last executing test programs:

13.240294366s ago: executing program 2 (id=3484):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000030000000000000804000000000000000000000204000000000000000000000a02000000000000612e"], 0x0, 0x52}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x5, 0x0, 0x0, 0x2}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

13.210139357s ago: executing program 3 (id=3485):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000070000000300000001000085220b1f000500000001200000000000000030305f302e"], &(0x7f0000000f40)=""/4069, 0x37, 0xfe5, 0x8, 0xffffffff}, 0x28)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r2 = perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x80, 0x8, 0x4, 0xd, 0x7, 0x0, 0x7ff, 0x2000, 0xa, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x10000, 0x3c6}, 0x110200, 0x4, 0x5, 0x7, 0x4, 0x8, 0x3, 0x0, 0x6, 0x0, 0xffffffffffffffff}, r1, 0xf, r1, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000400)='\x00')
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000)
setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000000), 0x4)
recvmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000040), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000240)=""/122, 0x7a}, {&(0x7f00000002c0)=""/160, 0xa0}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/185, 0xb9}], 0x5, &(0x7f00000006c0)}, 0x1)
setsockopt$sock_attach_bpf(r0, 0x6, 0x12, &(0x7f0000000200)=r1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071003f00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

12.890239945s ago: executing program 2 (id=3487):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8000, 0xd03d}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1000d7, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r0, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040)

12.882233425s ago: executing program 3 (id=3488):
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x27, 0x63, 0x0, &(0x7f0000000640)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r6)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x2, 0xbd05, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000000000007, 0xffffffffffffffff}, 0x828, 0x8, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x40840)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)

12.506536125s ago: executing program 1 (id=3489):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680))
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0x26, 0xa, 0x2f, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)="a538c63d6ce2e113e0f1cb8b7f6f9fcc9fafdd58b5063d513cfb7e08a8b05dd3d42740d8903883d49a41d0a31fafeb87fd0ca0a266d0bbd4008310188d6052513e152f3ba8f089d7c07b7dbc1314bf588b74c6e71b0cad609d0395f214edaa894823c3ce661fc0d488ba75ee631272a931d8d25632829154d45cfd3d1f228e2fb753e8688cbbc64ec2feaff5073601984973ee60b5a6fc1002a77989eb26bdb8b750934edc92389ebf523c2f4ecaea67e480c2935813718a9d6d05bf119f9c4ece37bf8f76"}, {&(0x7f0000000700)="9b5a0a65ba0e7fb226a01e2f27c2c2b4bf0babfcc9b8d4ca0ec7e13b107f8f1c190b76aa1421ed7d90f958edd6f0f6e84560f434196a507e16670365654583609ac99b2de5f48206e82c962f7324400806d6667e5321f22dc2d37d2315c0a512d2f4ab04b56f8b7470b3e6793713f4a56b4e375077e55a2b374a4e91b1848b91ab9fefeea652dc99d38bfc2654d95caa7d8f10d62b03eace7a2210e0c68e024a4dd5830580b27696f409328d78f458d304a93c1e00b6f352a3a71042dcba57e3e4e71420e96f10894daa9889c99fb53d3aa7eaf351"}, {&(0x7f0000000180)="47f458"}], 0x3}, 0x20008040)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x28, 0x1, 0xd4, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{}, &(0x7f0000000240), 0x0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380)}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x400, 0xfffb, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r6, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0xfffffffffffffcf8)
recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0)
recvmsg(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xed, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x7}, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x454}, 0x10001, 0x7ff, 0x0, 0x7, 0x0, 0x4, 0x81}, 0x0, 0x1, 0xffffffffffffffff, 0x0)

12.391011531s ago: executing program 2 (id=3491):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000017c0), 0x4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000001800)=r1, 0x4) (async)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000003c0)={0x20000000000002bd, &(0x7f0000000000)=[{0x1c, 0x0, 0x1, 0x200}, {0x28, 0x0, 0x3}, {0xb1, 0x3, 0x3f, 0x6}, {0x5, 0xfc, 0x5, 0xffffffff}]})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x140, 0x0)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000380)) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001840)=r1) (async)
recvmsg$unix(r3, &(0x7f0000001780)={&(0x7f00000000c0), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000240)=""/209, 0xd1}, {&(0x7f0000000400)=""/155, 0x9b}, {&(0x7f00000004c0)=""/155, 0x9b}, {&(0x7f0000000580)=""/45, 0x2d}, {&(0x7f00000005c0)=""/57, 0x39}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x9, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2)

12.363681853s ago: executing program 3 (id=3492):
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xb, 0x43a1bd76, 0x7, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r3=>0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r3}, &(0x7f0000000300), &(0x7f0000000400)=r2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000080)=r2}, 0x20)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', r2}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000340)='%pI4   \x00'}, 0x20)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, r1, 0x0, 0x4, 0x3}, 0x50)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000500000000000000000000000000000000000000f616ff5a3ac27b4428c23fc309befd185c8f9569029d4a5f9d8634bed9b39893c1a12cc7aff8263773de18d1dce549febad287384c5eb9b642970fab77d360311b0e4408f629bc15e03bdb33affb67b01ea7ff682ea52d883ec0d4c7a6d4c871693ae62c554e47970ff1c8568661afe5ffd07ee9fd3962b543307afed288f987e1fc4f2b39e542be06bde929a73fdf15680b2e84da5482bde028"], 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000800ff07000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000002f000000b70900000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x9, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1a}], &(0x7f0000000040)='GPL\x00', 0x0, 0xd9, &(0x7f0000000080)=""/217, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x9, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000680)=[r2, r4, r5, r6, r7, r8], &(0x7f00000006c0)=[{0x4, 0x2, 0xd}], 0x10, 0x9}, 0x94)
r9 = socket$kcm(0x1e, 0x4, 0x0)
r10 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r11 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xfdef)
recvmsg(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)=""/4098, 0x1002}], 0x1}, 0x10182)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r12 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r12, 0x0, 0xfdef)
recvmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021)

9.79006896s ago: executing program 1 (id=3494):
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r1 = socket$kcm(0xf, 0x0, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000440), 0x4)
close(r1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xea, 0x25, 0x0, 0x8, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x803}, 0x6029, 0x8, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x1, 0x202, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5c31, 0x411, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x102c, 0x0, 0x80, 0x3, 0x0, 0x499, 0x1}, 0x0, 0x1000000, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3}, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0xa, 0x7, 0x0)

9.727693393s ago: executing program 3 (id=3495):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'hugetlb'}, {0x2d, 'rdma'}, {0x2b, 'io'}, {0x2b, 'hugetlb'}]}, 0x29) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)={[{0x2b, 'memory'}, {0x2d, 'cpu'}, {0x2d, 'hugetlb'}, {0x2d, 'rdma'}, {0x2b, 'io'}, {0x2b, 'hugetlb'}]}, 0x29)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000640)={0x4, 0x80, 0x0, 0x0, 0x6, 0x7, 0x0, 0x3, 0x43040, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x91, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x80, 0xffffffffffffffff, 0x6, 0x9, 0xdf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0xe, 0x0, 0x0, 0x0, 0x5, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xe, 0x10}, 0x226, 0xb, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000440)={&(0x7f0000001340)=@generic={0xa, "bce0ef3acde511cbe2efd41f801395bb044eb7638d52b1bbdea1bd6ddebca76f96ad3f485d6a867c5bf9375a8d7e036c5e3f4e0d83bf88f03d5e15edfc0324c18fede90f5dacc58ea489a7910bd88ff665f0d2166f451975cc56735d184bbfc7038d062305ed31d61821695b394a32bb26eb4e41ae5805f3cc62966265bb"}, 0x80, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x10}, 0x0)
socket$kcm(0x23, 0x5, 0x0) (async)
r5 = socket$kcm(0x23, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) (async)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
socket$kcm(0x2, 0x1, 0x84) (async)
r8 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x84, &(0x7f0000000000), 0x90)
sendmsg$inet(r8, 0x0, 0x40)
recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x200, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x200, 0x2}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) (async)
sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe50e})
write$cgroup_subtree(r9, &(0x7f00000001c0)=ANY=[], 0xe)

9.157891903s ago: executing program 0 (id=3497):
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b3059", 0x59}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r1, 0x0, 0x80)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c40)={0xffffffffffffffff, 0xe0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4f, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000940)}}, 0x10)
syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000080)={0x7, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x4}, 0x0, 0xffffffffffffffdf, 0xffffffffffffffff, 0x0)
sendmsg$sock(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x0, 0x3, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}}}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000003c00)="3380f50cee1d5ecd81ad6ac0a45ffdfe1ba9f2af02bcead2751163d3b50d95c3186d56068984785635b9493418fb12bfc4f2a7595cfd1d20edb85a676f391b65e2c7f964f966cc8f631721651c4bbca69b607d76e0c90e2486791bcc21c5dfda3e5118091760455f954e884f8e927d080c720841120476ece9cd041ba781f42db66265d7925307b6a294fc0beeedd009b485c57efc8f23f820ab320ba9071fbe0b3fe6ab", 0xa4}], 0x2}, 0x10000001)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, 0x0, 0x0)
recvmsg$unix(r4, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=<r6=>0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
socket$kcm(0x29, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x2000000, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000980)=ANY=[@ANYRES16=r6, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRESOCT=r8, @ANYRESHEX=r1, @ANYBLOB="90bccf104322877e924bbda3a87f3a3852250e47a4a36c999c9dbb4a4de1f3445667c790a45412d521437baccc4e9dec2fef0d3ee0c744ea36b4b04c978c6c6c86495ac7cc5fbc4a9837442d9d87500ef4036ec05212d1bf1ac21ba7b00b5c68ae370a65fe41c356fd2c73b7dab238a2cee6fd0712aa941af02f2eee9e31e5b9307503a30231db691e5bcb8e793d933ab8d8b3ae1cbf613e5504e6f03876f9d3641ecb2bbba7406a983d041db4497a03c7f2efb2e12e920ce29408"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff)
openat$cgroup(r7, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)

8.760119874s ago: executing program 1 (id=3498):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x3}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [<r1=>0xffffffffffffffff]}}], 0x10}, 0x40010040)
r2 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000900)=r1, 0x4) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xe5, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x306, 0x0, 0x0, 0x0, 0x87911b8}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffff8, 0xb5, &(0x7f0000000200)=""/181, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x3, 0xd, 0xd9}, 0x10, r3, 0x0, 0x7, 0x0, &(0x7f00000007c0)=[{0x3, 0x3, 0x6, 0xa}, {0x2, 0x1, 0x10, 0xa}, {0x4, 0x4, 0xf, 0x5}, {0x4, 0x1, 0x1, 0x6}, {0x1, 0x4, 0x2, 0x9}, {0x4, 0x1, 0x6, 0x9}, {0x5, 0x3, 0x7, 0xc}], 0x10, 0xe62}, 0x94) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0)
close(r4) (async)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000020000006111500000000000180000000000000400000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90)

8.65529231s ago: executing program 0 (id=3499):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0)
close(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa000000000000791010000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvtap0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080))
socket$kcm(0x2, 0x922000000001, 0x106)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00', 0x1000})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x42001, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x2, @perf_bp={0x0}, 0x0, 0x4, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x203}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0x18, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trwr'], 0xa)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r3, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894a490fb1e"}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50)
socket$kcm(0x11, 0x3, 0x300)
r6 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080))

4.577923196s ago: executing program 0 (id=3500):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
gettid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc4fea534d284fe21, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10)
syz_clone(0x4000800, &(0x7f0000000140)="f13f9f64d886fbf110e731dee97e8f59ead623b66b3054043d636ee3fc21b328", 0x20, &(0x7f0000000040), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
mkdir(0x0, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000087b8ae8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0xe}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0)

3.9586158s ago: executing program 1 (id=3501):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000c452444803182db12c523c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f", 0x13}], 0x1}, 0x0) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xffffffffffffff7e)

3.841340416s ago: executing program 2 (id=3502):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xe1, 0x8, 0x7, 0x0, 0x81, 0x10020, 0x1f, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xd0, 0x0, @perf_config_ext={0x6, 0x3}, 0x800, 0x6, 0x340000, 0x1, 0x1, 0x5, 0x3, 0x0, 0x5, 0x0, 0x729d}, 0xffffffffffffffff, 0x5, r1, 0x8)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x34a, 0xe633}, 0x0, 0x40080000001, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7ffffdfe}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
write$cgroup_int(r1, &(0x7f0000000040)=0x80000002, 0x12)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x100002, 0x0)

3.75019925s ago: executing program 1 (id=3503):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000"], 0x48)
syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x0, 0x1, 0xffffffd7, 0x30822, r0, 0x2, '\x00', 0x0, r1, 0x0, 0x4, 0x5, 0x0, @void, @value, @value=r3}, 0x50)
syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

3.74874037s ago: executing program 0 (id=3504):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2000600000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000001c0), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
close(r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r2, 0xa, 0x2028}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x18000000000002a0, 0xa3, 0x0, &(0x7f0000000940)="d23dcc69b39dd4a578fb6e98b41ec1e2e601e08250298c01784738ef54c9cf634f19f4190debc0e80dee9e45a4659584e78dd58b71d71e6c720d2ca18ded1607ac4b5082760e7f0cd1368d235f1f8620622f22cff4130d21ef804b680634e14bdb6d07b9dd88b2714a5252ae175d9fef16744c2187c40b9bf29a910400022c10eacd0415145d2cd36a15a78b845df658ba8100"/163, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x1d)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8927, &(0x7f0000000080))

3.641441707s ago: executing program 3 (id=3505):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'batadv0\x00', @random='\x00\x00\x00\x00\x00 '})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6f, 0x9, 0x0, 0xfe, 0x0, 0x0, 0xc8490, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x2, @perf_config_ext={0x1000, 0x2}, 0x1168a4, 0x8001, 0x0, 0x1, 0x7e, 0x72, 0x14d2, 0x0, 0xfffffffe, 0x0, 0x7}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r3 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r3, r0, 0x0, 0xfffffffffffffd98, 0xfffffffffffffffe}, 0x30)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x6, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r9 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}], 0x1}, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x10, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300004a000000850000006900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4)
socket$kcm(0x2, 0x2, 0x73)
r11 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff)

3.583465519s ago: executing program 2 (id=3506):
r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
r1 = socket$kcm(0xf, 0x0, 0x2)
setsockopt$sock_attach_bpf(r1, 0x1, 0x23, &(0x7f0000000440), 0x4)
close(r1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xea, 0x25, 0x0, 0x8, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x803}, 0x6029, 0x8, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0x3, r0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
socketpair(0x21, 0x1, 0x202, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x5c31, 0x411, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x102c, 0x0, 0x80, 0x3, 0x0, 0x499, 0x1}, 0x0, 0x1000000, 0xffffffffffffffff, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96')
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3}, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x106)
socket$kcm(0xa, 0x7, 0x0)

513.628533ms ago: executing program 0 (id=3507):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x1, 0x2, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x86e)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

329.716533ms ago: executing program 1 (id=3508):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xb}, 0x806, 0x0, 0x0, 0x8, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000068a1f396850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r5, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x9a, 0x7}, 0x8000, 0x82, 0xffffff81, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0xa011, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
close(r9)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYRES8=r9, @ANYBLOB="3eca", @ANYRES8=r11], 0x9a)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x7, 0x66, &(0x7f00000002c0)=""/102, 0x40f00, 0x10, '\x00', r7, 0x25, r12, 0x8, &(0x7f0000000500)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x1, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000580)=[{0x4, 0x4, 0x9, 0x7}, {0x1, 0x3, 0xf, 0x6}, {0x0, 0x3, 0x8, 0xb19885cccfce7b91}, {0x5, 0x4, 0xa, 0x8}, {0x4, 0x5, 0x0, 0x8}, {0x2, 0x3, 0x2, 0xb}, {0x3, 0x1, 0x2, 0x2}], 0x10, 0x1e8}, 0x94)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r13, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888fb", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x29, 0x2, 0x4, &(0x7f00000006c0))

143.294292ms ago: executing program 2 (id=3509):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b7030000240000008500"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x1, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x4000003, 0xffffffffffffffff, 0x8)
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"})
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0)
ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000500))
socket$kcm(0xa, 0x7, 0x88)
close(0x3)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38)

10.03674ms ago: executing program 0 (id=3510):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2000600000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000001c0), 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
r5 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040)
close(r5)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r2, 0xa, 0x2028}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x18000000000002a0, 0xa3, 0x0, &(0x7f0000000940)="d23dcc69b39dd4a578fb6e98b41ec1e2e601e08250298c01784738ef54c9cf634f19f4190debc0e80dee9e45a4659584e78dd58b71d71e6c720d2ca18ded1607ac4b5082760e7f0cd1368d235f1f8620622f22cff4130d21ef804b680634e14bdb6d07b9dd88b2714a5252ae175d9fef16744c2187c40b9bf29a910400022c10eacd0415145d2cd36a15a78b845df658ba8100"/163, 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x1d)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8927, &(0x7f0000000080))

0s ago: executing program 3 (id=3511):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x12, 0x82, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r1}, 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f0000000500), 0x0}, 0x20)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x8001, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f0000000040), 0x4)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)
r7 = socket$kcm(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0xd, 0xa}, {0xfffffbfd, 0x4, 0x10406, 0x3}]}, 0x94)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={r10, 0x20, &(0x7f0000001700)={&(0x7f0000001500)=""/217, 0xd9, 0x0, &(0x7f0000001600)=""/237, 0xed}}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4)
sendmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100201, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 623.767448][T13779] Total swap = 124996kB
[  623.784335][T13779] 2097051 pages RAM
[  623.788223][T13779] 0 pages HighMem/MovableOnly
[  623.819145][T13779] 416927 pages reserved
[  623.823466][T13779] 0 pages cma reserved
[  624.062469][T13801] netlink: 'syz.2.2187': attribute type 6 has an invalid length.
[  624.677941][T13816] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2190'.
[  624.765894][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  624.772539][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  625.038447][T13819] netlink: 'syz.0.2191': attribute type 29 has an invalid length.
[  625.093232][T13819] netlink: 'syz.0.2191': attribute type 29 has an invalid length.
[  625.116303][T13821] netlink: 'syz.0.2191': attribute type 29 has an invalid length.
[  625.287181][T13825] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.2192'.
[  625.298765][T13825] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.2192'.
[  625.511300][T13835] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2195'.
[  625.586821][T13824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2192'.
[  626.733321][T13863] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2202'.
[  627.616963][T13875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2208'.
[  627.639985][T13875] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2208'.
[  628.328155][T13898] netlink: 'syz.1.2213': attribute type 10 has an invalid length.
[  628.397168][T13898] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2213'.
[  628.644044][T13902] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.2214'.
[  628.835872][T13908] netlink: 'syz.2.2217': attribute type 4 has an invalid length.
[  628.908960][T13908] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2217'.
[  631.052084][T13943] delete_channel: no stack
[  631.797239][ T5775] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4
[  634.725639][T13963] netlink: 'syz.0.2232': attribute type 10 has an invalid length.
[  634.753556][T13963] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2232'.
[  634.974870][T13974] netlink: 'syz.0.2235': attribute type 4 has an invalid length.
[  635.009796][T13974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2235'.
[  635.034545][T13976] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2236'.
[  635.462397][T13983] netlink: 'syz.3.2237': attribute type 29 has an invalid length.
[  635.475043][T13974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  635.951237][T13996] FAULT_INJECTION: forcing a failure.
[  635.951237][T13996] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  635.962632][T13994] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2239'.
[  635.986292][T13996] CPU: 1 PID: 13996 Comm: syz.1.2240 Not tainted syzkaller #0
[  635.993850][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  636.003952][T13996] Call Trace:
[  636.007282][T13996]  <TASK>
[  636.010252][T13996]  dump_stack_lvl+0x18c/0x250
[  636.014987][T13996]  ? show_regs_print_info+0x20/0x20
[  636.020237][T13996]  ? load_image+0x420/0x420
[  636.024796][T13996]  ? __lock_acquire+0x7d40/0x7d40
[  636.029908][T13996]  should_fail_ex+0x39d/0x4d0
[  636.034649][T13996]  _copy_from_user+0x2f/0xe0
[  636.039295][T13996]  __copy_msghdr+0x3bb/0x580
[  636.043945][T13996]  ___sys_sendmsg+0x214/0x360
[  636.048717][T13996]  ? __sys_sendmsg+0x2a0/0x2a0
[  636.053586][T13996]  __se_sys_sendmsg+0x1c2/0x2b0
[  636.058509][T13996]  ? __x64_sys_sendmsg+0x80/0x80
[  636.063518][T13996]  ? syscall_enter_from_user_mode+0x2e/0x80
[  636.069474][T13996]  do_syscall_64+0x55/0xa0
[  636.073931][T13996]  ? clear_bhb_loop+0x40/0x90
[  636.078653][T13996]  ? clear_bhb_loop+0x40/0x90
[  636.083378][T13996]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  636.089313][T13996] RIP: 0033:0x7f49fa99c819
[  636.093768][T13996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.113513][T13996] RSP: 002b:00007f49fb771028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  636.121980][T13996] RAX: ffffffffffffffda RBX: 00007f49fac16090 RCX: 00007f49fa99c819
[  636.129991][T13996] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 000000000000000a
[  636.138003][T13996] RBP: 00007f49fb771090 R08: 0000000000000000 R09: 0000000000000000
[  636.146015][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  636.154033][T13996] R13: 00007f49fac16128 R14: 00007f49fac16090 R15: 00007ffe3b438fd8
[  636.162069][T13996]  </TASK>
[  638.284585][T13983] netlink: 'syz.3.2237': attribute type 29 has an invalid length.
[  638.292833][T13994] : renamed from veth0_to_bond (while UP)
[  638.517104][T14015] netlink: 'syz.2.2245': attribute type 39 has an invalid length.
[  638.897501][T14013] netlink: 'syz.3.2243': attribute type 10 has an invalid length.
[  638.984491][T14013] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.2243'.
[  639.381114][T14008] netlink: 'syz.0.2242': attribute type 1 has an invalid length.
[  639.419248][T14008] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2242'.
[  639.452864][T14017] netlink: 'syz.0.2242': attribute type 4 has an invalid length.
[  639.471313][T14017] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2242'.
[  639.689027][ T5775] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4
[  643.006105][T14060] netlink: 'syz.3.2255': attribute type 39 has an invalid length.
[  643.267150][T14069] netlink: 'syz.2.2257': attribute type 10 has an invalid length.
[  643.289871][T14069] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.2257'.
[  643.510709][T14079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2261'.
[  644.126935][T14094] netlink: 'syz.2.2264': attribute type 12 has an invalid length.
[  644.188826][T14094] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.2264'.
[  644.340122][T14083] netlink: 'syz.1.2262': attribute type 1 has an invalid length.
[  644.357755][T14083] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2262'.
[  644.405303][T14083] netlink: 'syz.1.2262': attribute type 4 has an invalid length.
[  644.409528][T14101] netlink: 'syz.3.2266': attribute type 3 has an invalid length.
[  644.422936][T14083] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2262'.
[  644.447498][T14101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2266'.
[  644.473037][T14102] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2267'.
[  644.493585][T14102] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  644.504568][T14102] CPU: 0 PID: 14102 Comm: syz.2.2267 Not tainted syzkaller #0
[  644.512083][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  644.522151][T14102] Call Trace:
[  644.525543][T14102]  <TASK>
[  644.528485][T14102]  dump_stack_lvl+0x18c/0x250
[  644.533186][T14102]  ? show_regs_print_info+0x20/0x20
[  644.538571][T14102]  ? load_image+0x420/0x420
[  644.543112][T14102]  sysfs_warn_dup+0x8e/0xa0
[  644.547621][T14102]  sysfs_do_create_link_sd+0xc0/0x110
[  644.552996][T14102]  device_add_class_symlinks+0x1cf/0x240
[  644.559183][T14102]  device_add+0x507/0xc20
[  644.563564][T14102]  wiphy_register+0x1dad/0x2ae0
[  644.568448][T14102]  ? cfg80211_event_work+0x40/0x40
[  644.573585][T14102]  ? minstrel_ht_alloc+0x88a/0x990
[  644.578720][T14102]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  644.584836][T14102]  ieee80211_register_hw+0x3464/0x4250
[  644.590422][T14102]  ? ieee80211_tasklet_handler+0x20/0x20
[  644.596180][T14102]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  644.602090][T14102]  ? __debug_object_init+0xec/0x450
[  644.607318][T14102]  ? __asan_memset+0x22/0x40
[  644.611918][T14102]  ? __hrtimer_init+0x186/0x270
[  644.616878][T14102]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  644.622810][T14102]  ? mac80211_hwsim_free+0x220/0x220
[  644.628105][T14102]  ? rcu_is_watching+0x15/0xb0
[  644.632879][T14102]  ? kstrndup+0xbd/0x140
[  644.637143][T14102]  hwsim_new_radio_nl+0xdc9/0x1a90
[  644.642264][T14102]  ? __nla_validate+0x50/0x50
[  644.646955][T14102]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  644.653383][T14102]  ? __nla_parse+0x40/0x50
[  644.657805][T14102]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  644.664162][T14102]  genl_family_rcv_msg_doit+0x211/0x310
[  644.669998][T14102]  ? end_current_label_crit_section+0x170/0x170
[  644.676273][T14102]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  644.682187][T14102]  ? bpf_lsm_capable+0x9/0x10
[  644.686900][T14102]  ? security_capable+0x89/0xb0
[  644.691770][T14102]  genl_rcv_msg+0x619/0x7a0
[  644.696310][T14102]  ? genl_bind+0x360/0x360
[  644.700790][T14102]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  644.707139][T14102]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  644.713836][T14102]  ? perf_trace_lock+0xfc/0x3b0
[  644.718719][T14102]  netlink_rcv_skb+0x241/0x4d0
[  644.723511][T14102]  ? genl_bind+0x360/0x360
[  644.727937][T14102]  ? netlink_ack+0x1180/0x1180
[  644.732751][T14102]  ? __lock_acquire+0x7d40/0x7d40
[  644.737820][T14102]  ? net_generic+0x1e/0x240
[  644.742335][T14102]  ? down_read+0x1ac/0x2e0
[  644.746756][T14102]  genl_rcv+0x28/0x40
[  644.750743][T14102]  netlink_unicast+0x751/0x8d0
[  644.755611][T14102]  netlink_sendmsg+0x8d0/0xbf0
[  644.760394][T14102]  ? netlink_getsockopt+0x590/0x590
[  644.765603][T14102]  ? aa_sock_msg_perm+0x94/0x150
[  644.770546][T14102]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  644.775839][T14102]  ? security_socket_sendmsg+0x80/0xa0
[  644.781315][T14102]  ? netlink_getsockopt+0x590/0x590
[  644.786548][T14102]  ____sys_sendmsg+0x5ba/0x960
[  644.791338][T14102]  ? __asan_memset+0x22/0x40
[  644.795999][T14102]  ? __sys_sendmsg_sock+0x30/0x30
[  644.801044][T14102]  ? __import_iovec+0x5f2/0x850
[  644.805923][T14102]  ? import_iovec+0x73/0xa0
[  644.810445][T14102]  ___sys_sendmsg+0x2a6/0x360
[  644.815132][T14102]  ? __sys_sendmsg+0x2a0/0x2a0
[  644.819920][T14102]  ? debug_mutex_init+0x38/0x70
[  644.824792][T14102]  __se_sys_sendmsg+0x1c2/0x2b0
[  644.829651][T14102]  ? __x64_sys_sendmsg+0x80/0x80
[  644.834620][T14102]  ? lockdep_hardirqs_on+0x98/0x150
[  644.839829][T14102]  do_syscall_64+0x55/0xa0
[  644.844258][T14102]  ? clear_bhb_loop+0x40/0x90
[  644.848941][T14102]  ? clear_bhb_loop+0x40/0x90
[  644.853885][T14102]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  644.859800][T14102] RIP: 0033:0x7f205e39c819
[  644.864268][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  644.883982][T14102] RSP: 002b:00007f205f177028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  644.892418][T14102] RAX: ffffffffffffffda RBX: 00007f205e615fa0 RCX: 00007f205e39c819
[  644.900396][T14102] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  644.908453][T14102] RBP: 00007f205e432c91 R08: 0000000000000000 R09: 0000000000000000
[  644.916444][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  644.924460][T14102] R13: 00007f205e616038 R14: 00007f205e615fa0 R15: 00007fffcfb08868
[  644.932447][T14102]  </TASK>
[  645.064553][ T5775] Bluetooth: hci3: Malformed LE Event: 0x1b
[  645.684931][T14129] netlink: 'syz.1.2273': attribute type 10 has an invalid length.
[  645.694112][T14129] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.2273'.
[  646.135812][T14139] netlink: 207552 bytes leftover after parsing attributes in process `syz.3.2278'.
[  646.651406][T14143] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2279'.
[  646.820119][T14144] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  646.868600][T14144] netlink: 'syz.2.2277': attribute type 4 has an invalid length.
[  649.347622][T14148] netlink: 'syz.3.2280': attribute type 3 has an invalid length.
[  649.373739][T14153] __nla_validate_parse: 2 callbacks suppressed
[  649.373759][T14153] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2281'.
[  649.389679][T14148] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2280'.
[  649.447079][ T5775] Bluetooth: hci0: Malformed LE Event: 0x1b
[  649.460714][T14153] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  649.864413][T14171] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2284'.
[  649.959331][T14174] netlink: 668 bytes leftover after parsing attributes in process `syz.0.2286'.
[  649.990021][T14174] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  650.013685][T14174] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  650.330969][T14175] delete_channel: no stack
[  650.382728][T14185] netlink: 'syz.0.2289': attribute type 27 has an invalid length.
[  650.391118][T14185] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2289'.
[  650.620371][T14191] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2291'.
[  650.810386][T14203] 
@0Ù: renamed from bond_slave_1
[  650.820903][T14201] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2295'.
[  650.851740][T14201] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  650.913621][ T5775] Bluetooth: hci2: Malformed LE Event: 0x1b
[  651.105015][T14209] syzkaller0: entered promiscuous mode
[  651.118792][T14209] syzkaller0: entered allmulticast mode
[  651.955529][T14233] netlink: 'syz.2.2306': attribute type 2 has an invalid length.
[  651.980878][T14233] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2306'.
[  652.006051][T14234] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2307'.
[  652.053285][T14234] openvswitch: netlink: Key type 29 is not supported
[  652.219958][T14230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  652.417446][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  652.427191][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  652.435837][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  652.453617][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  652.470352][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  652.477963][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  652.487185][T14240] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2309'.
[  652.714144][T14249] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  652.752097][T14249] openvswitch: netlink: Message has 1 unknown bytes.
[  653.963719][T14262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  654.130971][T14274] netlink: 'syz.2.2318': attribute type 9 has an invalid length.
[  654.139984][T14273] netlink: 'syz.2.2318': attribute type 9 has an invalid length.
[  654.322550][T14241] chnl_net:caif_netlink_parms(): no params data found
[  654.505592][T14241] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.513102][T14241] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.524186][T14241] bridge_slave_0: entered allmulticast mode
[  654.532107][T14241] bridge_slave_0: entered promiscuous mode
[  654.586149][T14241] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.598888][   T51] Bluetooth: hci4: command tx timeout
[  654.609020][T14241] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.616284][T14241] bridge_slave_1: entered allmulticast mode
[  654.647716][T14241] bridge_slave_1: entered promiscuous mode
[  654.731660][   T51] Bluetooth: hci3: Malformed LE Event: 0x1b
[  654.736891][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  654.796181][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  654.980124][T14241] team0: Port device team_slave_0 added
[  654.986589][T14290] veth0_macvtap: entered promiscuous mode
[  655.001215][T14290] veth0_macvtap: entered allmulticast mode
[  655.013624][T14297] __nla_validate_parse: 3 callbacks suppressed
[  655.013643][T14297] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2323'.
[  655.051920][T14241] team0: Port device team_slave_1 added
[  655.072065][T14297] openvswitch: netlink: Flow key attribute not present in set flow.
[  655.217107][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  655.225875][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  655.253263][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  655.267720][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  655.277837][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  655.305073][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  655.460145][T14241] hsr_slave_0: entered promiscuous mode
[  655.474709][T14241] hsr_slave_1: entered promiscuous mode
[  656.072780][T14331] netlink: 'syz.3.2332': attribute type 1 has an invalid length.
[  656.092774][T14331] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2332'.
[  656.115962][T14330] netlink: 'syz.3.2332': attribute type 1 has an invalid length.
[  656.140285][T14330] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2332'.
[  656.170227][T14333] netlink: 'syz.3.2332': attribute type 58 has an invalid length.
[  656.178714][T14333] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2332'.
[  656.655024][T14345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2335'.
[  656.691046][   T51] Bluetooth: hci4: command tx timeout
[  656.810473][T14348] netlink: 'syz.3.2335': attribute type 10 has an invalid length.
[  656.893835][T14348] veth0_vlan: left promiscuous mode
[  656.922516][T14348] veth0_vlan: entered promiscuous mode
[  656.944773][T14348] team0: Device veth0_vlan failed to register rx_handler
[  657.364855][T14369] FAULT_INJECTION: forcing a failure.
[  657.364855][T14369] name failslab, interval 1, probability 0, space 0, times 0
[  657.386469][T14369] CPU: 0 PID: 14369 Comm: syz.3.2340 Not tainted syzkaller #0
[  657.394016][T14369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  657.404113][T14369] Call Trace:
[  657.407432][T14369]  <TASK>
[  657.410393][T14369]  dump_stack_lvl+0x18c/0x250
[  657.415126][T14369]  ? show_regs_print_info+0x20/0x20
[  657.420378][T14369]  ? load_image+0x420/0x420
[  657.425047][T14369]  should_fail_ex+0x39d/0x4d0
[  657.429785][T14369]  should_failslab+0x9/0x20
[  657.434331][T14369]  slab_pre_alloc_hook+0x59/0x310
[  657.439407][T14369]  ? ip_setup_cork+0x22e/0x860
[  657.444206][T14369]  __kmem_cache_alloc_node+0x53/0x250
[  657.449611][T14369]  ? ip_setup_cork+0x22e/0x860
[  657.454387][T14369]  kmalloc_trace+0x2a/0xe0
[  657.458825][T14369]  ip_setup_cork+0x22e/0x860
[  657.463549][T14369]  ip_make_skb+0x157/0x440
[  657.467981][T14369]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  657.472970][T14369]  ? ip_flush_pending_frames+0x250/0x250
[  657.478716][T14369]  ? ip_route_output_flow+0x1d/0x150
[  657.484123][T14369]  udp_sendmsg+0x1ade/0x23b0
[  657.488759][T14369]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  657.493620][T14369]  ? udp_cmsg_send+0x350/0x350
[  657.498408][T14369]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  657.504404][T14369]  ? lock_chain_count+0x20/0x20
[  657.509265][T14369]  ? inet_sendmsg+0x14b/0x2f0
[  657.514052][T14369]  ? __local_bh_enable_ip+0x13a/0x1c0
[  657.519456][T14369]  ? _local_bh_enable+0xa0/0xa0
[  657.524333][T14369]  ? inet_sendmsg+0x14b/0x2f0
[  657.529062][T14369]  ? inet_sendmsg+0x14b/0x2f0
[  657.533771][T14369]  ? inet_send_prepare+0x260/0x260
[  657.538906][T14369]  ____sys_sendmsg+0x5ba/0x960
[  657.543700][T14369]  ? __sys_sendmsg_sock+0x30/0x30
[  657.548754][T14369]  ? __import_iovec+0x3fa/0x850
[  657.553632][T14369]  ? import_iovec+0x73/0xa0
[  657.558153][T14369]  ___sys_sendmsg+0x2a6/0x360
[  657.562848][T14369]  ? __sys_sendmsg+0x2a0/0x2a0
[  657.567639][T14369]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  657.573923][T14369]  __se_sys_sendmsg+0x1c2/0x2b0
[  657.578796][T14369]  ? __x64_sys_sendmsg+0x80/0x80
[  657.583764][T14369]  ? lockdep_hardirqs_on+0x98/0x150
[  657.588981][T14369]  do_syscall_64+0x55/0xa0
[  657.593427][T14369]  ? clear_bhb_loop+0x40/0x90
[  657.598117][T14369]  ? clear_bhb_loop+0x40/0x90
[  657.602810][T14369]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  657.608727][T14369] RIP: 0033:0x7f775639c819
[  657.613254][T14369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  657.632878][T14369] RSP: 002b:00007f77571b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  657.641312][T14369] RAX: ffffffffffffffda RBX: 00007f7756616090 RCX: 00007f775639c819
[  657.649297][T14369] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 000000000000000a
[  657.657281][T14369] RBP: 00007f77571b6090 R08: 0000000000000000 R09: 0000000000000000
[  657.665262][T14369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.673256][T14369] R13: 00007f7756616128 R14: 00007f7756616090 R15: 00007fffd0438298
[  657.681345][T14369]  </TASK>
[  657.964050][T14241] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  658.025655][T14241] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  658.082883][T14241] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  658.132409][T14241] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  658.202345][T11884] vlan0: left allmulticast mode
[  658.207554][T11884] veth0_vlan: left allmulticast mode
[  658.228996][T11884] vlan0: left promiscuous mode
[  658.235659][T11884] À: port 1(vlan0) entered disabled state
[  658.393891][T11884] veth1_macvtap: left promiscuous mode
[  658.401018][T11884] veth1_vlan: left allmulticast mode
[  658.407320][T11884] veth1_vlan: left promiscuous mode
[  658.424775][T11884] veth0_vlan: left promiscuous mode
[  658.759393][   T51] Bluetooth: hci4: command tx timeout
[  658.850391][T11884] geneve1 (unregistering): left promiscuous mode
[  658.858737][T11884] geneve1 (unregistering): left allmulticast mode
[  658.873869][T11884] team0 (unregistering): Port device geneve1 removed
[  658.968489][T14402] netlink: 'syz.2.2348': attribute type 3 has an invalid length.
[  658.978333][T14402] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2348'.
[  659.087471][T11884] macvlan0 (unregistering): left promiscuous mode
[  659.095911][T11884] macvlan0 (unregistering): left allmulticast mode
[  659.104454][T11884] team0 (unregistering): Port device macvlan0 removed
[  659.316015][T11884] hsr_slave_0 (unregistering): left promiscuous mode
[  659.325901][T11884] team0 (unregistering): Port device hsr_slave_0 removed
[  659.495984][T11884] team_slave_1 (unregistering): left promiscuous mode
[  659.508276][T11884] team_slave_1 (unregistering): left allmulticast mode
[  659.519194][T11884] team0 (unregistering): Port device team_slave_1 removed
[  659.588463][T11884] team_slave_0 (unregistering): left promiscuous mode
[  659.600859][T11884] team_slave_0 (unregistering): left allmulticast mode
[  659.614851][T11884] team0 (unregistering): Port device team_slave_0 removed
[  660.057567][T14387] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2344'.
[  660.425247][T14241] 8021q: adding VLAN 0 to HW filter on device bond0
[  660.504474][T14241] 8021q: adding VLAN 0 to HW filter on device team0
[  660.563904][T11857] bridge0: port 1(bridge_slave_0) entered blocking state
[  660.572022][T11857] bridge0: port 1(bridge_slave_0) entered forwarding state
[  660.606930][T14420] FAULT_INJECTION: forcing a failure.
[  660.606930][T14420] name failslab, interval 1, probability 0, space 0, times 0
[  660.650814][T11857] bridge0: port 2(bridge_slave_1) entered blocking state
[  660.658072][T11857] bridge0: port 2(bridge_slave_1) entered forwarding state
[  660.671866][T14420] CPU: 0 PID: 14420 Comm: syz.1.2351 Not tainted syzkaller #0
[  660.679493][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  660.689590][T14420] Call Trace:
[  660.692911][T14420]  <TASK>
[  660.695885][T14420]  dump_stack_lvl+0x18c/0x250
[  660.700622][T14420]  ? show_regs_print_info+0x20/0x20
[  660.705886][T14420]  ? load_image+0x420/0x420
[  660.710436][T14420]  ? lockdep_hardirqs_on+0x98/0x150
[  660.715756][T14420]  should_fail_ex+0x39d/0x4d0
[  660.720503][T14420]  should_failslab+0x9/0x20
[  660.725061][T14420]  slab_pre_alloc_hook+0x59/0x310
[  660.730141][T14420]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  660.736183][T14420]  kmem_cache_alloc_node+0x60/0x320
[  660.741435][T14420]  ? __alloc_skb+0x103/0x2c0
[  660.746052][T14420]  __alloc_skb+0x103/0x2c0
[  660.750490][T14420]  alloc_skb_with_frags+0xca/0x7b0
[  660.755639][T14420]  sock_alloc_send_pskb+0x883/0x9a0
[  660.760873][T14420]  ? sock_kzfree_s+0x50/0x50
[  660.765571][T14420]  ? __stack_depot_save+0x1f/0x630
[  660.770712][T14420]  ? kasan_set_track+0x5f/0x70
[  660.775487][T14420]  ? kasan_set_track+0x4e/0x70
[  660.780267][T14420]  ? __kasan_kmalloc+0x8f/0xa0
[  660.785041][T14420]  ? ip_setup_cork+0x22e/0x860
[  660.789925][T14420]  __ip_append_data+0x2ac1/0x3d40
[  660.794995][T14420]  ? lock_chain_count+0x20/0x20
[  660.799864][T14420]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  660.804740][T14420]  ? lockdep_hardirqs_on+0x98/0x150
[  660.809954][T14420]  ? ip_setup_cork+0x860/0x860
[  660.814739][T14420]  ip_make_skb+0x22b/0x440
[  660.819169][T14420]  ? lock_chain_count+0x20/0x20
[  660.824031][T14420]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  660.828894][T14420]  ? ip_flush_pending_frames+0x250/0x250
[  660.834554][T14420]  udp_sendmsg+0x1ade/0x23b0
[  660.839172][T14420]  ? ip_skb_dst_mtu+0x9c0/0x9c0
[  660.844034][T14420]  ? udp_cmsg_send+0x350/0x350
[  660.848855][T14420]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  660.854911][T14420]  ? lock_chain_count+0x20/0x20
[  660.859774][T14420]  ? inet_sendmsg+0x14b/0x2f0
[  660.864476][T14420]  ? __local_bh_enable_ip+0x13a/0x1c0
[  660.869861][T14420]  ? _local_bh_enable+0xa0/0xa0
[  660.874734][T14420]  ? inet_sendmsg+0x14b/0x2f0
[  660.879432][T14420]  ? inet_sendmsg+0x14b/0x2f0
[  660.884125][T14420]  ? inet_send_prepare+0x260/0x260
[  660.889253][T14420]  ____sys_sendmsg+0x5ba/0x960
[  660.894027][T14420]  ? __lock_acquire+0x7d40/0x7d40
[  660.899069][T14420]  ? __sys_sendmsg_sock+0x30/0x30
[  660.904187][T14420]  ? __import_iovec+0x3fa/0x850
[  660.909164][T14420]  ? import_iovec+0x73/0xa0
[  660.913702][T14420]  ___sys_sendmsg+0x2a6/0x360
[  660.918492][T14420]  ? __sys_sendmsg+0x2a0/0x2a0
[  660.923382][T14420]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  660.929913][T14420]  __se_sys_sendmsg+0x1c2/0x2b0
[  660.934788][T14420]  ? __x64_sys_sendmsg+0x80/0x80
[  660.939754][T14420]  ? lockdep_hardirqs_on+0x98/0x150
[  660.944995][T14420]  do_syscall_64+0x55/0xa0
[  660.949449][T14420]  ? clear_bhb_loop+0x40/0x90
[  660.954242][T14420]  ? clear_bhb_loop+0x40/0x90
[  660.958946][T14420]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  660.964866][T14420] RIP: 0033:0x7f49fa99c819
[  660.969302][T14420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  660.988931][T14420] RSP: 002b:00007f49fb771028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  660.997707][T14420] RAX: ffffffffffffffda RBX: 00007f49fac16090 RCX: 00007f49fa99c819
[  661.005715][T14420] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 000000000000000a
[  661.013702][T14420] RBP: 00007f49fb771090 R08: 0000000000000000 R09: 0000000000000000
[  661.021686][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.029848][T14420] R13: 00007f49fac16128 R14: 00007f49fac16090 R15: 00007ffe3b438fd8
[  661.037866][T14420]  </TASK>
[  661.076369][T14241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  661.080969][   T51] Bluetooth: hci4: command tx timeout
[  661.150065][T14241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  661.506586][T14443] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2355'.
[  661.566239][   T51] Bluetooth: hci3: Malformed LE Event: 0x1b
[  661.735679][T14453] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2358'.
[  661.883358][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  662.735625][T14241] veth0_vlan: entered promiscuous mode
[  662.822702][T14241] veth1_vlan: entered promiscuous mode
[  662.927176][T14241] veth0_macvtap: entered promiscuous mode
[  662.963489][T14241] veth1_macvtap: entered promiscuous mode
[  663.006380][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  663.044691][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.059810][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  663.071380][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  663.083620][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  663.110381][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  663.148077][T14474] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2360'.
[  663.203281][T14241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  663.248659][T14241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  663.257556][T14474] openvswitch: netlink: Flow key attribute not present in set flow.
[  663.282686][T14241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  663.294210][T14241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  663.324296][T14477] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2361'.
[  663.619810][T11884] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  663.627708][T11884] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  663.729084][T11394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  663.742730][T11394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.958754][T14554] netlink: 'syz.3.2374': attribute type 10 has an invalid length.
[  666.966704][T14554] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2374'.
[  667.142849][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  667.152248][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  667.162682][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  667.171249][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  667.180043][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  667.187729][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  667.572957][T14561] chnl_net:caif_netlink_parms(): no params data found
[  667.689516][T14561] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.696876][T14561] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.705095][T14561] bridge_slave_0: entered allmulticast mode
[  667.713067][T14561] bridge_slave_0: entered promiscuous mode
[  667.723873][T14561] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.731554][T14561] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.739165][T14561] bridge_slave_1: entered allmulticast mode
[  667.747177][T14561] bridge_slave_1: entered promiscuous mode
[  667.802872][T14561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.823297][T14561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.891495][T14561] team0: Port device team_slave_0 added
[  667.907043][T14561] team0: Port device team_slave_1 added
[  667.960164][T14561] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.967580][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.000379][T14561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  668.021369][T14561] batman_adv: batadv0: Adding interface: batadv_slave_1
[  668.033600][T14561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  668.065177][T14561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  669.494049][T14561] hsr_slave_0: entered promiscuous mode
[  669.537939][T14561] hsr_slave_1: entered promiscuous mode
[  669.559321][T14561] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  669.578697][T14561] Cannot create hsr debugfs directory
[  670.191103][T14561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.315078][T14561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  670.559204][T14561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.481084][   T51] Bluetooth: hci0: command tx timeout
[  672.518188][T14561] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.720278][T14597] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.2383'.
[  672.940344][T14561] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  673.559088][   T51] Bluetooth: hci0: command tx timeout
[  675.158406][T14608] netlink: 'syz.2.2385': attribute type 10 has an invalid length.
[  675.188833][T14608] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2385'.
[  675.389124][T14561] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  675.423810][T14619] netlink: 'syz.3.2387': attribute type 25 has an invalid length.
[  675.444257][T14619] netlink: 'syz.3.2387': attribute type 28 has an invalid length.
[  675.512252][T14561] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  675.554309][T14561] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  675.641365][   T51] Bluetooth: hci0: command tx timeout
[  676.021753][T14561] 8021q: adding VLAN 0 to HW filter on device bond0
[  676.072387][T14561] 8021q: adding VLAN 0 to HW filter on device team0
[  676.245321][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  676.252538][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  676.277043][T11876] bridge0: port 2(bridge_slave_1) entered blocking state
[  676.284298][T11876] bridge0: port 2(bridge_slave_1) entered forwarding state
[  677.014953][T11858] tipc: Subscription rejected, illegal request
[  677.215315][T14561] 8021q: adding VLAN 0 to HW filter on device batadv0
[  677.507854][   T51] Bluetooth: hci2: Malformed LE Event: 0x1b
[  677.516020][T14561] veth0_vlan: entered promiscuous mode
[  677.681259][T14561] veth1_vlan: entered promiscuous mode
[  677.728742][   T51] Bluetooth: hci0: command tx timeout
[  677.816805][T14672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  678.030323][T14561] veth0_macvtap: entered promiscuous mode
[  678.070907][T14561] veth1_macvtap: entered promiscuous mode
[  678.316035][T14561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.339647][T14561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.358706][T14561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  678.369527][T14561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.397113][T14561] batman_adv: batadv0: Interface activated: batadv_slave_0
[  678.572423][T14679] dvmrp1: tun_chr_ioctl cmd 1074812118
[  678.641296][T14561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.682807][T14561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.702911][T14561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  678.724269][T14561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  678.746380][T14561] batman_adv: batadv0: Interface activated: batadv_slave_1
[  678.785130][T14561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  678.808643][T14561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  678.823073][T14561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  678.832330][T14561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  678.874985][T11857] hsr_slave_0: left promiscuous mode
[  678.885841][T11857] hsr_slave_1: left promiscuous mode
[  678.895819][T11857] hsr0: left allmulticast mode
[  678.915869][T11857] bridge0: port 3(hsr0) entered disabled state
[  678.941484][T11857] bridge_slave_1: left allmulticast mode
[  678.947222][T11857] bridge_slave_1: left promiscuous mode
[  678.960933][T11857] bridge0: port 2(bridge_slave_1) entered disabled state
[  678.983672][T11857] bridge_slave_0: left allmulticast mode
[  679.001316][T11857] bridge_slave_0: left promiscuous mode
[  679.007109][T11857] bridge0: port 1(bridge_slave_0) entered disabled state
[  679.052728][T11857] veth1_vlan: left promiscuous mode
[  679.354842][T11857] team0 (unregistering): Port device geneve1 removed
[  680.329895][T11857] team0 (unregistering): Port device team_slave_1 removed
[  682.063948][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.119515][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.210951][T11884] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.228340][   T51] Bluetooth: hci2: Malformed LE Event: 0x1b
[  682.241399][T11884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.491155][T14741] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.2420'.
[  682.595980][T14741] netlink: 'syz.0.2420': attribute type 9 has an invalid length.
[  682.658695][T14741] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2420'.
[  683.939801][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  683.950143][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  683.968266][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  683.983251][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  684.002922][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  684.012366][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  685.599903][T14742] netlink: 'syz.1.2373': attribute type 10 has an invalid length.
[  685.607808][T14742] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2373'.
[  685.652709][T14742] hsr0: entered promiscuous mode
[  685.681425][T14742] bridge0: port 3(hsr0) entered blocking state
[  685.693073][T14742] bridge0: port 3(hsr0) entered disabled state
[  685.708961][T14742] hsr0: entered allmulticast mode
[  685.714067][T14742] hsr_slave_0: entered allmulticast mode
[  685.744685][T14742] hsr_slave_1: entered allmulticast mode
[  685.767348][T14742] bridge0: port 3(hsr0) entered blocking state
[  685.773757][T14742] bridge0: port 3(hsr0) entered forwarding state
[  685.988333][T14753] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2423'.
[  686.119173][   T51] Bluetooth: hci1: command tx timeout
[  686.132810][T11857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.208391][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  686.214903][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  686.411852][T11857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.585780][T11857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.938418][T11857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.156206][T14772] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2429'.
[  687.234009][T14750] chnl_net:caif_netlink_parms(): no params data found
[  687.603089][T14750] bridge0: port 1(bridge_slave_0) entered blocking state
[  687.618399][T14750] bridge0: port 1(bridge_slave_0) entered disabled state
[  687.646395][T14750] bridge_slave_0: entered allmulticast mode
[  687.667507][T14750] bridge_slave_0: entered promiscuous mode
[  687.765639][T14750] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.778864][T14750] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.786133][T14750] bridge_slave_1: entered allmulticast mode
[  687.823837][T14750] bridge_slave_1: entered promiscuous mode
[  687.920065][T14789] netlink: 'syz.1.2431': attribute type 10 has an invalid length.
[  687.958415][T14789] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2431'.
[  688.051569][T14750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  688.126048][T14750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  688.199149][   T51] Bluetooth: hci1: command tx timeout
[  688.263782][T14750] team0: Port device team_slave_0 added
[  688.294571][T14750] team0: Port device team_slave_1 added
[  688.346970][T14802] netlink: 'syz.0.2433': attribute type 29 has an invalid length.
[  688.356197][T14750] batman_adv: batadv0: Adding interface: batadv_slave_0
[  688.373628][T14750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.402016][T14750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.421498][T14802] netlink: 'syz.0.2433': attribute type 29 has an invalid length.
[  688.504699][T14750] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.600749][T14750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.663444][T14750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  689.016787][T14750] hsr_slave_0: entered promiscuous mode
[  689.064536][T14750] hsr_slave_1: entered promiscuous mode
[  689.087226][T14750] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  689.129100][T14750] Cannot create hsr debugfs directory
[  690.279033][   T51] Bluetooth: hci1: command tx timeout
[  690.867438][T14850] netlink: 'syz.3.2441': attribute type 10 has an invalid length.
[  690.880258][T14850] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2441'.
[  692.198061][T14750] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  692.358922][   T51] Bluetooth: hci1: command tx timeout
[  693.107003][T14750] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  693.180354][T14901] netlink: 'syz.1.2451': attribute type 10 has an invalid length.
[  693.188348][T14901] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2451'.
[  693.323846][T14750] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  693.361957][T14750] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  694.441814][T14928] netlink: 'syz.3.2457': attribute type 10 has an invalid length.
[  694.908197][T14928] bridge0: port 3(hsr0) entered disabled state
[  694.935410][T14928] hsr0: left allmulticast mode
[  694.940570][T14928] hsr_slave_0: left allmulticast mode
[  694.946024][T14928] hsr_slave_1: left allmulticast mode
[  694.953052][T14928] bridge0: port 3(hsr0) entered disabled state
[  695.016398][T14933] netlink: 'syz.3.2457': attribute type 3 has an invalid length.
[  695.035603][T14933] netlink: 16014 bytes leftover after parsing attributes in process `syz.3.2457'.
[  695.091853][T14938] netlink: 'syz.3.2457': attribute type 12 has an invalid length.
[  695.118937][T14938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2457'.
[  695.177186][T14750] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.312326][T14956] netlink: 'syz.1.2462': attribute type 10 has an invalid length.
[  696.337797][T14956] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2462'.
[  696.358951][T14956] team0: entered promiscuous mode
[  696.364106][T14956] team_slave_0: entered promiscuous mode
[  696.371434][T14956] team_slave_1: entered promiscuous mode
[  696.377588][T14956] team0: entered allmulticast mode
[  696.383608][T14956] team_slave_0: entered allmulticast mode
[  696.389808][T14956] team_slave_1: entered allmulticast mode
[  696.396540][T14956] bridge0: port 4(team0) entered blocking state
[  696.403591][T14956] bridge0: port 4(team0) entered disabled state
[  696.413511][T14956] bridge0: port 4(team0) entered blocking state
[  696.419973][T14956] bridge0: port 4(team0) entered forwarding state
[  696.437474][T14954] netlink: 'syz.3.2461': attribute type 10 has an invalid length.
[  696.446465][T14954] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2461'.
[  696.480000][T14954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  696.513095][T14954] bridge0: port 3(hsr0) entered blocking state
[  696.530018][T14954] bridge0: port 3(hsr0) entered disabled state
[  696.549006][T14954] hsr0: entered allmulticast mode
[  696.554114][T14954] hsr_slave_0: entered allmulticast mode
[  696.584669][T14954] hsr_slave_1: entered allmulticast mode
[  696.604313][T14954] bridge0: port 3(hsr0) entered blocking state
[  696.610820][T14954] bridge0: port 3(hsr0) entered forwarding state
[  696.694328][T14750] 8021q: adding VLAN 0 to HW filter on device team0
[  696.740480][T11394] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.747734][T11394] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.035681][T11874] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.042982][T11874] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.117844][T14975] netlink: 'syz.0.2466': attribute type 10 has an invalid length.
[  697.149983][T14975] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.2466'.
[  697.737108][T11857] veth1_macvtap: left promiscuous mode
[  703.153423][T11857] geneve1 (unregistering): left promiscuous mode
[  703.163796][T11857] geneve1 (unregistering): left allmulticast mode
[  703.174566][T11857] team0 (unregistering): Port device geneve1 removed
[  703.379095][T11857] team_slave_1 (unregistering): left promiscuous mode
[  703.386000][T11857] team_slave_1 (unregistering): left allmulticast mode
[  703.398359][T11857] team0 (unregistering): Port device team_slave_1 removed
[  703.444798][T11857] C (unregistering): left promiscuous mode
[  703.453124][T11857] team0 (unregistering): Port device C removed
[  703.839260][T14993] netlink: 'syz.3.2470': attribute type 39 has an invalid length.
[  703.859003][T15003] netlink: 'syz.0.2471': attribute type 10 has an invalid length.
[  703.866907][T15003] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2471'.
[  703.889599][T15003] hsr0: entered promiscuous mode
[  703.894969][T15003] bridge0: port 3(hsr0) entered blocking state
[  703.907112][T15003] bridge0: port 3(hsr0) entered disabled state
[  703.927273][T15003] hsr0: entered allmulticast mode
[  703.932828][T15003] hsr_slave_0: entered allmulticast mode
[  703.938520][T15003] hsr_slave_1: entered allmulticast mode
[  703.956383][T15003] bridge0: port 3(hsr0) entered blocking state
[  703.962825][T15003] bridge0: port 3(hsr0) entered forwarding state
[  704.139388][T15028] netlink: 'syz.0.2473': attribute type 10 has an invalid length.
[  704.180728][T15028] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.202743][T15028] bridge_slave_1: left allmulticast mode
[  704.208481][T15028] bridge_slave_1: left promiscuous mode
[  704.225186][T15028] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.240733][T15028] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  704.263091][T15032] netlink: 'syz.0.2473': attribute type 21 has an invalid length.
[  704.275763][T15032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2473'.
[  704.322762][T14750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  704.557055][T14750] veth0_vlan: entered promiscuous mode
[  704.571447][T15031] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2474'.
[  704.623112][T14750] veth1_vlan: entered promiscuous mode
[  704.798915][T14750] veth0_macvtap: entered promiscuous mode
[  704.986117][T14750] veth1_macvtap: entered promiscuous mode
[  705.012239][T15027] delete_channel: no stack
[  705.472205][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  705.528866][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.576128][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  705.598812][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.616754][T14750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  705.776922][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  705.816952][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.837520][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  705.862744][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.903208][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  705.936753][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  705.989224][T14750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  706.037808][T14750] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  706.077636][T14750] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  706.094353][T14750] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  706.112437][T14750] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  706.750659][T15058] netlink: 'syz.3.2480': attribute type 10 has an invalid length.
[  706.758877][T15058] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2480'.
[  706.834098][T15063] netlink: 'syz.0.2481': attribute type 39 has an invalid length.
[  706.964876][T15068] netlink: 151496 bytes leftover after parsing attributes in process `syz.3.2483'.
[  707.218839][T11858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.254137][T11858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.465617][T11394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.500573][T11394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.114820][T15102] netlink: 'syz.0.2490': attribute type 10 has an invalid length.
[  708.150813][T15102] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2490'.
[  708.516052][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  708.548873][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  708.558526][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  708.570514][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  708.593651][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  708.603996][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  708.972843][T15111] chnl_net:caif_netlink_parms(): no params data found
[  709.207666][T15111] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.225450][T15111] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.239838][T15111] bridge_slave_0: entered allmulticast mode
[  709.247516][T15111] bridge_slave_0: entered promiscuous mode
[  709.267865][T15111] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.286158][T15111] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.303857][T15111] bridge_slave_1: entered allmulticast mode
[  709.315371][T15111] bridge_slave_1: entered promiscuous mode
[  709.368040][T15111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.382356][T15111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  709.428011][T15111] team0: Port device team_slave_0 added
[  709.437371][T15111] team0: Port device team_slave_1 added
[  709.472438][T15111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  709.480477][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.506836][T15111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  709.520267][T15111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.527262][T15111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.554936][T15111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  710.688856][   T51] Bluetooth: hci3: command tx timeout
[  710.770162][T15111] hsr_slave_0: entered promiscuous mode
[  710.802221][T15111] hsr_slave_1: entered promiscuous mode
[  710.834733][T15111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  710.888472][T15111] Cannot create hsr debugfs directory
[  711.953021][T15111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.007789][T15138] netlink: 'syz.0.2496': attribute type 39 has an invalid length.
[  712.086810][T15111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  712.768944][   T51] Bluetooth: hci3: command tx timeout
[  714.377049][T15149] netlink: 'syz.1.2499': attribute type 10 has an invalid length.
[  714.388088][T15149] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2499'.
[  714.484248][T15111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  714.846654][   T51] Bluetooth: hci3: command tx timeout
[  714.896551][T15155] netlink: 'syz.1.2500': attribute type 10 has an invalid length.
[  714.960969][T15155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2500'.
[  715.103794][T15155] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  715.152038][T15155] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  715.189859][T15155] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  715.239221][T15111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  715.264096][T15161] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2502'.
[  715.635023][T11857] ip6gretap0 (unregistering): left allmulticast mode
[  715.663038][T11857] ip6gretap0 (unregistering): left promiscuous mode
[  715.671605][T11857] Ÿë
: port 1(ip6gretap0) entered disabled state
[  716.820019][T15179] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode
[  716.827891][T15179] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode
[  716.836700][T15182] netlink: 'syz.2.2507': attribute type 10 has an invalid length.
[  716.851790][T15182] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2507'.
[  716.865092][T15182] hsr0: entered promiscuous mode
[  716.889078][T15182] bridge0: port 3(hsr0) entered blocking state
[  716.895443][T15182] bridge0: port 3(hsr0) entered disabled state
[  716.919593][   T51] Bluetooth: hci3: command tx timeout
[  716.925429][T15182] hsr0: entered allmulticast mode
[  716.930864][T15182] hsr_slave_0: entered allmulticast mode
[  716.936628][T15182] hsr_slave_1: entered allmulticast mode
[  716.952508][T15182] bridge0: port 3(hsr0) entered blocking state
[  716.958883][T15182] bridge0: port 3(hsr0) entered forwarding state
[  717.117145][T15111] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  717.154581][T15185] netlink: 'syz.1.2508': attribute type 39 has an invalid length.
[  717.273498][T15111] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  717.304054][T15111] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  717.327816][T15111] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  717.903673][T15203] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2512'.
[  717.912063][T15204] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2512'.
[  717.923423][T15203] hsr_slave_0: left promiscuous mode
[  717.936976][T15203] hsr_slave_1: left promiscuous mode
[  718.010833][T15203] bridge0: port 3(hsr0) entered disabled state
[  718.098467][T15203] hsr0 (unregistering): left allmulticast mode
[  718.105971][T15203] bridge0: port 3(hsr0) entered disabled state
[  718.314028][T15111] 8021q: adding VLAN 0 to HW filter on device bond0
[  718.366413][T15111] 8021q: adding VLAN 0 to HW filter on device team0
[  718.430346][T11868] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.437563][T11868] bridge0: port 1(bridge_slave_0) entered forwarding state
[  718.482347][T11868] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.489582][T11868] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.280424][T15229] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2518'.
[  722.248820][T15227] netlink: 'syz.2.2517': attribute type 10 has an invalid length.
[  722.256838][T15227] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2517'.
[  722.430307][T15111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  722.623548][T15239] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2521'.
[  722.831036][T11857] hsr_slave_0: left promiscuous mode
[  722.845007][T11857] hsr_slave_1: left promiscuous mode
[  722.905245][T15243] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.2522'.
[  722.935676][T11857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.949727][T11857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.970133][T11857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.978649][T11857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.987991][T11857] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  723.004651][T11857] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  723.015859][T11857] hsr0: left allmulticast mode
[  723.031071][T11857] bridge0: port 3(hsr0) entered disabled state
[  723.068846][T11857] bridge_slave_1: left allmulticast mode
[  723.074852][T11857] bridge_slave_1: left promiscuous mode
[  723.096600][T11857] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.112382][T11857] bridge_slave_0: left allmulticast mode
[  723.118289][T11857] bridge_slave_0: left promiscuous mode
[  723.125564][T11857] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.151696][T11857] veth1_macvtap: left promiscuous mode
[  723.157820][T11857] veth1_vlan: left promiscuous mode
[  723.443928][T11857] team0 (unregistering): Port device geneve1 removed
[  727.326732][T11857] team0 (unregistering): Port device team_slave_1 removed
[  727.430226][T11857] team0 (unregistering): Port device C removed
[  727.998150][T15111] veth0_vlan: entered promiscuous mode
[  728.004238][T15258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2525'.
[  728.035444][T15269] netlink: 'syz.2.2527': attribute type 10 has an invalid length.
[  728.048710][T15269] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2527'.
[  728.113717][T15111] veth1_vlan: entered promiscuous mode
[  728.181935][T15277] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2529'.
[  728.311458][T15111] veth0_macvtap: entered promiscuous mode
[  728.334255][T15111] veth1_macvtap: entered promiscuous mode
[  728.354899][T15111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.365870][T15111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.423789][T15111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.434713][T15111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.453225][T15111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  728.492078][T15111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.509407][T15111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.521696][T15111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.532404][T15111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.543536][T15111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.554257][T15111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.566171][T15111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  728.617885][T15111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  728.648267][T15111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  728.667498][T15111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  728.691614][T15111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  728.709455][T15289] netlink: set zone limit has 8 unknown bytes
[  728.969030][T11868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  728.976986][T11868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.206669][T11858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.272638][T11858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.222385][T15304] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.2537'.
[  730.474031][T15304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2537'.
[  730.530132][T15291] netlink: 'syz.1.2534': attribute type 10 has an invalid length.
[  730.639238][T15291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2534'.
[  730.675129][T15292] netlink: 'syz.1.2534': attribute type 10 has an invalid length.
[  730.700809][T15292] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2534'.
[  731.049679][T15316] netlink: 'syz.3.2542': attribute type 10 has an invalid length.
[  731.057595][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2542'.
[  731.095659][T15316] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  731.113002][T15316] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.192596][T15316] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  731.209618][T15320] netlink: 'syz.2.2543': attribute type 10 has an invalid length.
[  732.415048][T15320] team0 (unregistering): Port device team_slave_0 removed
[  732.448130][T15320] team0 (unregistering): Port device team_slave_1 removed
[  732.498483][T15325] netlink: 'syz.0.2536': attribute type 10 has an invalid length.
[  732.515356][T15325] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2536'.
[  732.891379][T15341] netlink: 'syz.3.2546': attribute type 39 has an invalid length.
[  733.544197][T15357] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2553'.
[  733.582655][T15352] netlink: 'syz.1.2550': attribute type 1 has an invalid length.
[  733.660392][T15352] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2550'.
[  733.984090][T15350] C: renamed from team_slave_0 (while UP)
[  734.000922][T15350] netlink: 'syz.0.2551': attribute type 3 has an invalid length.
[  734.010574][T15350] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2551'.
[  734.021687][T15350] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  734.327643][T15373] netlink: 'syz.1.2557': attribute type 21 has an invalid length.
[  734.350508][T15373] netlink: 'syz.1.2557': attribute type 3 has an invalid length.
[  734.381186][T15373] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2557'.
[  734.427086][T15376] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2557'.
[  734.469735][T15372] netlink: 'syz.0.2555': attribute type 10 has an invalid length.
[  734.478064][T15372] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2555'.
[  738.339594][T15405] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2566'.
[  738.379885][T15415] netlink: 'syz.1.2567': attribute type 39 has an invalid length.
[  738.834464][T15426] netlink: 'syz.3.2570': attribute type 10 has an invalid length.
[  738.844514][T15426] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2570'.
[  738.854858][T15426] hsr0: entered promiscuous mode
[  738.898736][T15426] bridge0: port 3(hsr0) entered blocking state
[  738.906358][T15426] bridge0: port 3(hsr0) entered disabled state
[  738.915711][T15426] hsr0: entered allmulticast mode
[  738.921463][T15426] hsr_slave_0: entered allmulticast mode
[  738.927646][T15426] hsr_slave_1: entered allmulticast mode
[  738.971174][T15426] bridge0: port 3(hsr0) entered blocking state
[  738.978422][T15426] bridge0: port 3(hsr0) entered forwarding state
[  739.683182][T15439] raw_sendmsg: syz.3.2573 forgot to set AF_INET. Fix it!
[  740.145137][T15443] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2574'.
[  740.292326][T15443] veth0_macvtap: left promiscuous mode
[  740.525181][T15459] netlink: 'syz.3.2577': attribute type 41 has an invalid length.
[  740.948782][T15459] netlink: 'syz.3.2577': attribute type 41 has an invalid length.
[  741.380132][T15464] netlink: 'syz.3.2578': attribute type 21 has an invalid length.
[  742.606835][T15481] netlink: 'syz.1.2583': attribute type 39 has an invalid length.
[  742.852135][T15483] netlink: 'syz.3.2582': attribute type 10 has an invalid length.
[  742.863445][T15483] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2582'.
[  742.918328][T15488] netlink: 'syz.2.2585': attribute type 3 has an invalid length.
[  742.934097][T15488] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2585'.
[  746.306035][T15494] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2586'.
[  746.929040][T15507] netlink: 'syz.3.2590': attribute type 21 has an invalid length.
[  746.955216][T15507] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2590'.
[  747.660264][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  747.666691][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  748.469829][T15528] netlink: 'syz.0.2594': attribute type 10 has an invalid length.
[  748.611345][T15528] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2594'.
[  748.760178][T15533] netlink: 'syz.3.2597': attribute type 39 has an invalid length.
[  750.283523][T11858] wlan1: Trigger new scan to find an IBSS to join
[  751.519883][T15544] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2599'.
[  752.933225][T15566] pim6reg1: entered promiscuous mode
[  752.941277][T15566] pim6reg1: entered allmulticast mode
[  753.267871][T15577] netlink: 'syz.1.2609': attribute type 39 has an invalid length.
[  753.303642][T15573] netlink: 'syz.3.2608': attribute type 10 has an invalid length.
[  753.318908][T11876] wlan1: Trigger new scan to find an IBSS to join
[  753.326616][T15573] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2608'.
[  755.075411][T15613] netlink: 'syz.1.2617': attribute type 9 has an invalid length.
[  755.108993][T15613] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2617'.
[  755.613970][T15617] netlink: 'syz.1.2618': attribute type 10 has an invalid length.
[  755.648798][T15617] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2618'.
[  756.294806][T11394] wlan1: Creating new IBSS network, BSSID e2:7e:3f:0d:73:0e
[  757.661227][T15629] netlink: 'syz.0.2621': attribute type 39 has an invalid length.
[  758.260611][T15653] netlink: 'syz.1.2628': attribute type 21 has an invalid length.
[  758.288713][T15653] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2628'.
[  758.298083][T15653] netlink: 'syz.1.2628': attribute type 4 has an invalid length.
[  759.293423][T15680] netlink: 'syz.0.2634': attribute type 10 has an invalid length.
[  759.303768][T15680] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2634'.
[  761.704070][T15691] netlink: 'syz.3.2639': attribute type 39 has an invalid length.
[  764.506996][T15711] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2643'.
[  764.702431][T15714] netlink: 'syz.2.2645': attribute type 9 has an invalid length.
[  764.717011][T15714] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2645'.
[  765.340794][T15730] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2647'.
[  765.404775][T15737] netlink: 'syz.3.2649': attribute type 10 has an invalid length.
[  765.428855][T15737] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2649'.
[  766.279976][T15742] netlink: 'syz.2.2652': attribute type 39 has an invalid length.
[  767.717005][T15772] netlink: 'syz.1.2660': attribute type 3 has an invalid length.
[  767.734822][T15772] netlink: 'syz.1.2660': attribute type 1 has an invalid length.
[  767.759349][T15772] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2660'.
[  768.357306][T15782] netlink: 'syz.3.2663': attribute type 10 has an invalid length.
[  768.386649][T15782] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2663'.
[  768.856933][T15796] netlink: 'syz.0.2666': attribute type 39 has an invalid length.
[  771.366320][ T5775] Bluetooth: hci1: ISO packet for unknown connection handle 8
[  771.390928][T15804] netlink: 'syz.2.2668': attribute type 21 has an invalid length.
[  771.416841][T15804] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2668'.
[  771.459503][T15804] netlink: 'syz.2.2668': attribute type 4 has an invalid length.
[  771.475290][T15804] netlink: 'syz.2.2668': attribute type 5 has an invalid length.
[  771.483227][T15804] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2668'.
[  772.055761][T15824] netlink: 'syz.2.2672': attribute type 39 has an invalid length.
[  772.113434][T15830] netlink: 'syz.1.2674': attribute type 27 has an invalid length.
[  772.139357][T15830] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2674'.
[  772.480357][T15833] netlink: 'syz.3.2675': attribute type 10 has an invalid length.
[  772.533841][T15833] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2675'.
[  772.999335][T15844] netlink: 'syz.1.2674': attribute type 27 has an invalid length.
[  773.007246][T15844] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2674'.
[  773.056730][T15845] netlink: 'syz.0.2678': attribute type 39 has an invalid length.
[  775.388738][   T51] Bluetooth: hci4: command 0x0406 tx timeout
[  775.888401][T15869] netlink: 'syz.0.2683': attribute type 21 has an invalid length.
[  775.934036][T15869] netlink: 'syz.0.2683': attribute type 30 has an invalid length.
[  777.696206][T15886] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode
[  777.710227][T15892] validate_nla: 1 callbacks suppressed
[  777.710245][T15892] netlink: 'syz.0.2691': attribute type 39 has an invalid length.
[  777.740487][T15894] netlink: 'syz.3.2690': attribute type 10 has an invalid length.
[  777.751835][T15894] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2690'.
[  779.103128][T15924] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2698'.
[  779.135046][T15926] hsr0: left allmulticast mode
[  779.179073][T15926] hsr_slave_0: left allmulticast mode
[  779.185396][T15926] hsr_slave_1: left allmulticast mode
[  779.215877][T15926] bridge0: port 3(hsr0) entered disabled state
[  780.106098][T15926] bridge_slave_0: left allmulticast mode
[  780.114890][T15926] bridge_slave_0: left promiscuous mode
[  780.120772][T15926] bridge0: port 1(bridge_slave_0) entered disabled state
[  780.243444][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'.
[  780.257280][T15933] netlink: 'syz.2.2702': attribute type 39 has an invalid length.
[  780.267020][T15936] netlink: 'syz.1.2700': attribute type 10 has an invalid length.
[  780.278872][T15936] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2700'.
[  780.654347][T15953] netlink: 'syz.0.2708': attribute type 2 has an invalid length.
[  780.668681][T15953] netlink: 'syz.0.2708': attribute type 8 has an invalid length.
[  780.714414][T15953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2708'.
[  780.864954][T15958] sctp: [Deprecated]: syz.3.2710 (pid 15958) Use of struct sctp_assoc_value in delayed_ack socket option.
[  780.864954][T15958] Use struct sctp_sack_info instead
[  781.195558][T15975] netlink: 'syz.1.2714': attribute type 39 has an invalid length.
[  781.314798][T15974] netlink: 'syz.2.2712': attribute type 10 has an invalid length.
[  781.324194][T15974] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2712'.
[  782.518108][T15999] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2722'.
[  782.691099][T16009] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2726'.
[  782.801340][T16012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2726'.
[  782.925762][T16018] netlink: 'syz.2.2727': attribute type 39 has an invalid length.
[  782.961161][T16016] netlink: 'syz.0.2725': attribute type 10 has an invalid length.
[  782.969490][T16016] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2725'.
[  783.637795][T16025] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2728'.
[  784.023277][T16035] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2732'.
[  784.623624][T16037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  784.674229][T16050] netlink: 'syz.3.2736': attribute type 4 has an invalid length.
[  784.682844][T16050] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2736'.
[  784.977970][T16062] netlink: 'syz.0.2738': attribute type 10 has an invalid length.
[  785.008784][T16062] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2738'.
[  785.017815][T16063] netlink: 'syz.2.2739': attribute type 39 has an invalid length.
[  786.245897][T16083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  786.253292][T16083] IPv6: NLM_F_CREATE should be set when creating new route
[  786.260648][T16083] IPv6: NLM_F_CREATE should be set when creating new route
[  786.268018][T16083] IPv6: NLM_F_CREATE should be set when creating new route
[  787.473979][T16114] netlink: 'syz.3.2750': attribute type 10 has an invalid length.
[  787.503547][T16114] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2750'.
[  787.533460][T16118] netlink: 'syz.2.2752': attribute type 39 has an invalid length.
[  790.935474][T16133] netlink: 'syz.3.2755': attribute type 3 has an invalid length.
[  790.943614][T16133] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2755'.
[  791.009614][T16135] netlink: 'syz.1.2757': attribute type 10 has an invalid length.
[  791.018036][T16135] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.2757'.
[  791.028392][T16135] openvswitch: netlink: Flow key attr not present in new flow.
[  792.775203][T16157] netlink: 'syz.3.2763': attribute type 10 has an invalid length.
[  792.798644][T16157] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2763'.
[  793.951761][T16162] netlink: 'syz.2.2765': attribute type 39 has an invalid length.
[  795.804446][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  795.935898][T16205] netlink: 'syz.3.2775': attribute type 10 has an invalid length.
[  795.989080][T16205] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2775'.
[  798.962554][T16221] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2781'.
[  799.008716][T16221] tc_dump_action: action bad kind
[  799.013826][T16225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2780'.
[  799.059947][T16224] netlink: 'syz.0.2782': attribute type 39 has an invalid length.
[  799.285557][ T5775] Bluetooth: hci0: ISO packet for unknown connection handle 2622
[  799.343802][T16231] netlink: 'syz.2.2784': attribute type 1 has an invalid length.
[  800.873665][T16243] netlink: 'syz.0.2788': attribute type 10 has an invalid length.
[  800.955136][T16243] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2788'.
[  801.698763][T16268] netlink: 'syz.1.2793': attribute type 2 has an invalid length.
[  801.706586][T16268] netlink: 'syz.1.2793': attribute type 8 has an invalid length.
[  801.850011][T16268] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2793'.
[  802.027675][T16271] netlink: 'syz.2.2796': attribute type 39 has an invalid length.
[  802.268984][T16280] pim6reg1: tun_chr_ioctl cmd 1074025677
[  802.280294][T16280] pim6reg1: linktype set to 773
[  802.862096][T16308] netlink: 'syz.2.2804': attribute type 3 has an invalid length.
[  802.878605][T16308] netlink: 16795 bytes leftover after parsing attributes in process `syz.2.2804'.
[  803.658739][T16311] netlink: 'syz.1.2803': attribute type 10 has an invalid length.
[  803.666836][T16311] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2803'.
[  804.008385][T16320] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2808'.
[  804.121116][T16318] netlink: 'syz.2.2807': attribute type 21 has an invalid length.
[  804.217513][T16324] netlink: 'syz.3.2810': attribute type 39 has an invalid length.
[  804.923949][T16341] netlink: 'syz.0.2814': attribute type 10 has an invalid length.
[  804.933608][T16341] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2814'.
[  806.309919][T16365] netlink: 'syz.1.2821': attribute type 10 has an invalid length.
[  806.327760][T16365] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2821'.
[  806.367551][T16366] netlink: 'syz.1.2821': attribute type 28 has an invalid length.
[  806.367551][T16373] netlink: 'syz.1.2821': attribute type 3 has an invalid length.
[  806.367573][T16366] netlink: 'syz.1.2821': attribute type 3 has an invalid length.
[  806.367586][T16366] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2821'.
[  806.458495][T16373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2821'.
[  806.492595][T16370] netlink: 'syz.3.2824': attribute type 39 has an invalid length.
[  807.094560][T16391] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2829'.
[  809.091034][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  809.097412][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  809.242093][T16408] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2831'.
[  809.281157][T16388] netlink: 'syz.2.2827': attribute type 10 has an invalid length.
[  809.293535][T16408] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  809.309269][T16410] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2831'.
[  809.328749][T16388] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2827'.
[  810.378902][T16428] netlink: 'syz.1.2837': attribute type 39 has an invalid length.
[  810.749465][T16436] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2839'.
[  810.773417][T16436] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  811.071953][T16444] netlink: 'syz.3.2842': attribute type 9 has an invalid length.
[  811.094740][T16444] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2842'.
[  811.158822][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  811.506987][T16452] netlink: 'syz.0.2843': attribute type 10 has an invalid length.
[  811.516666][T16452] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2843'.
[  812.993653][T16475] netlink: 'syz.2.2853': attribute type 39 has an invalid length.
[  813.844168][T16494] netlink: 'syz.2.2857': attribute type 10 has an invalid length.
[  813.858711][T16494] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2857'.
[  816.932884][T16498] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2860'.
[  817.202040][T16503] sit0: entered allmulticast mode
[  817.248774][T16510] sit0: entered promiscuous mode
[  817.421058][T16520] netlink: 'syz.0.2865': attribute type 39 has an invalid length.
[  817.844057][T16531] netlink: 'syz.3.2868': attribute type 21 has an invalid length.
[  817.877409][T16531] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2868'.
[  818.512412][T16546] netlink: 'syz.3.2870': attribute type 10 has an invalid length.
[  818.530438][T16546] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2870'.
[  819.410058][T16559] netlink: 'syz.2.2873': attribute type 1 has an invalid length.
[  820.641395][T16579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2877'.
[  821.578782][T16592] netlink: 'syz.3.2880': attribute type 39 has an invalid length.
[  822.017848][T16607] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2883'.
[  825.479198][T16599] netlink: 'syz.2.2882': attribute type 10 has an invalid length.
[  825.487100][T16599] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2882'.
[  825.731615][T16607] netlink: 6558 bytes leftover after parsing attributes in process `syz.1.2883'.
[  827.079268][ T2131] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec
[  828.011459][T16621] netlink: 'syz.0.2884': attribute type 17 has an invalid length.
[  829.357333][T16654] netlink: 'syz.3.2893': attribute type 10 has an invalid length.
[  829.368735][T16654] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2893'.
[  830.173191][T16659] netlink: 'syz.2.2896': attribute type 39 has an invalid length.
[  830.211450][T16663] netlink: 'syz.0.2898': attribute type 1 has an invalid length.
[  830.248092][T16663] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2898'.
[  830.783870][T16684] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2904'.
[  830.887689][T16686] netlink: 'syz.2.2905': attribute type 29 has an invalid length.
[  830.929599][T16686] netlink: 'syz.2.2905': attribute type 29 has an invalid length.
[  831.690146][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  831.726440][T16694] netlink: 'syz.0.2906': attribute type 10 has an invalid length.
[  831.756752][T16694] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2906'.
[  832.184169][T16697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2907'.
[  833.265533][T16711] netlink: 'syz.0.2912': attribute type 39 has an invalid length.
[  834.675857][T16728] netlink: 'syz.0.2916': attribute type 10 has an invalid length.
[  834.787444][T16728] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2916'.
[  837.307694][T16747] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2920'.
[  837.362585][T16747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2920'.
[  837.414373][T16743] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2920'.
[  837.489037][T16743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2920'.
[  837.687047][T16753] netlink: 'syz.2.2924': attribute type 39 has an invalid length.
[  837.725645][T16758] syz.0.2923: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  837.766266][T16761] netlink: 'syz.1.2925': attribute type 2 has an invalid length.
[  837.777367][T16758] CPU: 1 PID: 16758 Comm: syz.0.2923 Not tainted syzkaller #0
[  837.778797][T16761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2925'.
[  837.784863][T16758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  837.784915][T16758] Call Trace:
[  837.784925][T16758]  <TASK>
[  837.784934][T16758]  dump_stack_lvl+0x18c/0x250
[  837.784974][T16758]  ? show_regs_print_info+0x20/0x20
[  837.785004][T16758]  ? load_image+0x420/0x420
[  837.785035][T16758]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  837.785061][T16758]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  837.785087][T16758]  warn_alloc+0x246/0x340
[  837.785118][T16758]  ? stack_trace_save+0xaa/0x100
[  837.785146][T16758]  ? zone_watermark_ok_safe+0x230/0x230
[  837.785188][T16758]  ? kasan_set_track+0x5f/0x70
[  837.785210][T16758]  ? kasan_set_track+0x4e/0x70
[  837.785230][T16758]  ? __kasan_kmalloc+0x8f/0xa0
[  837.785251][T16758]  ? xsk_init_queue+0xad/0x100
[  837.785275][T16758]  ? xsk_setsockopt+0x4e5/0x760
[  837.785299][T16758]  ? do_sock_setsockopt+0x175/0x1a0
[  837.785318][T16758]  ? __x64_sys_setsockopt+0x182/0x200
[  837.785341][T16758]  __vmalloc_node_range+0x126/0x1330
[  837.892927][T16758]  ? free_vm_area+0x50/0x50
[  837.897489][T16758]  vmalloc_user+0x74/0x80
[  837.901892][T16758]  ? xskq_create+0xbf/0x170
[  837.906430][T16758]  xskq_create+0xbf/0x170
[  837.910793][T16758]  xsk_init_queue+0xad/0x100
[  837.915427][T16758]  xsk_setsockopt+0x4e5/0x760
[  837.920152][T16758]  ? xsk_poll+0x680/0x680
[  837.924520][T16758]  ? __fget_files+0x28/0x4b0
[  837.929145][T16758]  ? __fget_files+0x28/0x4b0
[  837.933770][T16758]  ? aa_sock_opt_perm+0x74/0x100
[  837.938746][T16758]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  837.944332][T16758]  ? security_socket_setsockopt+0x7e/0xa0
[  837.950173][T16758]  ? xsk_poll+0x680/0x680
[  837.954540][T16758]  do_sock_setsockopt+0x175/0x1a0
[  837.959600][T16758]  ? __fdget+0x180/0x210
[  837.963884][T16758]  __x64_sys_setsockopt+0x182/0x200
[  837.969123][T16758]  do_syscall_64+0x55/0xa0
[  837.973569][T16758]  ? clear_bhb_loop+0x40/0x90
[  837.978281][T16758]  ? clear_bhb_loop+0x40/0x90
[  837.982995][T16758]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  837.988928][T16758] RIP: 0033:0x7f41ae39c819
[  837.993373][T16758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  838.013011][T16758] RSP: 002b:00007f41af1e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  838.021465][T16758] RAX: ffffffffffffffda RBX: 00007f41ae616090 RCX: 00007f41ae39c819
[  838.029465][T16758] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006
[  838.037551][T16758] RBP: 00007f41ae432c91 R08: 0000000000000004 R09: 0000000000000000
[  838.045553][T16758] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  838.053553][T16758] R13: 00007f41ae616128 R14: 00007f41ae616090 R15: 00007fff7ffa80f8
[  838.061571][T16758]  </TASK>
[  838.132334][T16761] netlink: 'syz.1.2925': attribute type 2 has an invalid length.
[  838.140800][T16761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2925'.
[  838.158620][T16758] Mem-Info:
[  838.161787][T16758] active_anon:8402 inactive_anon:0 isolated_anon:0
[  838.161787][T16758]  active_file:18237 inactive_file:40225 isolated_file:0
[  838.161787][T16758]  unevictable:768 dirty:16 writeback:0
[  838.161787][T16758]  slab_reclaimable:10246 slab_unreclaimable:95395
[  838.161787][T16758]  mapped:24207 shmem:1361 pagetables:533
[  838.161787][T16758]  sec_pagetables:0 bounce:0
[  838.161787][T16758]  kernel_misc_reclaimable:0
[  838.161787][T16758]  free:1342429 free_pcp:8904 free_cma:0
[  838.268921][T16758] Node 0 active_anon:33708kB inactive_anon:0kB active_file:72948kB inactive_file:160696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96828kB dirty:64kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10708kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no
[  838.328597][T16758] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  838.382475][T16758] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  838.431445][T16758] lowmem_reserve[]: 0 2521 2522 2522 2522
[  838.462405][T16758] Node 0 DMA32 free:1459360kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:33556kB inactive_anon:0kB active_file:72948kB inactive_file:159872kB unevictable:1536kB writepending:104kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:19960kB local_pcp:5236kB free_cma:0kB
[  838.494773][T16758] lowmem_reserve[]: 0 0 0 0 0
[  838.500346][T16758] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  838.528000][T16758] lowmem_reserve[]: 0 0 0 0 0
[  838.533483][T16758] Node 1 Normal free:3894996kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15236kB local_pcp:11460kB free_cma:0kB
[  838.564736][T16758] lowmem_reserve[]: 0 0 0 0 0
[  838.569617][T16758] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  838.582698][T16758] Node 0 DMA32: 1654*4kB (UME) 963*8kB (UME) 957*16kB (UME) 1045*32kB (UME) 441*64kB (UME) 260*128kB (UME) 104*256kB (UME) 61*512kB (UM) 33*1024kB (UM) 5*2048kB (UM) 301*4096kB (UM) = 1459360kB
[  838.593618][T16769] netlink: 'syz.3.2927': attribute type 21 has an invalid length.
[  838.612246][T16758] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  838.624087][T16758] Node 1 Normal: 219*4kB (UME) 51*8kB (UM) 23*16kB (UM) 197*32kB (UME) 65*64kB (UME) 15*128kB (UME) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 946*4096kB (M) = 3894996kB
[  838.643309][T16758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  838.658238][T16758] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  838.669824][T16758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  838.680429][T16758] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  838.691610][T16758] 59825 total pagecache pages
[  838.696338][T16758] 0 pages in swap cache
[  838.704245][T16758] Free swap  = 124996kB
[  838.778608][T16758] Total swap = 124996kB
[  838.782877][T16758] 2097051 pages RAM
[  838.786725][T16758] 0 pages HighMem/MovableOnly
[  838.833331][T16758] 416927 pages reserved
[  838.837657][T16758] 0 pages cma reserved
[  839.244962][T16785] netlink: 'syz.2.2930': attribute type 10 has an invalid length.
[  839.259677][T16785] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2930'.
[  839.974145][T16794] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  840.023597][T16796] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2934'.
[  840.350755][T16793] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2933'.
[  840.480653][T16793] openvswitch: netlink: Tunnel attr 2548 out of range max 16
[  840.644603][T16812] netlink: 'syz.3.2939': attribute type 39 has an invalid length.
[  841.871740][T16834] netlink: 'syz.2.2944': attribute type 10 has an invalid length.
[  841.903910][T16834] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2944'.
[  846.448394][T16865] netlink: 'syz.3.2953': attribute type 39 has an invalid length.
[  846.944580][T16884] netlink: 'syz.2.2957': attribute type 10 has an invalid length.
[  847.388778][T16889] ÿÿÿÿÿÿÿÿ: port 1(vlan0) entered blocking state
[  847.409782][T16889] ÿÿÿÿÿÿÿÿ: port 1(vlan0) entered disabled state
[  847.426115][T16889] vlan0: entered allmulticast mode
[  847.436410][T16889] veth0_vlan: entered allmulticast mode
[  847.463904][T16889] vlan0: entered promiscuous mode
[  847.493413][T16890] ÿÿÿÿÿÿÿÿ: port 1(vlan0) entered blocking state
[  847.500048][T16890] ÿÿÿÿÿÿÿÿ: port 1(vlan0) entered forwarding state
[  847.513488][T16888] netlink: 'syz.0.2958': attribute type 10 has an invalid length.
[  847.524603][T16888] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2958'.
[  849.996974][T16903] netlink: 'syz.0.2963': attribute type 2 has an invalid length.
[  850.027619][T16903] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2963'.
[  850.919935][T16926] netlink: 'syz.2.2968': attribute type 39 has an invalid length.
[  851.137473][T16936] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2970'.
[  851.219686][T16938] netlink: 'syz.3.2971': attribute type 10 has an invalid length.
[  851.227584][T16938] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2971'.
[  854.035709][T16952] netlink: 'syz.3.2973': attribute type 39 has an invalid length.
[  857.044605][T16980] netlink: 'syz.3.2981': attribute type 10 has an invalid length.
[  857.143770][T16980] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2981'.
[  859.946018][T16983] netlink: 'syz.0.2983': attribute type 10 has an invalid length.
[  859.990040][T16983] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  860.065310][T16983] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  860.107053][T16983] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  860.157539][T16983] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  860.172966][T16985] netlink: 'syz.2.2985': attribute type 39 has an invalid length.
[  864.166339][T17029] netlink: 'syz.3.2995': attribute type 10 has an invalid length.
[  864.186870][T17029] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2995'.
[  864.202875][T17031] 
€Â0: renamed from batadv_slave_1 (while UP)
[  864.545971][T17037] netlink: 'syz.1.2999': attribute type 39 has an invalid length.
[  865.341104][T17046] netlink: 'syz.0.3002': attribute type 10 has an invalid length.
[  865.457400][T17046] team0: Device ipvlan1 failed to register rx_handler
[  865.884985][T17058] netlink: 'syz.3.3005': attribute type 10 has an invalid length.
[  866.537508][T17058] team0: Device wg1 is of different type
[  867.279874][T17076] netlink: 'syz.1.3010': attribute type 10 has an invalid length.
[  867.320426][T17076] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3010'.
[  870.522290][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  870.540215][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  870.574183][T17094] netlink: 'syz.1.3014': attribute type 39 has an invalid length.
[  871.907805][T17107] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3018'.
[  872.321442][T17119] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.3020'.
[  875.820568][T17130] netlink: 'syz.0.3022': attribute type 10 has an invalid length.
[  875.856181][T17130] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3022'.
[  876.461788][T17138] netlink: 'syz.2.3025': attribute type 39 has an invalid length.
[  877.579022][T17155] netlink: 'syz.1.3032': attribute type 10 has an invalid length.
[  878.012288][T17167] netlink: 'syz.0.3034': attribute type 10 has an invalid length.
[  878.066571][T17167] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3034'.
[  881.048888][T17184] netlink: 'syz.1.3039': attribute type 39 has an invalid length.
[  881.351260][T17191] netlink: 'syz.0.3040': attribute type 10 has an invalid length.
[  881.685299][T17194] syzkaller0: entered promiscuous mode
[  881.698756][T17194] syzkaller0: entered allmulticast mode
[  881.808891][T17194] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3041'.
[  881.828734][T17194] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.3041'.
[  882.436731][T17206] netlink: 'syz.3.3044': attribute type 1 has an invalid length.
[  882.480528][T17206] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.3044'.
[  883.593553][T17205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3045'.
[  888.898081][T17226] netlink: 'syz.1.3046': attribute type 10 has an invalid length.
[  888.906306][T17226] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3046'.
[  888.916507][T17236] netlink: 'syz.2.3048': attribute type 10 has an invalid length.
[  888.938643][T17236] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3048'.
[  889.119079][T17245] netlink: 'syz.0.3051': attribute type 39 has an invalid length.
[  889.169952][T17247] netlink: 'syz.3.3049': attribute type 10 has an invalid length.
[  889.188462][T17247] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3049'.
[  889.210330][T17246] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3052'.
[  890.172306][T17252] netlink: 'syz.1.3053': attribute type 1 has an invalid length.
[  890.181615][T17252] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3053'.
[  891.970326][T17259] netlink: 'syz.2.3054': attribute type 10 has an invalid length.
[  892.018972][T17259] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3054'.
[  892.583352][T17269] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3057'.
[  892.819504][T17278] netlink: 'syz.3.3058': attribute type 10 has an invalid length.
[  892.858303][T17278] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3058'.
[  892.964793][T17284] netlink: 'syz.0.3060': attribute type 10 has an invalid length.
[  892.986199][T17284] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3060'.
[  893.131194][T17285] netlink: 'syz.1.3061': attribute type 10 has an invalid length.
[  893.166992][T17285] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3061'.
[  895.096896][T17322] netlink: 'syz.1.3070': attribute type 27 has an invalid length.
[  895.127559][T17322] netlink: 'syz.1.3070': attribute type 4 has an invalid length.
[  895.192781][T17322] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3070'.
[  895.465428][T17332] netlink: 'syz.3.3073': attribute type 10 has an invalid length.
[  895.474968][T17332] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3073'.
[  895.735279][T17336] netlink: 'syz.0.3071': attribute type 10 has an invalid length.
[  895.749390][T17336] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3071'.
[  896.554455][T17346] netlink: 'syz.0.3077': attribute type 3 has an invalid length.
[  896.571323][T17346] netlink: 'syz.0.3077': attribute type 1 has an invalid length.
[  896.612434][T17346] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.3077'.
[  897.323905][T17370] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3085'.
[  897.340277][T17368] netlink: 'syz.3.3083': attribute type 10 has an invalid length.
[  897.350086][T17368] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3083'.
[  897.361641][T17370] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3085'.
[  897.393137][T17370] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3085'.
[  897.624625][T17377] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3084'.
[  898.189777][T17381] netlink: 'syz.0.3087': attribute type 10 has an invalid length.
[  898.204083][T17381] netlink: 'syz.0.3087': attribute type 16 has an invalid length.
[  898.218639][T17381] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3087'.
[  899.327418][T17383] netlink: 'syz.3.3088': attribute type 25 has an invalid length.
[  901.038917][T17429] validate_nla: 1 callbacks suppressed
[  901.038939][T17429] netlink: 'syz.0.3096': attribute type 10 has an invalid length.
[  901.187562][T17429] __nla_validate_parse: 2 callbacks suppressed
[  901.187586][T17429] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3096'.
[  904.099050][T17445] tap0: tun_chr_ioctl cmd 99999999
[  904.908897][T17457] netlink: 'syz.1.3104': attribute type 2 has an invalid length.
[  904.916740][T17457] netlink: 'syz.1.3104': attribute type 8 has an invalid length.
[  904.959163][T17457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3104'.
[  905.197193][T17455] netlink: 'syz.1.3104': attribute type 21 has an invalid length.
[  905.326578][T17463] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3105'.
[  906.575114][T17472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  906.584711][T17472] IPv6: NLM_F_CREATE should be set when creating new route
[  906.596733][T17472] IPv6: NLM_F_CREATE should be set when creating new route
[  906.604798][T17472] IPv6: NLM_F_CREATE should be set when creating new route
[  906.820133][T17476] netlink: 'syz.3.3109': attribute type 10 has an invalid length.
[  906.839146][T17476] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3109'.
[  909.940869][T17492] netlink: 'syz.1.3113': attribute type 3 has an invalid length.
[  909.951694][T17493] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3114'.
[  909.966584][T17491] netlink: 'syz.0.3112': attribute type 10 has an invalid length.
[  909.971778][T17492] netlink: 'syz.1.3113': attribute type 1 has an invalid length.
[  909.994677][T17491] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3112'.
[  910.008827][T17491] team0: entered promiscuous mode
[  910.010248][T17492] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.3113'.
[  910.014036][T17491] C: entered promiscuous mode
[  910.045059][T17491] team_slave_1: entered promiscuous mode
[  910.064078][T17491] team0: entered allmulticast mode
[  910.076000][T17491] C: entered allmulticast mode
[  910.083013][T17491] team_slave_1: entered allmulticast mode
[  910.114934][T17491] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  910.155297][T17493] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3114'.
[  910.633939][T17506] netlink: 'syz.0.3125': attribute type 3 has an invalid length.
[  910.665423][T17506] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3125'.
[  910.799918][T17507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3117'.
[  911.054953][T17511] netlink: 'syz.1.3118': attribute type 1 has an invalid length.
[  911.154587][T17511] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3118'.
[  911.203629][T17511] netlink: 'syz.1.3118': attribute type 1 has an invalid length.
[  911.384002][T17515] netlink: 'syz.0.3119': attribute type 29 has an invalid length.
[  911.439997][T17515] netlink: 'syz.0.3119': attribute type 29 has an invalid length.
[  911.484164][T17516] netlink: 'syz.0.3119': attribute type 29 has an invalid length.
[  911.831274][T17518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  912.884007][T17532] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3124'.
[  912.908706][T17532] netlink: zone id is out of range
[  912.913952][T17532] netlink: zone id is out of range
[  912.949100][T17532] netlink: zone id is out of range
[  912.965416][T17532] netlink: zone id is out of range
[  912.988742][T17532] netlink: zone id is out of range
[  913.025355][T17532] netlink: zone id is out of range
[  913.058296][T17532] netlink: zone id is out of range
[  913.089190][T17532] netlink: zone id is out of range
[  913.119004][T17532] netlink: zone id is out of range
[  916.943098][T17558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3130'.
[  920.462087][T17583] validate_nla: 2 callbacks suppressed
[  920.462106][T17583] netlink: 'syz.2.3137': attribute type 10 has an invalid length.
[  920.475822][T17583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3137'.
[  920.485236][T17583] ipvlan1: entered promiscuous mode
[  920.505892][T17583] bridge0: port 4(ipvlan1) entered blocking state
[  920.517266][T17583] bridge0: port 4(ipvlan1) entered disabled state
[  920.537761][T17583] ipvlan1: entered allmulticast mode
[  920.553354][T17583] veth0_vlan: entered allmulticast mode
[  920.573531][T17583] ipvlan1: left allmulticast mode
[  920.596695][T17583] veth0_vlan: left allmulticast mode
[  920.625952][T17583] net_ratelimit: 81 callbacks suppressed
[  920.625970][T17583] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  920.686539][T17584] netlink: 'syz.3.3136': attribute type 10 has an invalid length.
[  920.711024][T17584] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3136'.
[  921.453130][T17597] netlink: 'syz.1.3139': attribute type 39 has an invalid length.
[  921.895279][T17614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3140'.
[  922.050296][T17617] netlink: 'syz.2.3143': attribute type 21 has an invalid length.
[  922.084602][T17617] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3143'.
[  922.108607][T17617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'.
[  922.117993][T17615] netlink: 'syz.0.3148': attribute type 10 has an invalid length.
[  922.148964][T17615] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3148'.
[  922.491647][T17622] netlink: 'syz.1.3144': attribute type 39 has an invalid length.
[  924.853250][T17636] netlink: 'syz.0.3149': attribute type 39 has an invalid length.
[  925.221856][T17638] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3146'.
[  929.348443][T17711] netlink: 'syz.2.3161': attribute type 39 has an invalid length.
[  931.520466][T17770] netlink: 'syz.2.3176': attribute type 39 has an invalid length.
[  931.851407][T17784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3180'.
[  931.867393][T17784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3180'.
[  932.079079][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  932.085746][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  933.224450][T17807] netlink: 'syz.1.3184': attribute type 10 has an invalid length.
[  933.248592][T17807] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3184'.
[  933.498373][T17815] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3187'.
[  933.838848][T17822] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  933.984018][T17832] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3192'.
[  934.549454][T17842] netlink: 'syz.3.3195': attribute type 39 has an invalid length.
[  934.953716][T17844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  935.351265][T17851] netlink: 'syz.1.3197': attribute type 10 has an invalid length.
[  935.491971][T17851] mac80211_hwsim hwsim37 wlan1: left allmulticast mode
[  936.628703][T17867] sit0: entered promiscuous mode
[  936.633739][T17867] sit0: entered allmulticast mode
[  936.996869][T17872] netlink: 'syz.2.3202': attribute type 21 has an invalid length.
[  937.484294][T17876] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.3204'.
[  937.741956][T17894] netlink: 'syz.2.3208': attribute type 39 has an invalid length.
[  937.762256][T17895] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3209'.
[  939.470187][T17942] netlink: 'syz.0.3221': attribute type 3 has an invalid length.
[  939.478628][T17942] netlink: 'syz.0.3221': attribute type 8 has an invalid length.
[  939.529017][T17942] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.3221'.
[  939.689792][T17950] netlink: 'syz.2.3224': attribute type 2 has an invalid length.
[  939.721362][T17954] netlink: 'syz.3.3225': attribute type 39 has an invalid length.
[  939.824072][T17950] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3224'.
[  939.863755][T17950] netlink: 8446 bytes leftover after parsing attributes in process `syz.2.3224'.
[  940.329316][T17966] netlink: 'syz.2.3229': attribute type 10 has an invalid length.
[  940.446448][T17966] bridge0: port 3(hsr0) entered disabled state
[  940.481118][T17966] hsr0: left allmulticast mode
[  940.489697][T17966] hsr_slave_0: left allmulticast mode
[  940.500212][T17966] hsr_slave_1: left allmulticast mode
[  940.506891][T17966] hsr0: left promiscuous mode
[  940.519070][T17966] bridge0: port 3(hsr0) entered disabled state
[  940.605151][T17981] netlink: 'syz.3.3232': attribute type 2 has an invalid length.
[  940.659831][T17981] netlink: 175276 bytes leftover after parsing attributes in process `syz.3.3232'.
[  940.907419][T17984] netlink: 'syz.2.3234': attribute type 4 has an invalid length.
[  940.958625][T17984] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3234'.
[  943.049826][T18058] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3250'.
[  945.348960][T18058] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3250'.
[  945.948148][T18091] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3260'.
[  946.242191][T18095] netlink: 'syz.2.3261': attribute type 3 has an invalid length.
[  946.277778][T18095] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3261'.
[  946.281126][T18092] netlink: 88700 bytes leftover after parsing attributes in process `syz.0.3259'.
[  946.793522][T18100] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3263'.
[  946.948400][T18104] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[  946.998201][T18104] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode
[  947.314698][T18124] netlink: 'syz.1.3269': attribute type 4 has an invalid length.
[  947.373566][T18124] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3269'.
[  949.561240][T18156] tap1: tun_chr_ioctl cmd 2147767511
[  949.742296][T18174] netlink: 'syz.0.3280': attribute type 39 has an invalid length.
[  949.868785][T18178] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3281'.
[  950.015796][T18181] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3282'.
[  950.255642][T18188] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3284'.
[  951.476029][T18214] netlink: 'syz.2.3291': attribute type 39 has an invalid length.
[  951.662221][T18225] netlink: 'syz.3.3292': attribute type 28 has an invalid length.
[  951.703022][T18225] netlink: 'syz.3.3292': attribute type 29 has an invalid length.
[  951.731286][T18225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3292'.
[  951.921660][T18227] netlink: 'syz.1.3294': attribute type 3 has an invalid length.
[  951.982738][T18227] netlink: 'syz.1.3294': attribute type 1 has an invalid length.
[  952.047196][T18227] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3294'.
[  953.266825][T18227] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3294'.
[  954.693895][T18273] netlink: 'syz.0.3305': attribute type 10 has an invalid length.
[  954.718589][T18273] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3305'.
[  954.727964][T18274] netlink: 'syz.1.3304': attribute type 10 has an invalid length.
[  954.736267][T18274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3304'.
[  957.956375][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3312'.
[  958.012333][T18303] netlink: 'syz.3.3314': attribute type 39 has an invalid length.
[  958.467014][T18315] sock: sock_timestamping_bind_phc: sock not bind to device
[  958.490740][T18314] netlink: 'syz.3.3318': attribute type 21 has an invalid length.
[  959.055979][T18338] IPv6: Can't replace route, no match found
[  959.179161][T18342] netlink: 'syz.0.3326': attribute type 39 has an invalid length.
[  959.555428][T18353] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.3329'.
[  959.813690][T18365] netlink: 'syz.1.3331': attribute type 2 has an invalid length.
[  959.884499][T18365] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3331'.
[  960.255428][T18376] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3336'.
[  960.370007][T18379] netlink: 'syz.0.3335': attribute type 4 has an invalid length.
[  960.387336][T18374] tun0: tun_chr_ioctl cmd 1074025692
[  960.437568][T18374] tun0: tun_chr_ioctl cmd 1074025675
[  960.454482][T18374] tun0: persist disabled
[  960.642866][T18388] netlink: 'syz.2.3338': attribute type 9 has an invalid length.
[  960.665335][T18388] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3338'.
[  960.807525][T18389] netlink: 'syz.2.3338': attribute type 9 has an invalid length.
[  960.820176][T18389] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3338'.
[  960.861828][T18394] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.3339'.
[  961.314399][T18404] netlink: 'syz.2.3343': attribute type 39 has an invalid length.
[  961.867539][T18415] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.3345'.
[  962.277526][T18414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3345'.
[  962.293603][T18414] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3345'.
[  962.319199][T18414] bridge_slave_0: entered allmulticast mode
[  965.696170][T18430] __nla_validate_parse: 3 callbacks suppressed
[  965.696187][T18430] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3349'.
[  965.718433][T18429] netlink: 'syz.1.3351': attribute type 10 has an invalid length.
[  965.737115][T18429] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3351'.
[  965.759329][T18435] netlink: 'syz.2.3352': attribute type 10 has an invalid length.
[  965.796543][T18435] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  966.559365][T18449] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3357'.
[  966.754514][T18453] netlink: 'syz.3.3359': attribute type 39 has an invalid length.
[  966.770194][T18449] netlink: 'syz.0.3357': attribute type 2 has an invalid length.
[  966.790283][T18449] netlink: 119 bytes leftover after parsing attributes in process `syz.0.3357'.
[  966.953635][T18461] netlink: 'syz.2.3360': attribute type 15 has an invalid length.
[  967.342839][T18463] netlink: 'syz.2.3361': attribute type 1 has an invalid length.
[  967.350810][T18463] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3361'.
[  967.602803][T18475] netlink: 'syz.0.3363': attribute type 1 has an invalid length.
[  967.612581][T18475] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.3363'.
[  969.533402][T18476] netlink: 'syz.1.3362': attribute type 10 has an invalid length.
[  969.543899][T18476] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3362'.
[  969.996612][T18484] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.3366'.
[  970.387471][T18478] netlink: 'syz.0.3364': attribute type 21 has an invalid length.
[  970.404541][T18478] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.3364'.
[  970.444925][T18487] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3367'.
[  970.770418][T18495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3369'.
[  970.801074][T18495] netlink: get zone limit has 4 unknown bytes
[  970.870116][T18497] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3370'.
[  970.979739][T18500] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3372'.
[  974.509881][T18509] netlink: 'syz.0.3374': attribute type 10 has an invalid length.
[  974.518409][T18509] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3374'.
[  974.888302][T18508] bridge0: port 1(bridge_slave_0) entered disabled state
[  975.032822][T18503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.063465][T18514] netlink: 'syz.1.3375': attribute type 39 has an invalid length.
[  975.363923][T18528] netlink: 'syz.2.3377': attribute type 21 has an invalid length.
[  975.711351][T18530] netlink: 'syz.0.3378': attribute type 1 has an invalid length.
[  975.740259][T18530] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3378'.
[  976.859728][ T5775] Bluetooth: hci3: ISO packet for unknown connection handle 52
[  977.117504][T18543] netlink: 'syz.2.3381': attribute type 3 has an invalid length.
[  977.148808][T18543] netlink: 'syz.2.3381': attribute type 1 has an invalid length.
[  977.170005][T18543] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3381'.
[  979.976397][T18554] veth1_to_bond: entered allmulticast mode
[  980.235021][T18553] netlink: 'syz.0.3384': attribute type 10 has an invalid length.
[  980.270232][T18553] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3384'.
[  980.301530][T18556] netlink: 'syz.3.3385': attribute type 21 has an invalid length.
[  980.325634][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3385'.
[  981.323994][T18574] netlink: 'syz.1.3388': attribute type 39 has an invalid length.
[  981.913528][T18584] netlink: 'syz.0.3390': attribute type 21 has an invalid length.
[  982.726255][T18592] netlink: 'syz.3.3391': attribute type 1 has an invalid length.
[  982.768700][T18592] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3391'.
[  985.287584][T18600] syzkaller0: entered promiscuous mode
[  985.358691][T18600] syzkaller0: entered allmulticast mode
[  988.092369][T18610] netlink: 'syz.3.3395': attribute type 10 has an invalid length.
[  988.107231][T18610] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3395'.
[  988.788570][T18626] netlink: 'syz.1.3402': attribute type 39 has an invalid length.
[  988.916823][T18634] netlink: 'syz.3.3403': attribute type 2 has an invalid length.
[  988.939538][T18634] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3403'.
[  989.281614][T18638] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3403'.
[  989.422930][T18641] netlink: 'syz.0.3412': attribute type 39 has an invalid length.
[  990.647175][T18645] netlink: 'syz.1.3404': attribute type 21 has an invalid length.
[  990.751393][T18653] netlink: 'syz.3.3405': attribute type 10 has an invalid length.
[  990.777788][T18653] team0: Device ipvlan1 failed to register rx_handler
[  991.080118][T18666] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3408'.
[  991.818183][T18659] netlink: 'syz.1.3407': attribute type 30 has an invalid length.
[  991.838737][T18663] netlink: 'syz.3.3406': attribute type 10 has an invalid length.
[  991.846652][T18663] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3406'.
[  992.868875][T18695] netlink: 'syz.3.3417': attribute type 39 has an invalid length.
[  993.364354][T18715] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.3423'.
[  993.451583][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  993.461268][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  993.468214][T18709] netlink: 'syz.1.3420': attribute type 10 has an invalid length.
[  993.488891][T18709] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3420'.
[  996.186817][T18748] sock: sock_set_timeout: `syz.3.3431' (pid 18748) tries to set negative timeout
[  996.582237][T18753] syzkaller0: entered promiscuous mode
[  996.587819][T18753] syzkaller0: entered allmulticast mode
[  999.748535][T18762] netlink: 'syz.3.3434': attribute type 10 has an invalid length.
[  999.756775][T18762] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3434'.
[ 1000.334359][T18778] netlink: 'syz.0.3436': attribute type 10 has an invalid length.
[ 1000.393977][T18778] wg1: entered promiscuous mode
[ 1000.400410][T18778] wg1: entered allmulticast mode
[ 1000.405770][T18778] team0: Device wg1 is of different type
[ 1000.923681][T18800] netlink: 'syz.0.3445': attribute type 10 has an invalid length.
[ 1004.048059][T18800] hsr_slave_0 (unregistering): left promiscuous mode
[ 1004.458978][T18802] netlink: 'syz.2.3446': attribute type 10 has an invalid length.
[ 1004.466876][T18802] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3446'.
[ 1004.500533][T18802] hsr0: entered promiscuous mode
[ 1004.530431][T18802] bridge0: port 3(hsr0) entered blocking state
[ 1004.536825][T18802] bridge0: port 3(hsr0) entered disabled state
[ 1004.556881][T18802] hsr0: entered allmulticast mode
[ 1004.568947][T18802] hsr_slave_0: entered allmulticast mode
[ 1004.574901][T18802] hsr_slave_1: entered allmulticast mode
[ 1004.599101][T18802] bridge0: port 3(hsr0) entered blocking state
[ 1004.605567][T18802] bridge0: port 3(hsr0) entered forwarding state
[ 1004.726570][T18814] netlink: 'syz.0.3448': attribute type 33 has an invalid length.
[ 1006.272042][T18838] Ÿë
: port 1(ip6gretap0) entered blocking state
[ 1006.313745][T18838] Ÿë
: port 1(ip6gretap0) entered disabled state
[ 1006.330350][T18843] netlink: 'syz.2.3457': attribute type 4 has an invalid length.
[ 1006.340535][T18838] ip6gretap0: entered allmulticast mode
[ 1006.348083][T18838] ip6gretap0: entered promiscuous mode
[ 1006.401713][T18840] netlink: 'syz.2.3457': attribute type 4 has an invalid length.
[ 1006.425716][T18840] netlink: 174100 bytes leftover after parsing attributes in process `syz.2.3457'.
[ 1006.427459][T18843] netlink: 174100 bytes leftover after parsing attributes in process `syz.2.3457'.
[ 1006.698589][T18852] netlink: 'syz.1.3459': attribute type 10 has an invalid length.
[ 1006.708782][T18852] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3459'.
[ 1011.141893][T18881] delete_channel: no stack
[ 1011.201352][T18888] netlink: 'syz.2.3469': attribute type 39 has an invalid length.
[ 1013.813166][T18900] netlink: 'syz.0.3470': attribute type 10 has an invalid length.
[ 1013.826350][T18900] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3470'.
[ 1014.204839][T18908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3472'.
[ 1014.235997][T18908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3472'.
[ 1014.300081][T18911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3472'.
[ 1016.957264][T18938] netlink: 'syz.0.3481': attribute type 39 has an invalid length.
[ 1017.050660][T18934] netlink: 'syz.3.3480': attribute type 10 has an invalid length.
[ 1017.061063][T18934] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3480'.
[ 1023.075865][T18982] netlink: 'syz.0.3493': attribute type 10 has an invalid length.
[ 1023.112692][T18982] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3493'.
[ 1023.132530][T18986] netlink: 'syz.1.3494': attribute type 39 has an invalid length.
[ 1028.523356][T19011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3500'.
[ 1029.382891][T19030] netlink: 'syz.2.3506': attribute type 39 has an invalid length.
[ 1032.139676][T19025] netlink: 'syz.0.3504': attribute type 10 has an invalid length.
[ 1032.147720][T19025] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3504'.
[ 1032.160774][T19037] netlink: 'syz.3.3505': attribute type 10 has an invalid length.
[ 1032.470438][T19043] netlink: 'syz.0.3507': attribute type 10 has an invalid length.
[ 1032.531351][T19043] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1032.561982][T19043] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1032.981266][T19045] netlink: 'syz.2.3509': attribute type 28 has an invalid length.
[ 1033.000086][T19049] netlink: 'syz.3.3511': attribute type 2 has an invalid length.
[ 1033.008012][T19049] netlink: 'syz.3.3511': attribute type 1 has an invalid length.
[ 1033.009873][T19045] netlink: 'syz.2.3509': attribute type 29 has an invalid length.
[ 1033.031942][T19045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3509'.
[ 1033.098941][T19049] netlink: 198800 bytes leftover after parsing attributes in process `syz.3.3511'.
[ 1035.820475][T19045] ------------[ cut here ]------------
[ 1035.826303][T19045] WARNING: CPU: 0 PID: 19045 at kernel/events/core.c:6808 perf_pending_task+0x35c/0x470
[ 1035.836174][T19045] Modules linked in:
[ 1035.840167][T19045] CPU: 0 PID: 19045 Comm: syz.2.3509 Not tainted syzkaller #0
[ 1035.847674][T19045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1035.857878][T19045] RIP: 0010:perf_pending_task+0x35c/0x470
[ 1035.863708][T19045] Code: ff 84 db 75 14 e8 64 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 d8 d5 ff e8 cb 53 4f ff eb e5 e8 44 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 38 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6
[ 1035.883461][T19045] RSP: 0018:ffffc9000d7879c0 EFLAGS: 00010293
[ 1035.889894][T19045] RAX: ffffffff81b149bc RBX: ffff88804b6122e0 RCX: ffff888024a6da00
[ 1035.897926][T19045] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1035.906031][T19045] RBP: 0000000000000001 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd
[ 1035.914252][T19045] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff888024a6da00
[ 1035.922336][T19045] R13: ffff888023cd2d30 R14: ffff88804b6120a0 R15: 1ffff110096c2414
[ 1035.930823][T19045] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1035.939979][T19045] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1035.946615][T19045] CR2: 00007fb06d3faff8 CR3: 000000002fd71000 CR4: 00000000003506f0
[ 1035.955019][T19045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1035.963232][T19045] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1035.971342][T19045] Call Trace:
[ 1035.974664][T19045]  <TASK>
[ 1035.977653][T19045]  task_work_run+0x1d4/0x260
[ 1035.982356][T19045]  ? task_work_cancel+0x220/0x220
[ 1035.987689][T19045]  do_exit+0x95a/0x2460
[ 1035.991952][T19045]  ? put_task_struct+0xc0/0xc0
[ 1035.996772][T19045]  ? lockdep_hardirqs_on+0x98/0x150
[ 1036.002103][T19045]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1036.008309][T19045]  do_group_exit+0x21b/0x2d0
[ 1036.013042][T19045]  ? lockdep_hardirqs_on+0x98/0x150
[ 1036.018301][T19045]  get_signal+0x12fc/0x13f0
[ 1036.022954][T19045]  arch_do_signal_or_restart+0xc2/0x800
[ 1036.029037][T19045]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1036.034967][T19045]  ? blkcg_maybe_throttle_current+0x19f/0xa90
[ 1036.041241][T19045]  ? get_sigframe_size+0x20/0x20
[ 1036.046241][T19045]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1036.051803][T19045]  exit_to_user_mode_loop+0x70/0x110
[ 1036.057144][T19045]  exit_to_user_mode_prepare+0xee/0x180
[ 1036.062873][T19045]  syscall_exit_to_user_mode+0x1a/0x50
[ 1036.068400][T19045]  do_syscall_64+0x61/0xa0
[ 1036.073008][T19045]  ? clear_bhb_loop+0x40/0x90
[ 1036.077734][T19045]  ? clear_bhb_loop+0x40/0x90
[ 1036.082512][T19045]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1036.088715][T19045] RIP: 0033:0x7f245b79c819
[ 1036.093190][T19045] Code: Unable to access opcode bytes at 0x7f245b79c7ef.
[ 1036.100343][T19045] RSP: 002b:00007f245c6170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1036.109169][T19045] RAX: fffffffffffffe00 RBX: 00007f245ba15fa8 RCX: 00007f245b79c819
[ 1036.117182][T19045] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f245ba15fa8
[ 1036.125317][T19045] RBP: 00007f245ba15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1036.133647][T19045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1036.141845][T19045] R13: 00007f245ba16038 R14: 00007ffeb36ebb50 R15: 00007ffeb36ebc38
[ 1036.149964][T19045]  </TASK>
[ 1036.153014][T19045] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1036.160315][T19045] CPU: 0 PID: 19045 Comm: syz.2.3509 Not tainted syzkaller #0
[ 1036.167814][T19045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1036.178047][T19045] Call Trace:
[ 1036.181346][T19045]  <TASK>
[ 1036.184295][T19045]  dump_stack_lvl+0x18c/0x250
[ 1036.189016][T19045]  ? show_regs_print_info+0x20/0x20
[ 1036.194308][T19045]  ? load_image+0x420/0x420
[ 1036.198850][T19045]  panic+0x2dc/0x730
[ 1036.203139][T19045]  ? bpf_jit_dump+0xd0/0xd0
[ 1036.207760][T19045]  __warn+0x2e0/0x470
[ 1036.211769][T19045]  ? perf_pending_task+0x35c/0x470
[ 1036.216920][T19045]  ? perf_pending_task+0x35c/0x470
[ 1036.222082][T19045]  report_bug+0x2be/0x4f0
[ 1036.226448][T19045]  ? perf_pending_task+0x35c/0x470
[ 1036.231599][T19045]  ? perf_pending_task+0x35c/0x470
[ 1036.236820][T19045]  ? perf_pending_task+0x35e/0x470
[ 1036.241955][T19045]  handle_bug+0xcf/0x120
[ 1036.246213][T19045]  exc_invalid_op+0x1a/0x50
[ 1036.250761][T19045]  asm_exc_invalid_op+0x1a/0x20
[ 1036.255628][T19045] RIP: 0010:perf_pending_task+0x35c/0x470
[ 1036.261366][T19045] Code: ff 84 db 75 14 e8 64 d8 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 50 d8 d5 ff e8 cb 53 4f ff eb e5 e8 44 d8 d5 ff <0f> 0b e9 f3 fe ff ff e8 38 d8 d5 ff 48 c7 c7 70 f4 1c 8d 4c 89 f6
[ 1036.281071][T19045] RSP: 0018:ffffc9000d7879c0 EFLAGS: 00010293
[ 1036.287152][T19045] RAX: ffffffff81b149bc RBX: ffff88804b6122e0 RCX: ffff888024a6da00
[ 1036.295143][T19045] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1036.303125][T19045] RBP: 0000000000000001 R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd
[ 1036.311107][T19045] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff888024a6da00
[ 1036.319092][T19045] R13: ffff888023cd2d30 R14: ffff88804b6120a0 R15: 1ffff110096c2414
[ 1036.327171][T19045]  ? perf_pending_task+0x35c/0x470
[ 1036.332399][T19045]  task_work_run+0x1d4/0x260
[ 1036.337010][T19045]  ? task_work_cancel+0x220/0x220
[ 1036.342057][T19045]  do_exit+0x95a/0x2460
[ 1036.346241][T19045]  ? put_task_struct+0xc0/0xc0
[ 1036.351041][T19045]  ? lockdep_hardirqs_on+0x98/0x150
[ 1036.356262][T19045]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1036.362446][T19045]  do_group_exit+0x21b/0x2d0
[ 1036.367054][T19045]  ? lockdep_hardirqs_on+0x98/0x150
[ 1036.372299][T19045]  get_signal+0x12fc/0x13f0
[ 1036.376836][T19045]  arch_do_signal_or_restart+0xc2/0x800
[ 1036.382406][T19045]  ? __ia32_sys_get_robust_list+0x110/0x110
[ 1036.388314][T19045]  ? blkcg_maybe_throttle_current+0x19f/0xa90
[ 1036.394421][T19045]  ? get_sigframe_size+0x20/0x20
[ 1036.399396][T19045]  ? exit_to_user_mode_loop+0x3b/0x110
[ 1036.404960][T19045]  exit_to_user_mode_loop+0x70/0x110
[ 1036.410268][T19045]  exit_to_user_mode_prepare+0xee/0x180
[ 1036.415864][T19045]  syscall_exit_to_user_mode+0x1a/0x50
[ 1036.421342][T19045]  do_syscall_64+0x61/0xa0
[ 1036.425766][T19045]  ? clear_bhb_loop+0x40/0x90
[ 1036.430472][T19045]  ? clear_bhb_loop+0x40/0x90
[ 1036.435163][T19045]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1036.441077][T19045] RIP: 0033:0x7f245b79c819
[ 1036.445605][T19045] Code: Unable to access opcode bytes at 0x7f245b79c7ef.
[ 1036.452637][T19045] RSP: 002b:00007f245c6170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1036.461108][T19045] RAX: fffffffffffffe00 RBX: 00007f245ba15fa8 RCX: 00007f245b79c819
[ 1036.469193][T19045] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f245ba15fa8
[ 1036.477185][T19045] RBP: 00007f245ba15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 1036.485170][T19045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1036.493257][T19045] R13: 00007f245ba16038 R14: 00007ffeb36ebb50 R15: 00007ffeb36ebc38
[ 1036.501262][T19045]  </TASK>
[ 1036.504700][T19045] Kernel Offset: disabled
[ 1036.509026][T19045] Rebooting in 86400 seconds..