062][T15864] device syzkaller0 entered promiscuous mode
[  619.356469][T15853] netlink: 'syz.0.3352': attribute type 10 has an invalid length.
[  619.375278][ T4285] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  619.384081][T15853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3352'.
[  619.393594][T15881] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3358'.
[  619.436035][T15853] batman_adv: batadv0: Adding interface: vlan1
[  619.521498][T15853] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.553800][T15853] batman_adv: batadv0: Interface activated: vlan1
[  621.453821][ T4285] Bluetooth: hci4: command 0x2016 tx timeout
[  622.774679][T15897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  622.782011][T15897] IPv6: NLM_F_CREATE should be set when creating new route
[  622.789444][T15897] IPv6: NLM_F_CREATE should be set when creating new route
[  622.796701][T15897] IPv6: NLM_F_CREATE should be set when creating new route
[  622.843711][T15896] netlink: 'syz.1.3365': attribute type 21 has an invalid length.
[  622.886024][T15896] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3365'.
[  624.250892][ T1278] ieee802154 phy0 wpan0: encryption failed: -22
[  624.257425][ T1278] ieee802154 phy1 wpan1: encryption failed: -22
[  624.631368][T15984] netlink: 'syz.1.3386': attribute type 21 has an invalid length.
[  624.645932][T15984] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3386'.
[  624.794003][T15992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3390'.
[  624.813767][T15992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3390'.
[  624.851838][T15995] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3390'.
[  624.863898][T15990] Ÿë
: port 1(gretap0) entered blocking state
[  624.872062][T15990] Ÿë
: port 1(gretap0) entered disabled state
[  624.880628][T15990] device gretap0 entered promiscuous mode
[  624.942201][T15992] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3390'.
[  624.990323][T15993] Ÿë
: port 2(veth0_to_team) entered blocking state
[  625.031539][T15993] Ÿë
: port 2(veth0_to_team) entered disabled state
[  625.073793][T15993] device veth0_to_team entered promiscuous mode
[  625.388273][T16008] netlink: 'syz.0.3394': attribute type 2 has an invalid length.
[  625.626375][T16021] FAULT_INJECTION: forcing a failure.
[  625.626375][T16021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  625.668438][T16021] CPU: 1 PID: 16021 Comm: syz.2.3398 Not tainted syzkaller #0
[  625.675983][T16021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  625.686074][T16021] Call Trace:
[  625.689379][T16021]  <TASK>
[  625.692351][T16021]  dump_stack_lvl+0x188/0x24e
[  625.697086][T16021]  ? show_regs_print_info+0x12/0x12
[  625.702332][T16021]  ? load_image+0x400/0x400
[  625.706881][T16021]  ? __lock_acquire+0x7d10/0x7d10
[  625.711971][T16021]  should_fail_ex+0x399/0x4d0
[  625.716701][T16021]  _copy_from_user+0x2c/0x170
[  625.721419][T16021]  __sys_bpf+0x2ea/0x780
[  625.725702][T16021]  ? bpf_link_show_fdinfo+0x380/0x380
[  625.731128][T16021]  ? lock_chain_count+0x20/0x20
[  625.736036][T16021]  __x64_sys_bpf+0x78/0x90
[  625.740498][T16021]  do_syscall_64+0x4c/0xa0
[  625.744953][T16021]  ? clear_bhb_loop+0x60/0xb0
[  625.749673][T16021]  ? clear_bhb_loop+0x60/0xb0
[  625.754403][T16021]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  625.760355][T16021] RIP: 0033:0x7fea25d9aeb9
[  625.764807][T16021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  625.784451][T16021] RSP: 002b:00007fea26cda028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  625.792925][T16021] RAX: ffffffffffffffda RBX: 00007fea26015fa0 RCX: 00007fea25d9aeb9
[  625.800937][T16021] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 0000000000000000
[  625.808952][T16021] RBP: 00007fea26cda090 R08: 0000000000000000 R09: 0000000000000000
[  625.816953][T16021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  625.824971][T16021] R13: 00007fea26016038 R14: 00007fea26015fa0 R15: 00007ffd3c743cf8
[  625.833002][T16021]  </TASK>
[  626.647220][T16046] netlink: 'syz.4.3404': attribute type 21 has an invalid length.
[  626.708916][T16046] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3404'.
[  626.760154][T16048] netlink: 'syz.3.3403': attribute type 3 has an invalid length.
[  626.833005][T16048] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3403'.
[  627.623591][T16062] Ÿë
: port 1(gretap0) entered blocking state
[  627.646642][T16062] Ÿë
: port 1(gretap0) entered disabled state
[  627.755322][T16062] device gretap0 entered promiscuous mode
[  627.793683][T16068] Ÿë
: port 2(veth0_to_team) entered blocking state
[  627.803827][T16068] Ÿë
: port 2(veth0_to_team) entered disabled state
[  627.889347][T16068] device veth0_to_team entered promiscuous mode
[  627.995444][T16087] netlink: 'syz.1.3416': attribute type 1 has an invalid length.
[  628.170248][T16091] netlink: 'syz.3.3418': attribute type 21 has an invalid length.
[  628.198312][T16091] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3418'.
[  628.254423][T16101] netlink: 15007 bytes leftover after parsing attributes in process `syz.2.3420'.
[  628.459366][T16104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3421'.
[  628.478423][T16104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3421'.
[  628.552279][T16105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3421'.
[  628.687689][T16116] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.3424'.
[  629.944852][    C1] 
[  629.944861][    C1] ================================
[  629.944866][    C1] WARNING: inconsistent lock state
[  629.944886][    C1] syzkaller #0 Not tainted
[  629.944896][    C1] --------------------------------
[  629.944900][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  629.944908][    C1] syz.3.3425/16123 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  629.944929][    C1] ffff88805a695ba0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0
[  629.944985][    C1] {INITIAL USE} state was registered at:
[  629.944991][    C1]   lock_acquire+0x1bb/0x4a0
[  629.945014][    C1]   _raw_spin_lock+0x2a/0x40
[  629.945041][    C1]   htab_lock_bucket+0x179/0x2f0
[  629.945058][    C1]   htab_lru_map_update_elem+0x31e/0xe80
[  629.945076][    C1]   bpf_map_update_value+0x59e/0x670
[  629.945097][    C1]   map_update_elem+0x4d7/0x680
[  629.945119][    C1]   __sys_bpf+0x4ec/0x780
[  629.945139][    C1]   __x64_sys_bpf+0x78/0x90
[  629.945160][    C1]   do_syscall_64+0x4c/0xa0
[  629.945181][    C1]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  629.945198][    C1] irq event stamp: 358
[  629.945204][    C1] hardirqs last  enabled at (357): [<ffffffff81c8e5a6>] seqcount_lockdep_reader_access+0x106/0x190
[  629.945227][    C1] hardirqs last disabled at (358): [<ffffffff8a2c27ee>] exc_debug+0x6e/0x130
[  629.945253][    C1] softirqs last  enabled at (318): [<ffffffff88684784>] netlink_insert+0x1034/0x13c0
[  629.945282][    C1] softirqs last disabled at (316): [<ffffffff8828802b>] release_sock+0x2b/0x1b0
[  629.945303][    C1] 
[  629.945303][    C1] other info that might help us debug this:
[  629.945308][    C1]  Possible unsafe locking scenario:
[  629.945308][    C1] 
[  629.945311][    C1]        CPU0
[  629.945314][    C1]        ----
[  629.945317][    C1]   lock(&htab->lockdep_key);
[  629.945327][    C1]   <Interrupt>
[  629.945330][    C1]     lock(&htab->lockdep_key);
[  629.945341][    C1] 
[  629.945341][    C1]  *** DEADLOCK ***
[  629.945341][    C1] 
[  629.945344][    C1] no locks held by syz.3.3425/16123.
[  629.945351][    C1] 
[  629.945351][    C1] stack backtrace:
[  629.945356][    C1] CPU: 1 PID: 16123 Comm: syz.3.3425 Not tainted syzkaller #0
[  629.945373][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  629.945383][    C1] Call Trace:
[  629.945388][    C1]  <#DB>
[  629.945395][    C1]  dump_stack_lvl+0x188/0x24e
[  629.945419][    C1]  ? show_regs_print_info+0x12/0x12
[  629.945456][    C1]  ? print_usage_bug+0x42a/0x690
[  629.945479][    C1]  ? verify_lock_unused+0x18/0x140
[  629.945503][    C1]  lock_acquire+0x2df/0x4a0
[  629.945532][    C1]  ? htab_lock_bucket+0x179/0x2f0
[  629.945552][    C1]  ? read_lock_is_recursive+0x10/0x10
[  629.945580][    C1]  _raw_spin_lock+0x2a/0x40
[  629.945605][    C1]  ? htab_lock_bucket+0x179/0x2f0
[  629.945623][    C1]  htab_lock_bucket+0x179/0x2f0
[  629.945644][    C1]  ? htab_lru_map_delete_node+0x630/0x630
[  629.945666][    C1]  ? htab_map_hash+0x269/0x6d0
[  629.945686][    C1]  htab_lru_map_delete_elem+0x1ad/0x780
[  629.945707][    C1]  ? bpf_overflow_handler+0xd9/0x7c0
[  629.945727][    C1]  ? htab_lru_map_update_elem+0xe80/0xe80
[  629.945769][    C1]  bpf_prog_c4ae881bb5a4a584+0x45/0x49
[  629.945787][    C1]  bpf_overflow_handler+0x522/0x7c0
[  629.945809][    C1]  ? bpf_overflow_handler+0xd9/0x7c0
[  629.945828][    C1]  ? perf_event_switch_output+0x760/0x760
[  629.945851][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  629.945879][    C1]  __perf_event_overflow+0x448/0x610
[  629.945908][    C1]  perf_bp_event+0x28c/0x330
[  629.945936][    C1]  ? perf_event_free_bpf_prog+0x110/0x110
[  629.945989][    C1]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  629.946009][    C1]  ? read_lock_is_recursive+0x10/0x10
[  629.946035][    C1]  hw_breakpoint_exceptions_notify+0x152/0x470
[  629.946061][    C1]  atomic_notifier_call_chain+0x17a/0x2b0
[  629.946079][    C1]  ? atomic_notifier_call_chain+0x2c/0x2b0
[  629.946099][    C1]  notify_die+0x141/0x1a0
[  629.946137][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  629.946163][    C1]  notify_debug+0x20/0x30
[  629.946184][    C1]  exc_debug+0xd9/0x130
[  629.946209][    C1]  asm_exc_debug+0x1a/0x40
[  629.946226][    C1] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[  629.946253][    C1] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[  629.946268][    C1] RSP: 0018:ffffc900036cf788 EFLAGS: 00050202
[  629.946283][    C1] RAX: ffffffff840ec601 RBX: 000000000000fca2 RCX: 000000000000faa2
[  629.946296][    C1] RDX: 000000000000fca2 RSI: 0000200000000340 RDI: ffffc900037f9200
[  629.946308][    C1] RBP: 0000000000000000 R08: ffffc90003808ca1 R09: 1ffff92000701194
[  629.946321][    C1] R10: dffffc0000000000 R11: fffff52000701195 R12: 00007ffffffef35e
[  629.946334][    C1] R13: 0000000000000000 R14: 0000200000000140 R15: ffffc900037f9000
[  629.946349][    C1]  ? copyin+0x51/0x120
[  629.946378][    C1]  </#DB>
[  629.946383][    C1]  <TASK>
[  629.946388][    C1]  copyin+0xe7/0x120
[  629.946414][    C1]  _copy_from_iter+0x447/0x1130
[  629.946444][    C1]  ? copyout_mc+0x110/0x110
[  629.946469][    C1]  ? do_raw_spin_unlock+0x11d/0x230
[  629.946486][    C1]  ? _raw_spin_unlock+0x24/0x40
[  629.946502][    C1]  ? find_vmap_area+0xf8/0x110
[  629.946529][    C1]  ? __check_object_size+0x500/0xa40
[  629.946550][    C1]  netlink_sendmsg+0x755/0xbd0
[  629.946579][    C1]  ? netlink_getsockopt+0x550/0x550
[  629.946605][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  629.946623][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  629.946641][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  629.946672][    C1]  ? netlink_getsockopt+0x550/0x550
[  629.946696][    C1]  ____sys_sendmsg+0x5be/0x970
[  629.946725][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  629.946752][    C1]  ? __import_iovec+0x315/0x500
[  629.946773][    C1]  ? import_iovec+0x6f/0xa0
[  629.946809][    C1]  ___sys_sendmsg+0x2a2/0x360
[  629.946838][    C1]  ? __sys_sendmsg+0x290/0x290
[  629.946887][    C1]  __se_sys_sendmsg+0x1bb/0x2a0
[  629.946915][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  629.946949][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  629.946980][    C1]  do_syscall_64+0x4c/0xa0
[  629.947003][    C1]  ? clear_bhb_loop+0x60/0xb0
[  629.947024][    C1]  ? clear_bhb_loop+0x60/0xb0
[  629.947046][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  629.947067][    C1] RIP: 0033:0x7fbb89d9aeb9
[  629.947081][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  629.947097][    C1] RSP: 002b:00007fbb8ab9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  629.947116][    C1] RAX: ffffffffffffffda RBX: 00007fbb8a015fa0 RCX: 00007fbb89d9aeb9
[  629.947130][    C1] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007
[  629.947142][    C1] RBP: 00007fbb89e08c1f R08: 0000000000000000 R09: 0000000000000000
[  629.947153][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  629.947165][    C1] R13: 00007fbb8a016038 R14: 00007fbb8a015fa0 R15: 00007fff07e3ebb8
[  629.947187][    C1]  </TASK>
[  630.635836][T16123] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3425'.