last executing test programs:

4.659730474s ago: executing program 2 (id=3758):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x9, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40012023)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000500)="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", 0x1eb}], 0x1}, 0x20008010)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x2b0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.558115739s ago: executing program 2 (id=3762):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x2, 0x0, r0}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)="9d48be", 0x4}, 0x50)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r3 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x8, 0xd, 0x0, 0xfb, 0x0, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x5, 0x0, 0x7, 0x8000, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0xd369}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, r3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={0x0}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x4)

3.467950072s ago: executing program 2 (id=3765):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0xd, &(0x7f0000000000)=r5, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24044084)

3.21003681s ago: executing program 3 (id=3769):
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x29, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f00000006c0)=""/196, 0x72, 0xc4, 0x1}, 0x28)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001bc0), 0x4}, 0x100910, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x21, 0x2, 0xa)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f00000004000000080000000100000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x3f)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r3})
setsockopt$sock_attach_bpf(r1, 0x110, 0x2, &(0x7f0000000000), 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="740000007600a9dc05baffff9db77085fc00000000184eab5c0001000000ffffffff9eadebbfe8fb3bda8a2edce97202d8e8424b0aae2b06f3cc7b394f81158445eb96b10edc5866664ea95cb8749a7b824b2869cccf0f8fe4b7771724d3fcf46f1a00ef29bf690a2a01ec9a5e", 0x6d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80410, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x800, 0xfffffffe, 0x8, 0x4, 0x3, 0xfffb, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
sendmsg$kcm(r0, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=[{&(0x7f0000004500)="d800000016008111e00212ba0d8105040a601100ff0f040b067c55a1bc0009001e0006990300000015000500fe808178a8021500030001400200000901ac04000bd67f6f9400710016277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad85667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b440431629b0b5aa14c3d21e2fa353905e2a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e0019000f000000028000001294", 0x2e}], 0x1}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f0000001380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000014c0)=""/148, 0x94}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/16, 0x10}, {&(0x7f0000002c40)=""/195, 0xc3}, {&(0x7f0000002d40)=""/42, 0x2a}], 0x5, &(0x7f0000002e00)=""/167, 0xa7}, 0x2000)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="1400000032000bfefffffffffffffff90324fc60", 0x14}], 0x1}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x2a979d)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfb, 0x7e, &(0x7f0000000100)="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", &(0x7f0000000280)=""/126, 0x3, 0x0, 0xc9, 0xb1, &(0x7f0000000340)="46ee2c374a733a7490caa276d7b742e20318cc7a62aeb33b5d0f2242b81cb5830d21a783968f452360a402985fa8c5570e4c3398437ac4e93cf97f9ee31bc580c7779b82dc41c068a84acec7b800b8cabf0f20adb630ce7fb057edc3643ac2daf9fa612c2f35c4fc8e55cfb99820132df4bf86da06c71ec244d20e4838f52464ca5a98166c714dd65c6e6468fb55f05454a90a6297eb2df5d302132bbe055f4976de1db3eaf5291dcbf8a377c7ba5ce6d49a67c09e8bd8cfb1ccb074db741027f4ea9b00b117e6b97c", &(0x7f0000000440)="8b943298015d060ee1993be210f55b7ce37ed53c07a7cd17b62ec6166a523fa916c09a80937963397f8a4710c2ae685a92dd92e63b3c26c52a6ff4e809f7e33de38f68d69b245cc9334aaae30ce5613091327d4c6476087b060e20c31dccf3cba68d2d09f84155bd5aa140001e92790695ad6a3472e765c44791fa081baff73591d5ca5cf2906470f51229bcffdbfd648b2125525d34e8198533ce6987dc0989e099291164abbd7fd69ae8424f4e6b3f08", 0x2, 0x0, 0x4}, 0x50)

3.172215061s ago: executing program 1 (id=3770):
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x61}, {0x6, 0xda}]})
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x22, 0x2, 0x21)
r4 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0)

3.080187254s ago: executing program 2 (id=3771):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x6, 0x5, 0xa, 0x8001, 0x0, 0x0, 0x0, 0x4713}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) (async)
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x43, 0x4, 0x89, 0x2, 0x0, 0x80000000, 0x8000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x10008, 0x7ff, 0x4, 0x2, 0x100, 0xc, 0x5, 0x0, 0x5, 0x0, 0x100000000}, r0, 0x6, 0xffffffffffffffff, 0xc) (async)
perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x43, 0x4, 0x89, 0x2, 0x0, 0x80000000, 0x8000, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x10008, 0x7ff, 0x4, 0x2, 0x100, 0xc, 0x5, 0x0, 0x5, 0x0, 0x100000000}, r0, 0x6, 0xffffffffffffffff, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48)
sendmsg$inet(r1, 0x0, 0x4000804) (async)
sendmsg$inet(r1, 0x0, 0x4000804)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x10120)
r3 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4) (async)
setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080))

2.798101152s ago: executing program 3 (id=3775):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x2, 0x0, r0}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)="9d48be", 0x4}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r3 = perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x80, 0x8, 0xd, 0x0, 0xfb, 0x0, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x0, 0x5, 0x0, 0x7, 0x8000, 0x0, 0x9, 0x0, 0xfffffff8, 0x0, 0xd369}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r4, 0x0, r3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0x3)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={0x0}, 0x18)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x4)

2.786848483s ago: executing program 2 (id=3776):
r0 = socket$kcm(0xa, 0x2, 0x3a)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x103)
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x80000000000000c8, 0xa61, 0x0, 0xa45, 0xffffffff, 0x0, 0x0, 0xace}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000080)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}]})
write$cgroup_subtree(r3, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000022eb"], 0xcfa4)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x6}, 0x6090, 0x800, 0x0, 0x0, 0x3, 0x7, 0xffff, 0x0, 0x3, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x4)
sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x44, &(0x7f0000000640), 0x4)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000200)=@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="2186ada7ce8b5dec874b9242d16a8b82784e57897b3e8b47e8675fcecfefbbe6b89157138e2eccf0b4c7f1aed9b2f7d6ddd2bca6397b6781748c86b7887a62", 0x3f}, {&(0x7f00000002c0)="e98332395b0dfeadec00ef841b142e7a10c20dfbf7832dc9c2685d8493cd8c64445b143be4112bf226bb1f271735601ff1021f01ec8e2476c47241d541707ea3c01ffcb6dee784ea459f03892277e7b73a6a1ba7704bb0fe781c7b", 0x5b}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="d0000000000000000f010000f8ffffff82e6bb93a8728fb4a581017f62b36df251217a07494cf24a5c134ba63a9aa9f42ddeabad24ebdf7593d428fadde53853832c7b89e9e2d6454fdc19dab8854eb3e4152df45163447b292e4418b3765c914c3472dcb7694de92dffb6948643bf9a2b14e31eaa43d7e3eeeff3b449b844e6af089f2ab41c1c130ba9f8883d588c15ba5994ded5513d998fe04c67c1d28a0f7a37da8950e1895764a85945543c7b878c94108d5f2bf3231cb89fc8e7d1b261fdd6059bf28def4d01deb2bf38000000"], 0xd0}, 0x4008000)
r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000658c038d400000002000085000000001046b9000300000001000000070000000300400000040000005f002e6100"], &(0x7f00000006c0)=""/184, 0x42, 0xb8, 0x0, 0x4}, 0x28)
write$cgroup_subtree(r6, &(0x7f00000009c0)=ANY=[@ANYBLOB='-', @ANYBLOB="d501bce8f804b62d04c4e077bdc098c9c6f41d92aa36ce9b0c35ee20843016478bb4a7fb267c634464a8bf1db292331b086fbb31c0a8f1f11dcd70f0ee697b474d454d20fa8fb5802130b00fdf57f120c67de4098b9213e7416c8225f6d02bef019e2717c13febfb248868b39387db7992962eaebc7e68f18ad54d85c95f7f4a8093a49e8b584f9779a048b8e4423b7768ae72770038cb53b33365c3cabc8ae5cdd4ee1409483866d8e9829c1486ffd3e7c8d7eed505f3cc52e8491b0fe147cb92f03f4a8edaf4340c6db96f95cbdd0fe800"], 0x27)
r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, &(0x7f0000000040))
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r10 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r10, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x161)
perf_event_open$cgroup(&(0x7f0000000940)={0x4, 0x80, 0x3, 0x9, 0xa, 0x5, 0x0, 0x7, 0x200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x2, 0x93, 0x3ff, 0x4, 0x9, 0x9, 0x5, 0x0, 0x80, 0x0, 0x39}, r9, 0xa, 0xffffffffffffffff, 0x0)

2.666034087s ago: executing program 1 (id=3777):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33)
r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110c700000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000000040000000a00000000000000102300", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xc)
syz_clone(0x200, 0x0, 0xfffffd04, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x40000100)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x100188, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="02130209", 0x4}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r3, 0x84, 0x25, &(0x7f0000000000)=r6, 0x20000010)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r9 = socket$kcm(0xa, 0x2, 0x73)
ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x541b, &(0x7f0000000500))
openat$cgroup_subtree(r8, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000))
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00\x00\x00\x00\x00')
write$cgroup_devices(r8, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000500), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000140)=[{}], 0x8, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x71, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07e03406000043fe0000070600000ee60000bf050000000000003d3500000000000065070000020000e3260700004c0000001f75000000000000bf5400000000000007040000f0fff8ffad350100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792138e042ce31c2b7ae994a5642cb064ecd5615f3196e3359aceb768637e60bd5d2e4b5992de991371274fdff6e79fc722e25659a7c85615c1b88bc894123cfe3614e887ffffff7f381ef4932cb0dcebea6d90e9c1677fbefd35893d883a2c559b7a34db461b197baf8ebb7c11a8df40d92706d0bbcc5bf6fec345ae9606c3c1a348f9b395592c1f9ae5de8923b27a6fdc20441018e5e4b41b13000c94df1f2db24c67d4c7ba9ec035883e2791a9e9dff3e8bfc7d1be00000082018f5f4b2c00000000000000387a601e3a3412086dee84efd375f0645f3301f55d3b9efdfbed9b430bcf0418e100bdff1c8bcfc0c229874bc3d2418bab997c8bef9aa55841caa572ddff9220c67c9e17bee524c3dc747445763ecb0a7f2cd12bc34b0fc6273786b5bba17e9b8f1c2af8e23c411a4d1124cfb5279195f701000000f77c71294bbfd85878726c49eb89085967722d98cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd7817450bc7921dd372e621dd447b86e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6e312bdb8261d0dc10cac6a27e29f171b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b134dfc948f6015e0389d7f34cb9c02cf517c8ed7a9b6159c1446ef1c2ccff2bde95aa860ed9b836d6b8fcab7663d9bd8415e6f90fdb007b8f3e009000000000000002eb85073720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a90002d9cf81bcb1d262845762f6b0a284cc463b42492bab0f7b25895cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250bbce4f618cad2375a34c7f15c3096f3e9004468cf1aba4a6f22ed0eb3681c6963205eefc072ab79ad8b126500419e25a94ce13a7a96deac79c90b8df10b1e364cf97eaa49fd2294320fad0d814f230f954eec844f6b658ee04eb1c6d655a3383928d6e0307a7097b0a5fa5040958d2b7ad0eb7605a7de7ce9cf0e6b472d764976fbf7edd83dac8b9273976bfd6090de0a73cf8a9b2c23500a4054703e2df18d8498356e3c1cd6418e149f8a22e95da26221d8a69b642915471f4917571357aa9df385c0532d6e70263ec616f88dc8f93c886ede7743c53d738b9c7021f0032970eabd2808c53128b3eb600f2614256184c506454980e542ce450029aa6de147a8c81e6f701a4b9b278b08e4b02710907923f0797f96413054f2d1b5f2ba0c49567b53db5d862acf2c42faa37c4a8738f64ed7fef9ffba58a3c1ca52b55aef071e4f11334e3a70918e5b18dab84decde74d616b5b05c96378acc79375a7ebdb54b01d512de48184950f5cac97f0a6dcc6d12c48c6e3b925fee7974ca8f3009188bbecc30e1adbc290ac99555ec069636a8079f8ca80343ff84e896dda2d4148f982feff6b38699fb57aab5596479f84b59daa9a406c5119761d5aabb51c5175461f8b0aa7265c380317f08775d8a8a8bda64ada2c6b3599f548d6272937e4d89ef6ebcecf84fa856024b55dd057056bbae005f0fba858f3abdd9c115064000000000000000000070b0bb28fd1eca97a90864863235d415379d1bdb3d35015f85be2ae802455d3b079f12aa837996ca1ce7280cb394b4c13ca623c30b19887d41eab495f698284a1bc17ff100000000000000000000dac089bdf7984e3300000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x94)

2.599494779s ago: executing program 3 (id=3779):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000080)}, 0x0)

2.514057802s ago: executing program 0 (id=3780):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10)
r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[], 0xb)
perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="62202a3a2a20720033e3e871ed566cdf2b"], 0x8)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005", 0x15}], 0x1}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000001c0)={0x5, &(0x7f0000000180)=[{0x9, 0x5, 0x3}, {0xb, 0x7, 0x7, 0xffffffff}, {0x8, 0x1, 0x5a, 0x9}, {0x0, 0x6, 0x0, 0x1}, {0x6, 0xe, 0xf0, 0xffff}]})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa)
r9 = openat$cgroup_devices(r4, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r9, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))

2.489536142s ago: executing program 2 (id=3781):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000009b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2000)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000002815c180535a968d12134e46a3dae86a81de0f844b7eb2d9321a86340276b944ce530f2d50c95069fdfa8457ccd291"], &(0x7f00000001c0)='GPL\x00'}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r5}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0x77, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xaa, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r6, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', r8, @fallback=0x2f, r10, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r9}, 0x94)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611871000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r11}, &(0x7f0000000080), &(0x7f0000000200)=r12}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r13 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = socket$kcm(0x23, 0x2, 0x0)
write$cgroup_pressure(r15, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r14)
syz_clone(0x4002003a, 0x0, 0x0, 0x0, 0x0, 0x0)

2.405037395s ago: executing program 3 (id=3782):
socket$kcm(0x2, 0x5, 0x84)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x5, 0x3, 0x4, 0x9e, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7d2, 0x1, @perf_bp={0x0, 0x7}, 0x400, 0xf7, 0x0, 0x8, 0x3, 0xe, 0x2, 0x0, 0x8, 0x0, 0x8})
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xc8a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5632e2e"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xd, 0x7, 0xc, 0x1, 0x0, 0x8, 0x80494, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000400), 0xfd74938b5cb12e0c}, 0x2, 0x4, 0x10, 0x5, 0x8, 0x800, 0x10, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000740)=@raw=[@ringbuf_query, @ringbuf_query, @map_idx={0x18, 0x4, 0x5, 0x0, 0x9}, @generic={0xc, 0x7, 0x7, 0x5, 0x9}], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

2.23812582s ago: executing program 4 (id=3783):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

2.23518552s ago: executing program 0 (id=3784):
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0))

2.014862397s ago: executing program 3 (id=3785):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={0x0, 0x0, 0x10}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r2, 0x0, 0xa, &(0x7f0000000180)='syzkaller\x00'}, 0x30)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
close(r5)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7}, 0xc)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000240), 0x66)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="4f33e363a4b1"})

1.883127812s ago: executing program 4 (id=3786):
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f00)={0x15, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4}]}, &(0x7f0000001a40)='syzkaller\x00', 0x4, 0xb3, &(0x7f0000000140)=""/179}, 0x80)
perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) (rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000c40)='lo\x00)o\xd6Q\xb4Y\xa9\xc87,\x00\xd2\xd1|A\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\xdc\x00\x00\x00\xaa\x04$\xde\x19\x15\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcdL\xb8\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\xc3\x83\xd5e\xf1\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\xff\x0fy\x06\xd9$H!w\xa6m\xd8\x99\xf7\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8\x917[\xc3\xe2\xeb\x9d&-\x0e\x9e#\xd9\xd6\xe2\x85\\\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3@\xc3\"4C\x9c\x00\xac\xba\xcb\xa4h\x86w_\x19\xfbjG%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\"\xd8\xb6\r\xe3\xa8s\x91I\xbe\x9f\xee\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3\xe3!%\xbd\x00\x00\x00\x00\xb2\f\x9fI{\xccP\x92\x1b\xbdm2\x1fdFWp\x8bV\xe0\x94\x1c\x9e\xe0`\n\x9aH\x85\xc0\xa8\x846\xa4\xae5\xcbC\xf6\xd1zRi\x9e\xe6\x8b+\x04qK\xd0\xd5\\39\xc2\x14\xca\xa5\x91\xdc\x0f\xaa\xa5\a,<)\x11hl\xf8\x96)\xbd\xeb\xd2p2\x11\xd3\xa7\xb8N\xc2\x96\x1f\xc1\x88e\xbc\xde\x97_A\x9f)3\xf9\x115\xd8\xea\x97B\xbf\xb3DQ\xb4nQ\x04\xc8\x9a\xf5\xf6\xf6\xe7\xe0\x80\x17\xf06\xba\xcc\xe2fw')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500001000000061100c000000000063014800000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r2 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp={0x2, 0x0, @remote}, 0x80, 0x0}, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c46, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32)
r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)=')]^&-(*}\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x2b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x7a6c}, 0x94)
close(0xffffffffffffffff) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000000)
close(0xffffffffffffffff) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='\x00') (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0xb004, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e12080005007f3704d373000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d1684683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x14040090)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce98000000000000d6080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffd}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x1}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28)

1.746512246s ago: executing program 0 (id=3787):
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x6, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4085}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={'ip6gretap0\x00', @local})
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x26e1, 0x0)
close(r3)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28)
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x61}, {0x6, 0xda}]})
recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0xa, 0x2, 0x88)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x22, 0x2, 0x21)
r4 = socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0)

1.478751654s ago: executing program 4 (id=3788):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3f1}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200})
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8940, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a000000009500002000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETDEBUG(r7, 0x400454c9, 0x0)
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg\x00', 0x200})
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xf5dc452665ff68a6, 0xc, &(0x7f0000001dc0)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRES16, @ANYBLOB="d0a5121d3c128ef0ce5953a2ec0503a0d9fe96bae01a244dffdcc974b9d4b7ebf0fa54652e84a0", @ANYRES64=r1, @ANYRES8, @ANYRES32=r0, @ANYRES8=r3, @ANYBLOB="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"], 0x0, 0x3, 0x0, 0x0, 0xc0e00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.356532038s ago: executing program 1 (id=3789):
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x2f23fa3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="d8000000210081044e810382db44b9040a00007ffefe0500002015000600142603600e12090006000468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40dd6e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0)

1.342660498s ago: executing program 3 (id=3790):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r1 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80044944, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="4db39d0f728487a28239abfa27a3b8d9fda900fd95986d5b61e818ee3b2e2084a974a1622f16f2d8947dcebbd178e6e38c75cb72754d50af194447a3c24f0bde4564ec4f47c5fbf42fece5891d5d870d40673138b6efae8e5e5f403244366918fcc838d66bab08eb48f4699d4b3914d4837d6e9771c50fa14883910a7c206b444c321799d37c", @ANYBLOB="882154303481916509a1ed4805e01bcb564f7b8fb2b901c90824c93c21b56ac401301d6389a1c2e8900a7183540b767d907a457680246226c25687ecfb0634bf500d75cd96b014dcec9b55e59c3824cba74761a8e7b08bc153d096886c0e2e78c7fbac2f4dfa9073277ec4c56cefc5c6b800e83f52b0aab4f4a67a64a3d1b5275234dd3f3afdc45c2c47b8fac533ad10aa4394f88ea2035e7b38136ebc79b216fb85efee99026b39ddd8d4380942b2412f4d6428a72c07eca70f0ff9eb33502c460fa8660c77c9e42b7a"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socket$kcm(0x22, 0x3, 0x0) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x80044944, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x50) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="4db39d0f728487a28239abfa27a3b8d9fda900fd95986d5b61e818ee3b2e2084a974a1622f16f2d8947dcebbd178e6e38c75cb72754d50af194447a3c24f0bde4564ec4f47c5fbf42fece5891d5d870d40673138b6efae8e5e5f403244366918fcc838d66bab08eb48f4699d4b3914d4837d6e9771c50fa14883910a7c206b444c321799d37c", @ANYBLOB="882154303481916509a1ed4805e01bcb564f7b8fb2b901c90824c93c21b56ac401301d6389a1c2e8900a7183540b767d907a457680246226c25687ecfb0634bf500d75cd96b014dcec9b55e59c3824cba74761a8e7b08bc153d096886c0e2e78c7fbac2f4dfa9073277ec4c56cefc5c6b800e83f52b0aab4f4a67a64a3d1b5275234dd3f3afdc45c2c47b8fac533ad10aa4394f88ea2035e7b38136ebc79b216fb85efee99026b39ddd8d4380942b2412f4d6428a72c07eca70f0ff9eb33502c460fa8660c77c9e42b7a"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async)

1.155340404s ago: executing program 0 (id=3791):
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804)
sendmsg$inet(r0, 0x0, 0x0)
recvmsg$kcm(r0, 0x0, 0x100)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x7, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80240, 0x0)
r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x8, 0xc8, 0x9, 0x3, 0x0, 0xb, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080005000300010004000600eab556a705", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5)
recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000000"], 0xfdef)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth1_to_team\x00', 0x600})
r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x9aea7ec9, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f00f90224fc6010c2080000000200053582c137143e37000c0680050002000300", 0x33fe0}], 0x1}, 0x4000840)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000001c0)='cpu&\'\'\t|\t')

566.067603ms ago: executing program 4 (id=3792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f00000004c0)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x8841)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x1d, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x18}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b23d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) (async)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)) (async)
close(r0)

565.637173ms ago: executing program 1 (id=3793):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000002700000095000000000000a688e125801fae3200"], &(0x7f00000001c0)='syzkaller\x00'}, 0x7e)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xdaaf}, 0x929, 0x0, 0x0, 0xe, 0x2, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000085000000080000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0x4b, 0x0, &(0x7f0000001880)="d14929d2fe5192646e572b2ed647d3b220642eb5686a0d46c6a4badb49eec14386c7e65b089b920d16d013da699e73348ba8c6d860fce9ac129bdc2f4d83f288cb701a1b31f1fb9b0a527e"}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2d, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000480)}}, 0x10)
r3 = socket$kcm(0x10, 0x3, 0x10)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg(r4, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2}, {0x200, 0x2000, 0x1}, {0xfffffbfd, 0x4, 0x10406, 0x3}]}, 0x94)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030020000b12d25a80648c2594f90124fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000003000000080000000000001201040000005f003a7bf2ef08db2b7cb3cd50a798549b3e133b00b6ea5063e93a17d1138df4b5e2a9edd0b49d65563c9fc71f96a484b22665f837e60449ebffb26742effef9d08cea2c45b6f28c7a07a22873675c9a97a8811a38048974a848e3de152fb0bd2038c45b24c34770897264335157df53a9fc88d191ab8f806064ba6a6e9da322684d97e7ddd18347e176083fa6c7e009f58a862310253c7b899288c35df72f28d81508606ec1b87d8f257047ba395aec2277c6f312b913126399191caa96c14cca3e6b26537fecdb417269b47b6d5aa79007c05cd943c76b35cb"], &(0x7f0000000640)=""/68, 0x27, 0x44, 0x0, 0x9, 0x10000}, 0x28)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r8, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x28, 0x0, 0x7, {[@generic={0xd7, 0x2}, @timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0)
r9 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x18}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETLINK(r9, 0x400454cd, 0x10f)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001840)=@o_path={&(0x7f0000001780)='./file0\x00', 0xffffffffffffffff, 0x4000, r11}, 0x18)
openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000b00)='memory.pressure\x00', 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x8, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xe4bc}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001640)={r12, &(0x7f0000001500)="bafc547aa46af25e2e405be6a8b7fe9fa3bcb6a981aa90bf8d4ad9102889994ab0ee253778e04f2a00045e70af66b246777d9bac05e3245cf10e8ade4fd27e58b17cce1ca2d8eb69865f6c042c1951c60e777a33f0f8c2000b3040de490ce7df84ff8cd63dfcef4c2f10db55636323adbd3c96421d99816c3def6287a933c177509bd95bc5559074a2bb92db6b3f9c1e735b1bf27bd7d89a72fc9af89266929e0f810fd4ac9e5985b4dadef7cf07fccfd0e1fc54b474d6c8d218ad5bfc53a088ff29678a035cf34dd51594bc63a2e54d23a93082fa46159cf87fa9cb7f8671b2e469639a564b", &(0x7f0000001600)=""/48}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x1c, &(0x7f0000001900)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x20008}, @alu={0x7, 0x1, 0xa, 0x7, 0x7, 0xfffffffffffffff0, 0x10}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x10000, 0x0, 0x0, 0x40f00, 0x22, '\x00', r2, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x2, 0x5, 0xfffffeff, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000840)=[r7, r10, r12], &(0x7f00000009c0)=[{0x3, 0x5, 0x9, 0xc}, {0x5, 0x3, 0x5, 0x2}, {0x2, 0x3, 0x1, 0x9}, {0x0, 0x2, 0x88, 0xa}, {0x4, 0x1, 0x1, 0xc}, {0x5, 0x2, 0xa}, {0x1, 0x4, 0xa, 0x4}, {0x4, 0x3, 0x5, 0x3}], 0x10, 0x101}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)

433.340577ms ago: executing program 0 (id=3794):
socket$kcm(0xa, 0x2, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000000)=[{&(0x7f0000000300)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f698535c24a4e663bdfcba69d0", 0x66}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b904201d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800)

311.170291ms ago: executing program 1 (id=3795):
socket$kcm(0x2, 0x5, 0x84)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x5, 0x3, 0x4, 0x9e, 0x0, 0x6, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7d2, 0x1, @perf_bp={0x0, 0x7}, 0x400, 0xf7, 0x0, 0x8, 0x3, 0xe, 0x2, 0x0, 0x8, 0x0, 0x8})
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xc8a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES64, @ANYBLOB="f9ffffffffffffffdcd5632e2e"], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0xd, 0x7, 0xc, 0x1, 0x0, 0x8, 0x80494, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000400), 0xfd74938b5cb12e0c}, 0x2, 0x4, 0x10, 0x5, 0x8, 0x800, 0x10, 0x0, 0x3, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000740)=@raw=[@ringbuf_query, @ringbuf_query, @map_idx={0x18, 0x4, 0x5, 0x0, 0x9}, @generic={0xc, 0x7, 0x7, 0x5, 0x9}], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)

205.991854ms ago: executing program 4 (id=3796):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)

78.559928ms ago: executing program 4 (id=3797):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xbd9ddb11bfb6c30d}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98723127d2", &(0x7f0000000340), 0xffffffff, r3}, 0x38)
r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0xc)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24044084)

5.40321ms ago: executing program 0 (id=3798):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x5b84, @empty, 0xd05}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYRES32=r0], 0x10b8}, 0x80e0)

0s ago: executing program 1 (id=3799):
r0 = getpid()
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x19, &(0x7f0000000000)=r3, 0x8)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={0xffffffffffffffff, 0x0, 0x20}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r3, 0x0, 0x15, &(0x7f00000000c0)='\x00\x00\x00\x8a\xbc\xdc\xb7\xa8\xa0c\x16\x03\x05\x8e-\xadR\x00\x00\x00\x00'}, 0x30)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x80000000, 0x12)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

5] RBP: 00007fdd73e1b090 R08: 0000000000000000 R09: 0000000000000000
[  350.102298][T12345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  350.110338][T12345] R13: 00007fdd75e3b038 R14: 00007fdd75e3afa0 R15: 00007fff92d01b08
[  350.118445][T12345]  </TASK>
[  351.302942][T12346] netlink: 'syz.1.2666': attribute type 10 has an invalid length.
[  351.496574][T12346] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  351.544506][T12370] netlink: 'syz.0.2675': attribute type 28 has an invalid length.
[  351.568549][T12370] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  351.576687][    C0] bridge0: port 4(dummy0) entered forwarding state
[  351.576761][    C0] bridge0: topology change detected, propagating
[  351.647809][T12370] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2675'.
[  351.842885][T12383] netlink: 'syz.4.2678': attribute type 21 has an invalid length.
[  351.876978][T12383] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2678'.
[  351.909584][T12383] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2678'.
[  351.975455][T12382] netlink: 'syz.3.2679': attribute type 21 has an invalid length.
[  352.509355][T12400] netlink: 181936 bytes leftover after parsing attributes in process `syz.0.2684'.
[  352.569164][T12401] FAULT_INJECTION: forcing a failure.
[  352.569164][T12401] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.624857][T12401] CPU: 0 PID: 12401 Comm: syz.4.2685 Not tainted syzkaller #0
[  352.632421][T12401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  352.642545][T12401] Call Trace:
[  352.645882][T12401]  <TASK>
[  352.648864][T12401]  dump_stack_lvl+0x188/0x250
[  352.653630][T12401]  ? show_regs_print_info+0x20/0x20
[  352.658905][T12401]  ? load_image+0x400/0x400
[  352.663517][T12401]  ? __lock_acquire+0x7d10/0x7d10
[  352.668652][T12401]  should_fail+0x38c/0x4c0
[  352.673174][T12401]  _copy_from_iter+0x22e/0x1170
[  352.678115][T12401]  ? __lock_acquire+0x7d10/0x7d10
[  352.683238][T12401]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  352.688705][T12401]  ? __virt_addr_valid+0x3c6/0x470
[  352.693891][T12401]  ? __phys_addr_symbol+0x2b/0x70
[  352.699004][T12401]  ? __check_object_size+0x30c/0x410
[  352.704381][T12401]  netlink_sendmsg+0x758/0xbe0
[  352.709249][T12401]  ? netlink_getsockopt+0x570/0x570
[  352.714529][T12401]  ? aa_sock_msg_perm+0x94/0x150
[  352.719546][T12401]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  352.724897][T12401]  ? security_socket_sendmsg+0x7c/0xa0
[  352.730430][T12401]  ? netlink_getsockopt+0x570/0x570
[  352.735693][T12401]  ____sys_sendmsg+0x5b7/0x8f0
[  352.740565][T12401]  ? __sys_sendmsg_sock+0x30/0x30
[  352.745699][T12401]  ? import_iovec+0x6f/0xa0
[  352.750283][T12401]  ___sys_sendmsg+0x236/0x2e0
[  352.755062][T12401]  ? __sys_sendmsg+0x2a0/0x2a0
[  352.759943][T12401]  ? vfs_write+0x8b2/0xd60
[  352.764535][T12401]  __se_sys_sendmsg+0x1af/0x290
[  352.769467][T12401]  ? __x64_sys_sendmsg+0x80/0x80
[  352.774465][T12401]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  352.780574][T12401]  ? lockdep_hardirqs_on+0x94/0x140
[  352.785858][T12401]  do_syscall_64+0x4c/0xa0
[  352.790335][T12401]  ? clear_bhb_loop+0x30/0x80
[  352.795072][T12401]  ? clear_bhb_loop+0x30/0x80
[  352.799823][T12401]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  352.805768][T12401] RIP: 0033:0x7fdd75bc1e59
[  352.810244][T12401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  352.829916][T12401] RSP: 002b:00007fdd73e1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.838416][T12401] RAX: ffffffffffffffda RBX: 00007fdd75e3afa0 RCX: 00007fdd75bc1e59
[  352.846454][T12401] RDX: 00000000000408e0 RSI: 0000200000000000 RDI: 0000000000000005
[  352.854490][T12401] RBP: 00007fdd73e1b090 R08: 0000000000000000 R09: 0000000000000000
[  352.862521][T12401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.870548][T12401] R13: 00007fdd75e3b038 R14: 00007fdd75e3afa0 R15: 00007fff92d01b08
[  352.878651][T12401]  </TASK>
[  352.936425][T12396] netlink: 'syz.0.2684': attribute type 12 has an invalid length.
[  352.960965][T12396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2684'.
[  354.313041][T12425] netlink: 'syz.0.2692': attribute type 21 has an invalid length.
[  354.354883][T12425] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2692'.
[  354.410756][T12425] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2692'.
[  355.733541][T12470] netlink: 'syz.0.2705': attribute type 10 has an invalid length.
[  356.731297][T12498] netlink: 'syz.2.2718': attribute type 10 has an invalid length.
[  356.739449][T12498] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2718'.
[  357.695795][T12528] netlink: 'syz.3.2726': attribute type 41 has an invalid length.
[  357.770391][T12525] netlink: 'syz.2.2725': attribute type 21 has an invalid length.
[  357.796869][T12525] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2725'.
[  357.860658][T12525] netlink: 'syz.2.2725': attribute type 4 has an invalid length.
[  357.890846][T12525] netlink: 'syz.2.2725': attribute type 3 has an invalid length.
[  357.940375][T12525] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2725'.
[  358.479120][T12549] netlink: 'syz.2.2734': attribute type 29 has an invalid length.
[  358.549223][T12549] netlink: 'syz.2.2734': attribute type 29 has an invalid length.
[  358.639634][T12555] netlink: 'syz.3.2736': attribute type 10 has an invalid length.
[  358.680059][T12555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2736'.
[  358.745560][T12558] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2737'.
[  359.289165][T12571] device syzkaller0 entered promiscuous mode
[  359.339421][T12576] validate_nla: 3 callbacks suppressed
[  359.339440][T12576] netlink: 'syz.0.2743': attribute type 21 has an invalid length.
[  359.374092][T12576] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2743'.
[  359.390407][T12576] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2743'.
[  359.808129][T12597] netlink: 'syz.3.2748': attribute type 12 has an invalid length.
[  359.843420][T12597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2748'.
[  359.871879][T12593] netlink: 'syz.3.2748': attribute type 21 has an invalid length.
[  359.913050][T12593] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2748'.
[  359.977272][T12602] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2751'.
[  360.333901][T12624] netlink: 'syz.1.2757': attribute type 21 has an invalid length.
[  360.607170][T12631] netlink: 'syz.1.2759': attribute type 10 has an invalid length.
[  360.894594][T12658] netlink: 'syz.2.2765': attribute type 10 has an invalid length.
[  360.908666][T12658] netlink: 'syz.2.2765': attribute type 10 has an invalid length.
[  361.212847][T12667] delete_channel: no stack
[  361.247389][T12675] netlink: 'syz.0.2771': attribute type 21 has an invalid length.
[  361.589037][T12681] netlink: 'syz.4.2772': attribute type 10 has an invalid length.
[  362.082721][T12705] netlink: 'syz.3.2783': attribute type 21 has an invalid length.
[  362.115873][T12705] __nla_validate_parse: 9 callbacks suppressed
[  362.115941][T12705] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2783'.
[  362.190718][T12705] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2783'.
[  362.314842][T12706] delete_channel: no stack
[  363.052282][T12743] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2797'.
[  363.061822][T12743] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2797'.
[  363.710769][T12752] delete_channel: no stack
[  364.162410][T12780] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.2809'.
[  364.375265][T12789] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2811'.
[  364.513089][T12760] chnl_net:caif_netlink_parms(): no params data found
[  364.740930][T12760] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.763340][T12760] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.823585][T12760] device bridge_slave_0 entered promiscuous mode
[  364.875007][T12760] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.899202][T12760] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.908897][T12760] device bridge_slave_1 entered promiscuous mode
[  364.934792][T12803] delete_channel: no stack
[  365.003241][T12760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  365.056253][T12760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  365.194102][T12760] team0: Port device team_slave_0 added
[  365.212966][T12760] team0: Port device team_slave_1 added
[  365.277311][T12760] batman_adv: batadv0: Adding interface: batadv_slave_0
[  365.337856][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.468093][T12760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.519692][T12760] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.541274][T12760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  365.625816][T12760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.712099][T12830] validate_nla: 3 callbacks suppressed
[  365.712156][T12830] netlink: 'syz.0.2824': attribute type 10 has an invalid length.
[  365.740519][T12830] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2824'.
[  365.751953][T12830] device hsr0 entered promiscuous mode
[  365.810548][T10834] Bluetooth: hci5: command 0x0409 tx timeout
[  365.848197][T12833] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2824'.
[  365.925762][T12760] device hsr_slave_0 entered promiscuous mode
[  365.949706][T12760] device hsr_slave_1 entered promiscuous mode
[  365.967819][T12760] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  366.002031][T12760] Cannot create hsr debugfs directory
[  366.116721][T12839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2826'.
[  366.480976][T12845] delete_channel: no stack
[  366.578894][  T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.703978][  T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.726671][T12855] netlink: 'syz.3.2832': attribute type 12 has an invalid length.
[  366.736543][T12855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2832'.
[  366.757693][T12858] netlink: 'syz.3.2832': attribute type 21 has an invalid length.
[  366.846704][  T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.956517][  T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.221822][T12868] device syzkaller0 entered promiscuous mode
[  367.239529][T12871] netlink: 'syz.2.2838': attribute type 10 has an invalid length.
[  367.270106][T12871] __nla_validate_parse: 1 callbacks suppressed
[  367.291389][T12871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2838'.
[  367.836001][T12882] delete_channel: no stack
[  367.900458][T10831] Bluetooth: hci5: command 0x041b tx timeout
[  367.962441][T12899] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2845'.
[  367.975310][T12899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2845'.
[  368.036366][T12899] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2845'.
[  368.071225][T12902] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2845'.
[  368.506813][T12919] netlink: 'syz.0.2850': attribute type 10 has an invalid length.
[  368.540638][T12919] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2850'.
[  368.576935][T12919] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  368.659623][T12760] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  368.837926][T12760] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  368.858606][T12931] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2854'.
[  368.877380][T12760] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  368.948590][T12760] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  369.070038][T12937] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2854'.
[  369.111508][T12934] netlink: 'syz.3.2855': attribute type 10 has an invalid length.
[  369.119968][T12934] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2855'.
[  369.155296][T12934] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2855'.
[  369.392053][T12939] delete_channel: no stack
[  369.545521][T12760] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.616195][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  369.644712][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  369.712332][T12760] 8021q: adding VLAN 0 to HW filter on device team0
[  369.786920][T12961] netlink: 'syz.0.2862': attribute type 10 has an invalid length.
[  369.836670][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  369.854930][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  369.886199][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.893387][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.980714][T10831] Bluetooth: hci5: command 0x040f tx timeout
[  370.059009][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  370.084514][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  370.126349][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  370.163833][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.171033][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  370.229035][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  370.271550][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  370.309092][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  370.335191][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  370.364172][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  370.381415][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  370.406393][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  370.426658][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  370.446887][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  370.482855][T12980] netlink: 'syz.0.2874': attribute type 29 has an invalid length.
[  370.506071][T12980] netlink: 'syz.0.2874': attribute type 29 has an invalid length.
[  370.575812][T12979] netlink: 'syz.3.2866': attribute type 10 has an invalid length.
[  370.592309][T12979] device dummy0 entered promiscuous mode
[  370.617273][T12979] bridge0: port 4(dummy0) entered blocking state
[  370.638332][T12979] bridge0: port 4(dummy0) entered disabled state
[  370.689570][T12760] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  370.724531][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  370.736576][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  370.761451][T12977] netlink: 'syz.0.2874': attribute type 29 has an invalid length.
[  370.847491][T12988] netlink: 'syz.2.2867': attribute type 15 has an invalid length.
[  370.896118][T12988] netlink: 'syz.2.2867': attribute type 7 has an invalid length.
[  371.214855][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  371.229991][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  371.304406][T12760] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.420832][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  371.430848][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  371.479147][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  371.489620][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  371.512135][T12760] device veth0_vlan entered promiscuous mode
[  371.543123][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  371.552767][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  371.565620][T12760] device veth1_vlan entered promiscuous mode
[  371.628879][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  371.645432][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  371.662779][T12760] device veth0_macvtap entered promiscuous mode
[  371.692744][T12760] device veth1_macvtap entered promiscuous mode
[  371.717514][  T144] team0: Port device wlan1 removed
[  371.742285][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.753171][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.764756][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.775838][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.790323][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  371.801317][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.813745][T12760] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.823706][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  371.834215][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  371.843667][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  371.858780][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  371.878506][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.909564][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.924787][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.935779][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.951085][T12760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  371.966282][T12760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  371.979419][T13010] netlink: 'syz.4.2873': attribute type 29 has an invalid length.
[  371.988372][T13010] netlink: 'syz.4.2873': attribute type 3 has an invalid length.
[  371.988701][T12760] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.029701][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  372.044563][T13000] delete_channel: no stack
[  372.050669][T10831] Bluetooth: hci5: command 0x0419 tx timeout
[  372.057573][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  372.082796][T12760] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.100345][T12760] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.109330][T12760] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.118664][T12760] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.176694][  T144] device hsr_slave_0 left promiscuous mode
[  372.198467][  T144] device hsr_slave_1 left promiscuous mode
[  372.206516][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.224631][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.247237][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.275495][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.303799][  T144] device veth1_macvtap left promiscuous mode
[  372.694230][T13029] __nla_validate_parse: 4 callbacks suppressed
[  372.694250][T13029] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.2882'.
[  372.732104][  T144] team0 (unregistering): Port device team_slave_1 removed
[  372.759450][  T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.778405][  T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.798607][  T144] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  372.853755][  T144] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  372.898823][  T144] bond0 (unregistering): Released all slaves
[  373.083158][ T1225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.103382][ T1225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.114680][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  373.144059][T13037] cgroup: fork rejected by pids controller in /syz4
[  373.209337][ T4379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  373.227973][ T4379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  373.261654][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  373.608645][T13150] netlink: 'syz.2.2899': attribute type 2 has an invalid length.
[  373.629003][T13150] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.2899'.
[  374.865327][T13186] netlink: 'syz.0.2907': attribute type 1 has an invalid length.
[  374.889921][T13186] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2907'.
[  374.901263][T13186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  375.186399][T13177] chnl_net:caif_netlink_parms(): no params data found
[  375.281571][T13191] netlink: 'syz.3.2909': attribute type 39 has an invalid length.
[  375.624665][T13177] bridge0: port 1(bridge_slave_0) entered blocking state
[  375.708193][T13177] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.765254][T13177] device bridge_slave_0 entered promiscuous mode
[  375.781722][T13217] netlink: 'syz.1.2917': attribute type 39 has an invalid length.
[  376.291660][T13177] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.304485][T13177] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.343645][T13177] device bridge_slave_1 entered promiscuous mode
[  376.594319][T13177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.620379][T10830] Bluetooth: hci2: command 0x0409 tx timeout
[  376.635650][T13177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.744654][T13177] team0: Port device team_slave_0 added
[  376.818974][T13177] team0: Port device team_slave_1 added
[  376.868024][T13235] netlink: 'syz.0.2921': attribute type 10 has an invalid length.
[  377.154139][T13177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.178303][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.268791][T13177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.291410][T13177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.298697][T13177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.349184][T13177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.395138][T13177] device hsr_slave_0 entered promiscuous mode
[  377.402527][T13177] device hsr_slave_1 entered promiscuous mode
[  377.443019][T13177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  377.492342][T13177] Cannot create hsr debugfs directory
[  377.507092][T13249] netlink: 'syz.1.2928': attribute type 29 has an invalid length.
[  377.539917][T13249] netlink: 'syz.1.2928': attribute type 29 has an invalid length.
[  377.598438][T13254] netlink: 'syz.1.2928': attribute type 29 has an invalid length.
[  377.887313][T13177] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.967009][T13266] netlink: 'syz.0.2934': attribute type 29 has an invalid length.
[  378.009294][T13177] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.020133][T13266] netlink: 'syz.0.2934': attribute type 3 has an invalid length.
[  378.051527][T13266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2934'.
[  378.137440][T13177] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.250963][T13177] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.452763][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.459197][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  378.509463][T13288] netlink: 'syz.3.2942': attribute type 1 has an invalid length.
[  378.554896][T13288] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2942'.
[  378.693302][T10836] Bluetooth: hci2: command 0x041b tx timeout
[  378.700038][T13177] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  378.733745][T13177] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  378.781862][T13177] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  378.842882][T13177] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  382.359190][T10836] Bluetooth: hci2: command 0x040f tx timeout
[  382.465332][T13177] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.584377][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  382.598193][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  382.634074][T13177] 8021q: adding VLAN 0 to HW filter on device team0
[  382.670762][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  382.681938][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  382.712545][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.719675][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.805540][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  382.823762][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  382.867462][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  382.886974][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.894243][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.922622][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  383.044332][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  383.067212][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  383.110794][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  383.167480][T13342] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2961'.
[  383.391409][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  383.447495][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  383.472535][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  383.774179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  383.794382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  383.836870][T13177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  383.922297][T13177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  383.954745][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  383.987219][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  384.371927][T10830] Bluetooth: hci2: command 0x0419 tx timeout
[  384.490597][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  384.499637][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  384.545388][T13177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  385.018131][T13385] device syzkaller0 entered promiscuous mode
[  385.125365][T13387] netlink: 'syz.0.2972': attribute type 21 has an invalid length.
[  385.139031][T13389] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2972'.
[  385.160686][T13387] netlink: 14378 bytes leftover after parsing attributes in process `syz.0.2972'.
[  385.269686][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  385.291955][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  385.625621][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  385.667642][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  385.736889][T13177] device veth0_vlan entered promiscuous mode
[  385.804475][  T144] device wlan1 left promiscuous mode
[  385.827571][  T144] team0: Port device wlan1 removed
[  385.910616][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  385.930800][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  385.982900][T13177] device veth1_vlan entered promiscuous mode
[  386.263205][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  386.295287][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  386.323467][T13177] device veth0_macvtap entered promiscuous mode
[  386.346850][T13418] netlink: 'syz.3.2980': attribute type 1 has an invalid length.
[  386.395701][T13418] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2980'.
[  386.425214][  T144] device hsr_slave_0 left promiscuous mode
[  386.440335][T13418] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2980'.
[  386.464322][  T144] device hsr_slave_1 left promiscuous mode
[  386.471045][T13417] netlink: 'syz.3.2980': attribute type 1 has an invalid length.
[  386.488180][  T144] bridge0: port 4(team0) entered disabled state
[  386.515298][T13417] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2980'.
[  386.547297][  T144] bridge0: port 3(hsr0) entered disabled state
[  386.575673][  T144] device bridge_slave_1 left promiscuous mode
[  386.602279][T13417] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2980'.
[  386.612018][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.658929][  T144] device bridge_slave_0 left promiscuous mode
[  386.699277][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.752210][  T144] device veth1_macvtap left promiscuous mode
[  386.779854][  T144] device veth0_macvtap left promiscuous mode
[  387.559850][  T144] device team_slave_1 left promiscuous mode
[  387.586437][  T144] team0 (unregistering): Port device team_slave_1 removed
[  387.613771][  T144] device team_slave_0 left promiscuous mode
[  387.641947][  T144] team0 (unregistering): Port device team_slave_0 removed
[  387.940006][T13177] device veth1_macvtap entered promiscuous mode
[  387.971336][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  387.990571][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  388.003743][T13451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2990'.
[  388.036191][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'.
[  388.053328][T13448] netlink: 'syz.3.2990': attribute type 10 has an invalid length.
[  388.070469][T13448] team0: Device bridge0 is already an upper device of the team interface
[  388.155107][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.168473][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.187362][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.201293][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.212120][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  388.229528][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.292271][T13177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  388.310318][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  388.331720][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  388.376613][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.399906][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.416479][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.427688][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.444542][T13177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  388.457101][T13469] netlink: 'syz.2.2995': attribute type 7 has an invalid length.
[  388.470402][T13469] netlink: 198988 bytes leftover after parsing attributes in process `syz.2.2995'.
[  388.479697][T13177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  388.497379][T13177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  388.506428][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  388.521607][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  388.540781][T13177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  388.549558][T13177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  388.564483][T13177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  388.574320][T13177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.193374][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.217744][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.296045][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  389.346347][ T1225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.365567][ T1225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.445070][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  390.545627][T13502] delete_channel: no stack
[  391.003333][T13531] netlink: 'syz.3.3015': attribute type 27 has an invalid length.
[  391.018136][T13531] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  391.388977][T13546] netlink: set zone limit has 8 unknown bytes
[  391.460593][T13548] netlink: 'syz.3.3019': attribute type 39 has an invalid length.
[  391.530455][T13548] device veth0_macvtap left promiscuous mode
[  391.884490][T13555] netlink: 'syz.1.3023': attribute type 29 has an invalid length.
[  392.110456][T13518] chnl_net:caif_netlink_parms(): no params data found
[  392.415904][T13555] netlink: 'syz.1.3023': attribute type 29 has an invalid length.
[  392.556780][T13518] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.597118][T13518] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.610648][T10834] Bluetooth: hci3: command 0x0409 tx timeout
[  392.639629][T13518] device bridge_slave_0 entered promiscuous mode
[  392.689068][T13518] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.706727][T13518] bridge0: port 2(bridge_slave_1) entered disabled state
[  392.737240][T13518] device bridge_slave_1 entered promiscuous mode
[  392.836700][T13518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.846717][T13574] FAULT_INJECTION: forcing a failure.
[  392.846717][T13574] name failslab, interval 1, probability 0, space 0, times 0
[  392.869916][T13518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.964330][T13574] CPU: 1 PID: 13574 Comm: syz.1.3028 Not tainted syzkaller #0
[  392.971950][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  392.982053][T13574] Call Trace:
[  392.985370][T13574]  <TASK>
[  392.988350][T13574]  dump_stack_lvl+0x188/0x250
[  392.993163][T13574]  ? show_regs_print_info+0x20/0x20
[  392.998438][T13574]  ? load_image+0x400/0x400
[  393.002994][T13574]  ? __might_sleep+0xf0/0xf0
[  393.007724][T13574]  ? __lock_acquire+0x7d10/0x7d10
[  393.012897][T13574]  ? __local_bh_enable_ip+0x136/0x1c0
[  393.018417][T13574]  should_fail+0x38c/0x4c0
[  393.022011][T13518] team0: Port device team_slave_0 added
[  393.022997][T13574]  should_failslab+0x5/0x20
[  393.033337][T13574]  slab_pre_alloc_hook+0x51/0xc0
[  393.038411][T13574]  kmem_cache_alloc_node_trace+0x4a/0x300
[  393.044175][T13574]  ? __get_vm_area_node+0x119/0x2d0
[  393.049597][T13574]  __get_vm_area_node+0x119/0x2d0
[  393.054687][T13574]  __vmalloc_node_range+0xef/0x8b0
[  393.059846][T13574]  ? netlink_sendmsg+0x5ec/0xbe0
[  393.064912][T13574]  ? netlink_data_ready+0x10/0x10
[  393.069987][T13574]  ? netlink_sendmsg+0x5ec/0xbe0
[  393.074971][T13574]  vmalloc+0x75/0x80
[  393.078907][T13574]  ? netlink_sendmsg+0x5ec/0xbe0
[  393.083884][T13574]  netlink_sendmsg+0x5ec/0xbe0
[  393.088702][T13574]  ? netlink_getsockopt+0x570/0x570
[  393.093954][T13574]  ? aa_sock_msg_perm+0x94/0x150
[  393.099032][T13574]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  393.099295][T13518] team0: Port device team_slave_1 added
[  393.104460][T13574]  ? security_socket_sendmsg+0x7c/0xa0
[  393.104525][T13574]  ? netlink_getsockopt+0x570/0x570
[  393.104547][T13574]  ____sys_sendmsg+0x5b7/0x8f0
[  393.125716][T13574]  ? __sys_sendmsg_sock+0x30/0x30
[  393.130810][T13574]  ? import_iovec+0x6f/0xa0
[  393.135459][T13574]  ___sys_sendmsg+0x236/0x2e0
[  393.140211][T13574]  ? __sys_sendmsg+0x2a0/0x2a0
[  393.145045][T13574]  ? trace_event_raw_event_lock+0x270/0x270
[  393.150992][T13574]  ? vfs_write+0x8b2/0xd60
[  393.155611][T13574]  __se_sys_sendmsg+0x1af/0x290
[  393.160517][T13574]  ? __x64_sys_sendmsg+0x80/0x80
[  393.165509][T13574]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  393.171555][T13574]  ? lockdep_hardirqs_on+0x94/0x140
[  393.176905][T13574]  do_syscall_64+0x4c/0xa0
[  393.181379][T13574]  ? clear_bhb_loop+0x30/0x80
[  393.186211][T13574]  ? clear_bhb_loop+0x30/0x80
[  393.190948][T13574]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  393.196886][T13574] RIP: 0033:0x7feeb8630e59
[  393.201347][T13574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.220999][T13574] RSP: 002b:00007feeb688a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  393.229557][T13574] RAX: ffffffffffffffda RBX: 00007feeb88a9fa0 RCX: 00007feeb8630e59
[  393.237578][T13574] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  393.245607][T13574] RBP: 00007feeb688a090 R08: 0000000000000000 R09: 0000000000000000
[  393.253626][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  393.261652][T13574] R13: 00007feeb88aa038 R14: 00007feeb88a9fa0 R15: 00007ffd6b407e18
[  393.269695][T13574]  </TASK>
[  393.308738][T13581] netlink: 'syz.2.3032': attribute type 3 has an invalid length.
[  393.322964][T13518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.350404][T13581] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3032'.
[  393.366568][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.457025][T13518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.526719][T13518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.537039][T13569] delete_channel: no stack
[  393.547572][T13518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.582566][T13518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.968790][T13574] syz.1.3028: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  393.988492][T13518] device hsr_slave_0 entered promiscuous mode
[  394.026056][T13574] CPU: 1 PID: 13574 Comm: syz.1.3028 Not tainted syzkaller #0
[  394.033612][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  394.043729][T13574] Call Trace:
[  394.047046][T13574]  <TASK>
[  394.050006][T13574]  dump_stack_lvl+0x188/0x250
[  394.054723][T13574]  ? rcu_lock_release+0x5/0x20
[  394.059635][T13574]  ? show_regs_print_info+0x20/0x20
[  394.064881][T13574]  ? load_image+0x400/0x400
[  394.069441][T13574]  warn_alloc+0x243/0x320
[  394.073963][T13574]  ? zone_watermark_ok_safe+0x240/0x240
[  394.079573][T13574]  ? kmem_cache_alloc_node_trace+0x16c/0x300
[  394.085602][T13574]  ? __get_vm_area_node+0x119/0x2d0
[  394.090866][T13574]  __vmalloc_node_range+0x2b1/0x8b0
[  394.096102][T13574]  ? netlink_data_ready+0x10/0x10
[  394.101177][T13574]  ? netlink_sendmsg+0x5ec/0xbe0
[  394.106153][T13574]  vmalloc+0x75/0x80
[  394.110087][T13574]  ? netlink_sendmsg+0x5ec/0xbe0
[  394.115081][T13574]  netlink_sendmsg+0x5ec/0xbe0
[  394.119885][T13574]  ? netlink_getsockopt+0x570/0x570
[  394.125123][T13574]  ? aa_sock_msg_perm+0x94/0x150
[  394.130104][T13574]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  394.135420][T13574]  ? security_socket_sendmsg+0x7c/0xa0
[  394.140928][T13574]  ? netlink_getsockopt+0x570/0x570
[  394.146162][T13574]  ____sys_sendmsg+0x5b7/0x8f0
[  394.150956][T13574]  ? __sys_sendmsg_sock+0x30/0x30
[  394.156047][T13574]  ? import_iovec+0x6f/0xa0
[  394.160616][T13574]  ___sys_sendmsg+0x236/0x2e0
[  394.165370][T13574]  ? __sys_sendmsg+0x2a0/0x2a0
[  394.170182][T13574]  ? trace_event_raw_event_lock+0x270/0x270
[  394.176109][T13574]  ? vfs_write+0x8b2/0xd60
[  394.180582][T13574]  __se_sys_sendmsg+0x1af/0x290
[  394.185553][T13574]  ? __x64_sys_sendmsg+0x80/0x80
[  394.190556][T13574]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  394.196604][T13574]  ? lockdep_hardirqs_on+0x94/0x140
[  394.201871][T13574]  do_syscall_64+0x4c/0xa0
[  394.206333][T13574]  ? clear_bhb_loop+0x30/0x80
[  394.211059][T13574]  ? clear_bhb_loop+0x30/0x80
[  394.215789][T13574]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  394.221721][T13574] RIP: 0033:0x7feeb8630e59
[  394.226193][T13574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  394.245924][T13574] RSP: 002b:00007feeb688a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  394.254407][T13574] RAX: ffffffffffffffda RBX: 00007feeb88a9fa0 RCX: 00007feeb8630e59
[  394.262434][T13574] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  394.270449][T13574] RBP: 00007feeb688a090 R08: 0000000000000000 R09: 0000000000000000
[  394.278469][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  394.286488][T13574] R13: 00007feeb88aa038 R14: 00007feeb88a9fa0 R15: 00007ffd6b407e18
[  394.294535][T13574]  </TASK>
[  394.304868][T13518] device hsr_slave_1 entered promiscuous mode
[  394.332660][T13588] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3035'.
[  394.361015][T13588] openvswitch: netlink: Key 29 has unexpected len 3064 expected 0
[  394.550270][T13574] Mem-Info:
[  394.553700][T13574] active_anon:275 inactive_anon:7473 isolated_anon:0
[  394.553700][T13574]  active_file:23774 inactive_file:36046 isolated_file:0
[  394.553700][T13574]  unevictable:768 dirty:243 writeback:0
[  394.553700][T13574]  slab_reclaimable:20948 slab_unreclaimable:96262
[  394.553700][T13574]  mapped:29799 shmem:1630 pagetables:597 bounce:0
[  394.553700][T13574]  kernel_misc_reclaimable:0
[  394.553700][T13574]  free:1370561 free_pcp:10735 free_cma:0
[  394.690385][ T9683] Bluetooth: hci3: command 0x041b tx timeout
[  394.725040][T13518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.758426][T13574] Node 0 active_anon:1068kB inactive_anon:30024kB active_file:94896kB inactive_file:144184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118936kB dirty:972kB writeback:0kB shmem:4844kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11600kB pagetables:2524kB all_unreclaimable? no
[  394.865881][T13574] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[  394.960731][T13518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.981349][T13574] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  395.118331][T13574] lowmem_reserve[]: 0 2539 2540 2540 2540
[  395.148731][T13518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.156675][T13574] Node 0 DMA32 free:1536168kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1068kB inactive_anon:33324kB active_file:94896kB inactive_file:144184kB unevictable:1536kB writepending:972kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:35848kB local_pcp:15764kB free_cma:0kB
[  395.316156][T13518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.330066][T13574] lowmem_reserve[]: 0 0 0 0 0
[  395.359301][T13574] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  395.617065][T13574] lowmem_reserve[]: 0 0 0 0 0
[  395.647783][T13574] Node 1 Normal free:3924640kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:2000kB local_pcp:0kB free_cma:0kB
[  395.687921][T13574] lowmem_reserve[]: 0 0 0 0 0
[  395.693059][T13574] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  395.706907][T13574] Node 0 DMA32: 1984*4kB (UME) 1675*8kB (UME) 570*16kB (UME) 838*32kB (UME) 886*64kB (UME) 614*128kB (UME) 363*256kB (UME) 278*512kB (UME) 130*1024kB (UME) 36*2048kB (UME) 219*4096kB (UM) = 1531704kB
[  395.789343][T13518] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  395.819728][T13574] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  395.849008][T13574] Node 1 Normal: 218*4kB (UE) 39*8kB (UME) 28*16kB (UME) 148*32kB (UE) 71*64kB (UME) 28*128kB (UME) 14*256kB (UME) 2*512kB (U) 2*1024kB (UE) 2*2048kB (ME) 952*4096kB (M) = 3924640kB
[  395.867812][T13574] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  395.910700][T13574] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  395.920849][T13574] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  395.943890][T13518] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  395.986295][T13574] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  396.032588][T13621] netlink: 'syz.3.3046': attribute type 1 has an invalid length.
[  396.060360][T13574] 63815 total pagecache pages
[  396.065453][T13621] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3046'.
[  396.079886][T13574] 0 pages in swap cache
[  396.093002][T13574] Swap cache stats: add 143, delete 143, find 8/26
[  396.102258][T13518] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  396.144669][T13518] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  396.151704][T13574] Free swap  = 124728kB
[  396.156006][T13574] Total swap = 124996kB
[  396.171953][T13574] 2097051 pages RAM
[  396.177374][T13574] 0 pages HighMem/MovableOnly
[  396.201600][T13624] delete_channel: no stack
[  396.219760][T13574] 411492 pages reserved
[  396.232234][T13574] 0 pages cma reserved
[  396.340827][T13634] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.3049'.
[  396.602387][T13652] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3053'.
[  396.615573][T13518] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.654289][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  396.670943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  396.679433][T13657] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3053'.
[  396.705422][T13518] 8021q: adding VLAN 0 to HW filter on device team0
[  396.725467][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  396.771237][T10829] Bluetooth: hci3: command 0x040f tx timeout
[  396.821682][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  396.858807][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.866068][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.009922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  397.301934][T13661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3055'.
[  397.328766][T13666] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3055'.
[  397.485576][T13666] team0: Port device team_slave_0 removed
[  397.517309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  397.527263][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  397.540890][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.548130][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.581270][T13669] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3056'.
[  397.598779][T13669] bridge_slave_1: default FDB implementation only supports local addresses
[  397.609235][T13673] netlink: 'syz.3.3054': attribute type 39 has an invalid length.
[  397.726761][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  397.749595][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  397.785872][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  397.803721][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  397.823673][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  397.851064][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  397.894800][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  397.934933][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  397.958167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  397.994045][T13518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  398.278490][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  398.292731][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  398.874427][T10836] Bluetooth: hci3: command 0x0419 tx timeout
[  399.069750][T13698] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3062'.
[  399.469419][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  399.510692][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  399.554216][T13518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  399.583534][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  399.603634][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  399.697775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  399.726677][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  399.767879][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  399.803712][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  399.838655][T13518] device veth0_vlan entered promiscuous mode
[  399.934579][T13518] device veth1_vlan entered promiscuous mode
[  400.196395][T13735] netlink: 'syz.2.3072': attribute type 21 has an invalid length.
[  400.221569][T13735] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3072'.
[  400.254058][T13735] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3072'.
[  400.294490][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  400.324428][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  400.439605][T13737] netlink: 'syz.3.3073': attribute type 16 has an invalid length.
[  400.490328][T13737] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3073'.
[  400.532431][T13738] netlink: 'syz.3.3073': attribute type 10 has an invalid length.
[  400.563933][T13738] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3073'.
[  400.612505][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  400.651377][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  400.722354][T13518] device veth0_macvtap entered promiscuous mode
[  400.746666][T13518] device veth1_macvtap entered promiscuous mode
[  400.844520][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  400.890506][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.924192][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  400.971435][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  400.988585][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.004000][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.025741][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  401.047203][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.079117][T13518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.100330][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.120169][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.151357][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.165211][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.185637][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.196574][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.220231][T13518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  401.240180][T13518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  401.272199][T13518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.295162][T13740] delete_channel: no stack
[  401.301840][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  401.315091][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  401.341422][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  401.351810][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  401.361434][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  401.371580][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  401.404513][T13518] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.414257][T13518] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.428899][T13518] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.439589][T13518] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  402.028366][T13760] netlink: 'syz.2.3080': attribute type 21 has an invalid length.
[  402.040047][T13760] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3080'.
[  402.060903][T13760] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3080'.
[  402.171115][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.179180][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.235534][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  402.334230][ T4387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  402.372812][ T4387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  402.422501][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  402.482615][T13766] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3082'.
[  402.932782][T13773] netlink: 'syz.0.3084': attribute type 21 has an invalid length.
[  402.987850][T13773] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3084'.
[  403.030407][T13773] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3084'.
[  403.227067][T13778] FAULT_INJECTION: forcing a failure.
[  403.227067][T13778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  403.272041][T13778] CPU: 0 PID: 13778 Comm: syz.0.3086 Not tainted syzkaller #0
[  403.279610][T13778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  403.290062][T13778] Call Trace:
[  403.293384][T13778]  <TASK>
[  403.296356][T13778]  dump_stack_lvl+0x188/0x250
[  403.301086][T13778]  ? show_regs_print_info+0x20/0x20
[  403.306389][T13778]  ? load_image+0x400/0x400
[  403.310941][T13778]  ? __lock_acquire+0x7d10/0x7d10
[  403.316021][T13778]  should_fail+0x38c/0x4c0
[  403.320484][T13778]  _copy_from_user+0x2e/0x170
[  403.325206][T13778]  iovec_from_user+0x142/0x370
[  403.330019][T13778]  __import_iovec+0x70/0x490
[  403.334649][T13778]  ? perf_tp_event+0xa92/0xbf0
[  403.339619][T13778]  import_iovec+0x6f/0xa0
[  403.344005][T13778]  ___sys_sendmsg+0x1fd/0x2e0
[  403.348886][T13778]  ? __sys_sendmsg+0x2a0/0x2a0
[  403.353761][T13778]  __se_sys_sendmsg+0x1af/0x290
[  403.358669][T13778]  ? __x64_sys_sendmsg+0x80/0x80
[  403.363667][T13778]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  403.369708][T13778]  ? lockdep_hardirqs_on+0x94/0x140
[  403.374957][T13778]  do_syscall_64+0x4c/0xa0
[  403.379418][T13778]  ? clear_bhb_loop+0x30/0x80
[  403.384136][T13778]  ? clear_bhb_loop+0x30/0x80
[  403.388859][T13778]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  403.394802][T13778] RIP: 0033:0x7f9edc93fe59
[  403.399258][T13778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  403.418897][T13778] RSP: 002b:00007f9edab99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  403.427365][T13778] RAX: ffffffffffffffda RBX: 00007f9edcbb8fa0 RCX: 00007f9edc93fe59
[  403.435800][T13778] RDX: 0000000024044084 RSI: 0000200000000040 RDI: 0000000000000003
[  403.443831][T13778] RBP: 00007f9edab99090 R08: 0000000000000000 R09: 0000000000000000
[  403.451858][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  403.459951][T13778] R13: 00007f9edcbb9038 R14: 00007f9edcbb8fa0 R15: 00007ffda57eb268
[  403.467991][T13778]  </TASK>
[  403.730010][  T144] device hsr_slave_0 left promiscuous mode
[  403.797918][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.823205][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.846425][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.860258][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.881479][  T144] device veth1_macvtap left promiscuous mode
[  403.887593][  T144] device veth1_vlan left promiscuous mode
[  403.921730][  T144] device veth0_vlan left promiscuous mode
[  404.886875][T13785] delete_channel: no stack
[  405.319440][T13779] chnl_net:caif_netlink_parms(): no params data found
[  405.570542][ T9080] Bluetooth: hci0: command 0x0409 tx timeout
[  405.589927][T13813] FAULT_INJECTION: forcing a failure.
[  405.589927][T13813] name failslab, interval 1, probability 0, space 0, times 0
[  405.602814][T13813] CPU: 0 PID: 13813 Comm: syz.2.3096 Not tainted syzkaller #0
[  405.610330][T13813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  405.620517][T13813] Call Trace:
[  405.623945][T13813]  <TASK>
[  405.626912][T13813]  dump_stack_lvl+0x188/0x250
[  405.631634][T13813]  ? show_regs_print_info+0x20/0x20
[  405.636890][T13813]  ? load_image+0x400/0x400
[  405.641440][T13813]  ? __might_sleep+0xf0/0xf0
[  405.646069][T13813]  ? __lock_acquire+0x7d10/0x7d10
[  405.651131][T13813]  ? netlink_insert+0xe95/0x11f0
[  405.656121][T13813]  should_fail+0x38c/0x4c0
[  405.660589][T13813]  should_failslab+0x5/0x20
[  405.665144][T13813]  slab_pre_alloc_hook+0x51/0xc0
[  405.670127][T13813]  kmem_cache_alloc_node+0x47/0x2d0
[  405.675365][T13813]  ? __alloc_skb+0xf4/0x750
[  405.679932][T13813]  __alloc_skb+0xf4/0x750
[  405.684576][T13813]  netlink_sendmsg+0x654/0xbe0
[  405.689402][T13813]  ? netlink_getsockopt+0x570/0x570
[  405.694646][T13813]  ? aa_sock_msg_perm+0x94/0x150
[  405.699629][T13813]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  405.704963][T13813]  ? security_socket_sendmsg+0x7c/0xa0
[  405.710477][T13813]  ? netlink_getsockopt+0x570/0x570
[  405.715721][T13813]  ____sys_sendmsg+0x5b7/0x8f0
[  405.720545][T13813]  ? __sys_sendmsg_sock+0x30/0x30
[  405.725625][T13813]  ? import_iovec+0x6f/0xa0
[  405.730165][T13813]  ___sys_sendmsg+0x236/0x2e0
[  405.734903][T13813]  ? __sys_sendmsg+0x2a0/0x2a0
[  405.739734][T13813]  ? vfs_write+0x8b2/0xd60
[  405.744223][T13813]  __se_sys_sendmsg+0x1af/0x290
[  405.749119][T13813]  ? __x64_sys_sendmsg+0x80/0x80
[  405.754090][T13813]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  405.760133][T13813]  ? lockdep_hardirqs_on+0x94/0x140
[  405.765465][T13813]  do_syscall_64+0x4c/0xa0
[  405.769916][T13813]  ? clear_bhb_loop+0x30/0x80
[  405.774630][T13813]  ? clear_bhb_loop+0x30/0x80
[  405.779358][T13813]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  405.785303][T13813] RIP: 0033:0x7f3b55fd1e59
[  405.789766][T13813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  405.809418][T13813] RSP: 002b:00007f3b5422b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  405.817882][T13813] RAX: ffffffffffffffda RBX: 00007f3b5624afa0 RCX: 00007f3b55fd1e59
[  405.825904][T13813] RDX: 0000000024044084 RSI: 0000200000000040 RDI: 0000000000000003
[  405.833916][T13813] RBP: 00007f3b5422b090 R08: 0000000000000000 R09: 0000000000000000
[  405.841935][T13813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.849945][T13813] R13: 00007f3b5624b038 R14: 00007f3b5624afa0 R15: 00007fffe94466f8
[  405.857977][T13813]  </TASK>
[  406.005946][T13779] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.034246][T13779] bridge0: port 1(bridge_slave_0) entered disabled state
[  406.083800][T13779] device bridge_slave_0 entered promiscuous mode
[  406.122993][T13779] bridge0: port 2(bridge_slave_1) entered blocking state
[  406.147397][T13779] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.202226][T13779] device bridge_slave_1 entered promiscuous mode
[  406.218936][T13832] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3101'.
[  406.281546][T13779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  406.352739][T13779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  406.444295][T13836] netlink: 'syz.0.3102': attribute type 10 has an invalid length.
[  406.466128][T13836] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  406.688190][T13836] batman_adv: batadv0: Removing interface: batadv_slave_0
[  406.786441][T13836] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  406.916531][T13844] netlink: 'syz.2.3104': attribute type 2 has an invalid length.
[  407.028716][T13844] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3104'.
[  407.126823][T13779] team0: Port device team_slave_0 added
[  407.243201][T13779] team0: Port device team_slave_1 added
[  407.387636][T13779] batman_adv: batadv0: Adding interface: batadv_slave_0
[  407.428377][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.534183][T13779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  407.602812][T13779] batman_adv: batadv0: Adding interface: batadv_slave_1
[  407.609854][T13779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  407.660320][T10830] Bluetooth: hci0: command 0x041b tx timeout
[  407.704212][T13779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  407.814811][T13855] FAULT_INJECTION: forcing a failure.
[  407.814811][T13855] name failslab, interval 1, probability 0, space 0, times 0
[  407.885141][T13855] CPU: 1 PID: 13855 Comm: syz.1.3108 Not tainted syzkaller #0
[  407.892691][T13855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  407.902789][T13855] Call Trace:
[  407.906106][T13855]  <TASK>
[  407.909082][T13855]  dump_stack_lvl+0x188/0x250
[  407.913808][T13855]  ? show_regs_print_info+0x20/0x20
[  407.919043][T13855]  ? load_image+0x400/0x400
[  407.923584][T13855]  ? __might_sleep+0xf0/0xf0
[  407.928213][T13855]  ? __lock_acquire+0x7d10/0x7d10
[  407.933281][T13855]  should_fail+0x38c/0x4c0
[  407.937750][T13855]  should_failslab+0x5/0x20
[  407.942283][T13855]  slab_pre_alloc_hook+0x51/0xc0
[  407.947343][T13855]  __kmalloc_node_track_caller+0x68/0x3a0
[  407.953099][T13855]  ? netlink_sendmsg+0x654/0xbe0
[  407.958077][T13855]  ? kmem_cache_alloc_node+0x162/0x2d0
[  407.963569][T13855]  ? __alloc_skb+0xf4/0x750
[  407.968113][T13855]  ? netlink_sendmsg+0x654/0xbe0
[  407.973085][T13855]  __alloc_skb+0x22c/0x750
[  407.977541][T13855]  netlink_sendmsg+0x654/0xbe0
[  407.982339][T13855]  ? netlink_getsockopt+0x570/0x570
[  407.987562][T13855]  ? aa_sock_msg_perm+0x94/0x150
[  407.992524][T13855]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  407.997837][T13855]  ? security_socket_sendmsg+0x7c/0xa0
[  408.003318][T13855]  ? netlink_getsockopt+0x570/0x570
[  408.008544][T13855]  ____sys_sendmsg+0x5b7/0x8f0
[  408.013343][T13855]  ? __sys_sendmsg_sock+0x30/0x30
[  408.018394][T13855]  ? import_iovec+0x6f/0xa0
[  408.022926][T13855]  ___sys_sendmsg+0x236/0x2e0
[  408.027647][T13855]  ? __sys_sendmsg+0x2a0/0x2a0
[  408.032445][T13855]  ? vfs_write+0x8b2/0xd60
[  408.036896][T13855]  __se_sys_sendmsg+0x1af/0x290
[  408.041775][T13855]  ? __x64_sys_sendmsg+0x80/0x80
[  408.046753][T13855]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  408.052773][T13855]  ? lockdep_hardirqs_on+0x94/0x140
[  408.058004][T13855]  do_syscall_64+0x4c/0xa0
[  408.062442][T13855]  ? clear_bhb_loop+0x30/0x80
[  408.067171][T13855]  ? clear_bhb_loop+0x30/0x80
[  408.071869][T13855]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  408.077811][T13855] RIP: 0033:0x7feeb8630e59
[  408.082246][T13855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  408.101872][T13855] RSP: 002b:00007feeb688a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  408.110307][T13855] RAX: ffffffffffffffda RBX: 00007feeb88a9fa0 RCX: 00007feeb8630e59
[  408.118329][T13855] RDX: 0000000024044084 RSI: 0000200000000040 RDI: 0000000000000003
[  408.126323][T13855] RBP: 00007feeb688a090 R08: 0000000000000000 R09: 0000000000000000
[  408.134309][T13855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  408.142302][T13855] R13: 00007feeb88aa038 R14: 00007feeb88a9fa0 R15: 00007ffd6b407e18
[  408.150303][T13855]  </TASK>
[  408.186550][T13779] device hsr_slave_0 entered promiscuous mode
[  408.211372][T13779] device hsr_slave_1 entered promiscuous mode
[  408.238966][T13779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  408.258086][T13779] Cannot create hsr debugfs directory
[  408.307117][T13863] netlink: 'syz.2.3110': attribute type 3 has an invalid length.
[  408.344122][T13863] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3110'.
[  408.437378][T13867] netlink: 'syz.0.3111': attribute type 21 has an invalid length.
[  408.457134][T13867] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3111'.
[  408.484831][T13867] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3111'.
[  408.730792][T13779] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.822392][T13779] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  408.990451][T13779] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.165234][T13779] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.400623][T13882] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.3116'.
[  409.427945][T13882] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.3116'.
[  409.513867][T13779] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  409.536433][T13779] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  409.618961][T13779] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  409.670573][T13886] delete_channel: no stack
[  409.736073][T13779] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  409.750401][T10831] Bluetooth: hci0: command 0x040f tx timeout
[  409.788017][T13893] netlink: 'syz.4.3121': attribute type 21 has an invalid length.
[  409.816567][T13893] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3121'.
[  409.847136][T13893] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3121'.
[  410.171584][T13779] 8021q: adding VLAN 0 to HW filter on device bond0
[  410.217021][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  410.240347][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  410.285560][T13779] 8021q: adding VLAN 0 to HW filter on device team0
[  410.346223][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  410.381311][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  410.420018][  T155] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.427319][  T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.479972][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  410.518347][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  410.546608][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  410.593907][ T4387] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.601157][ T4387] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.640416][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  410.746028][T13917] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3127'.
[  410.781079][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  410.797247][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  410.840389][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  410.927115][T13932] delete_channel: no stack
[  410.938909][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  410.961913][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  410.983209][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  411.011139][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  411.042811][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  411.088315][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  411.131849][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  411.212410][T13935] netlink: 'syz.0.3132': attribute type 21 has an invalid length.
[  411.225211][T13935] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3132'.
[  411.234622][T13935] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3132'.
[  411.251232][T13779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  411.364645][T13940] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3134'.
[  411.441553][T13936] delete_channel: no stack
[  411.453219][T13945] sctp: [Deprecated]: syz.0.3135 (pid 13945) Use of int in maxseg socket option.
[  411.453219][T13945] Use struct sctp_assoc_value instead
[  411.575771][T13946] sctp: [Deprecated]: syz.0.3135 (pid 13946) Use of int in maxseg socket option.
[  411.575771][T13946] Use struct sctp_assoc_value instead
[  411.828118][T10830] Bluetooth: hci0: command 0x0419 tx timeout
[  411.876409][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  411.896475][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  411.949849][T13779] 8021q: adding VLAN 0 to HW filter on device batadv0
[  412.016548][T13962] netlink: 'syz.4.3138': attribute type 21 has an invalid length.
[  412.086923][T13962] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3138'.
[  412.120257][T13962] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3138'.
[  412.137114][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  412.158918][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  412.225347][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  412.237413][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  412.270670][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  412.326729][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  412.356768][T13779] device veth0_vlan entered promiscuous mode
[  412.420678][T13779] device veth1_vlan entered promiscuous mode
[  412.441795][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  412.521160][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  412.531269][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  412.556530][T13779] device veth0_macvtap entered promiscuous mode
[  412.575265][T13779] device veth1_macvtap entered promiscuous mode
[  412.711978][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.724455][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.740188][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.760203][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.777506][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  412.802284][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  412.841220][T13779] batman_adv: batadv0: Interface activated: batadv_slave_0
[  412.857689][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  412.888395][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  412.925430][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  412.951551][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  412.993990][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.025089][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.069425][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.096250][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.106302][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.118857][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.129042][T13779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  413.141351][T13779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  413.153264][T13779] batman_adv: batadv0: Interface activated: batadv_slave_1
[  413.243778][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  413.261806][ T6907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  413.396010][T13779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  413.434797][T13779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.453840][T13779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.486307][T13779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.531493][T13982] netlink: 'syz.0.3146': attribute type 21 has an invalid length.
[  413.539373][T13982] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3146'.
[  413.570488][T13982] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3146'.
[  414.110203][T13992] netlink: 'syz.1.3149': attribute type 21 has an invalid length.
[  414.118183][T13992] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3149'.
[  414.237931][T13996] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3152'.
[  414.263043][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.313650][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.383544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  414.419796][T13998] sctp: [Deprecated]: syz.1.3153 (pid 13998) Use of int in max_burst socket option deprecated.
[  414.419796][T13998] Use struct sctp_assoc_value instead
[  414.481712][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  414.491344][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  414.520529][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  414.983479][T14012] netlink: 'syz.1.3158': attribute type 11 has an invalid length.
[  415.289242][T14012] netlink: 'syz.1.3158': attribute type 2 has an invalid length.
[  415.374577][T14013] delete_channel: no stack
[  415.638953][  T144] device wlan1 left promiscuous mode
[  415.695440][  T144] team0: Port device wlan1 removed
[  415.761360][T14028] netlink: 'syz.1.3164': attribute type 21 has an invalid length.
[  415.783155][T14028] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3164'.
[  416.027452][T14032] bridge_slave_1: default FDB implementation only supports local addresses
[  416.147642][  T144] bridge0: port 4(dummy0) entered disabled state
[  416.176641][  T144] bridge0: port 3(team0) entered disabled state
[  416.214168][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  416.281597][  T144] device bridge_slave_0 left promiscuous mode
[  416.296533][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.339082][  T144] device veth1_macvtap left promiscuous mode
[  416.729662][  T144] device hsr_slave_0 left promiscuous mode
[  416.753753][  T144] team0 (unregistering): Port device hsr_slave_0 removed
[  416.871325][  T144] device team_slave_1 left promiscuous mode
[  416.931223][  T144] team0 (unregistering): Port device team_slave_1 removed
[  416.948124][  T144] device team_slave_0 left promiscuous mode
[  416.957615][  T144] team0 (unregistering): Port device team_slave_0 removed
[  417.275126][T14053] netlink: 'syz.1.3174': attribute type 11 has an invalid length.
[  417.283453][T14053] __nla_validate_parse: 3 callbacks suppressed
[  417.283470][T14053] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3174'.
[  417.442709][T14056] delete_channel: no stack
[  417.880724][T14054] chnl_net:caif_netlink_parms(): no params data found
[  418.127775][T14097] netlink: 144300 bytes leftover after parsing attributes in process `syz.3.3185'.
[  418.180293][T14097] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3185'.
[  418.259407][T14102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  418.277742][T14102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  418.591835][T14054] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.609444][T14054] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.641987][T14054] device bridge_slave_0 entered promiscuous mode
[  418.676590][T14054] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.740496][T14054] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.782460][T14054] device bridge_slave_1 entered promiscuous mode
[  418.812087][T14109] delete_channel: no stack
[  418.879547][T14054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.923540][T14054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.932983][ T1107] Bluetooth: hci4: command 0x0409 tx timeout
[  419.062020][T14054] team0: Port device team_slave_0 added
[  419.222349][T14054] team0: Port device team_slave_1 added
[  419.244050][T14139] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3198'.
[  419.275660][T14130] netlink: 'syz.4.3195': attribute type 28 has an invalid length.
[  419.343362][T14130] netlink: 'syz.4.3195': attribute type 4 has an invalid length.
[  419.363186][T14054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  419.390376][T14130] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3195'.
[  419.399817][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.458319][T14135] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3195'.
[  419.484071][T14054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  419.525594][T14054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  419.536347][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  419.571325][T14054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  419.803214][T14149] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  419.842873][T14054] device hsr_slave_0 entered promiscuous mode
[  419.858209][T14054] device hsr_slave_1 entered promiscuous mode
[  419.889341][T14054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  419.929776][T14054] Cannot create hsr debugfs directory
[  420.252680][T14154] delete_channel: no stack
[  420.316468][T14167] netlink: 'syz.3.3209': attribute type 3 has an invalid length.
[  420.384324][T14167] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3209'.
[  420.403510][T14054] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.587885][T14054] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.669889][T14187] netlink: 'syz.0.3215': attribute type 1 has an invalid length.
[  420.678853][T14187] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3215'.
[  420.732630][T14185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  420.771122][T14185] batman_adv: batadv0: Removing interface: batadv_slave_0
[  420.811530][T14185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  420.819076][T14185] batman_adv: batadv0: Removing interface: batadv_slave_1
[  420.969260][T14054] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.010545][ T8678] Bluetooth: hci4: command 0x041b tx timeout
[  421.112653][T14054] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  421.556935][T14054] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  421.594770][T14054] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  421.649964][T14054] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  421.690990][T14054] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  421.732040][T14208] delete_channel: no stack
[  421.932216][T14054] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.981396][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  421.989513][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  422.034672][T14054] 8021q: adding VLAN 0 to HW filter on device team0
[  422.167116][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  422.181743][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  422.197409][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state
[  422.204637][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  422.270379][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  422.294845][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  422.309666][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  422.320003][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state
[  422.327206][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.337718][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  422.418937][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  422.443525][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  422.475341][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  422.619387][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  422.709544][T14258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3237'.
[  422.724013][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  422.791149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  422.816731][T14256] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3237'.
[  422.845206][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  422.888678][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  422.906437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  422.952054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  423.064483][T14054] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  423.091011][ T9080] Bluetooth: hci4: command 0x040f tx timeout
[  423.302613][T14256] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3237'.
[  424.701557][T14270] netlink: 'syz.0.3240': attribute type 10 has an invalid length.
[  424.730768][T14270] device hsr0 entered promiscuous mode
[  424.764633][T14270] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  424.801668][T14270] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  424.812922][T14270] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  424.832339][T14270] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  425.171531][ T4257] Bluetooth: hci4: command 0x0419 tx timeout
[  425.350721][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  425.367838][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  425.422698][T14054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  425.440744][T14304] netlink: 'syz.1.3251': attribute type 13 has an invalid length.
[  425.456751][T14304] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3251'.
[  425.524189][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  425.543313][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  425.649387][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  425.662251][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  425.673118][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  425.712962][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  425.726276][T14054] device veth0_vlan entered promiscuous mode
[  425.805633][T14308] delete_channel: no stack
[  425.818697][T14054] device veth1_vlan entered promiscuous mode
[  425.955035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  425.986864][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  426.003005][T14054] device veth0_macvtap entered promiscuous mode
[  426.083644][T14054] device veth1_macvtap entered promiscuous mode
[  426.325518][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.470494][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.485196][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.497104][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.514588][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  426.528423][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.542923][T14054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  426.643587][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  426.665476][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  426.711339][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  426.725278][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  426.739827][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.751735][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.766569][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.777958][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.788814][T14054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  426.813702][T14054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  426.867579][T14054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  426.890542][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  426.918133][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  426.962243][T14372] netlink: 'syz.4.3262': attribute type 13 has an invalid length.
[  426.989634][T14372] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.3262'.
[  427.033317][T14054] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  427.053318][T14054] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  427.091592][T14054] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  427.133311][T14054] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  427.294485][  T144] device hsr_slave_0 left promiscuous mode
[  427.306320][  T144] device hsr_slave_1 left promiscuous mode
[  427.317375][T14380] delete_channel: no stack
[  427.323029][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  427.336987][  T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[  427.346819][  T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  427.355656][  T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[  427.365445][  T144] bridge0: port 4(dummy0) entered disabled state
[  427.378713][  T144] bridge0: port 3(hsr0) entered disabled state
[  427.417275][  T144] device bridge_slave_1 left promiscuous mode
[  427.435807][  T144] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.456807][  T144] device bridge_slave_0 left promiscuous mode
[  427.463511][  T144] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.478310][  T144] device veth1_macvtap left promiscuous mode
[  427.486108][  T144] device veth0_macvtap left promiscuous mode
[  428.168411][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.188182][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.248487][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  428.288209][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  428.302497][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  428.323974][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  428.634454][T14417] netlink: 'syz.2.3173': attribute type 11 has an invalid length.
[  428.653773][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  428.694879][T14420] batman_adv: batadv0: Removing interface: batadv_slave_0
[  428.764883][T14420] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  428.797746][T14420] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.046036][T14421] netlink: 'syz.2.3173': attribute type 2 has an invalid length.
[  429.124534][T14430] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.3283'.
[  429.619499][T14435] delete_channel: no stack
[  430.706846][T14457] pim6reg: tun_chr_ioctl cmd 1074025677
[  430.730513][T14457] pim6reg: linktype set to 778
[  431.250397][T14471] delete_channel: no stack
[  431.772436][T14493] netlink: 'syz.3.3309': attribute type 39 has an invalid length.
[  432.640939][T14502] netlink: 'syz.1.3312': attribute type 29 has an invalid length.
[  432.659288][T14503] netlink: 'syz.1.3312': attribute type 29 has an invalid length.
[  432.693436][T14502] netlink: 'syz.1.3312': attribute type 29 has an invalid length.
[  433.539039][T14535] netlink: 'syz.3.3321': attribute type 10 has an invalid length.
[  433.754377][T14522] delete_channel: no stack
[  434.038940][T14546] netlink: 'syz.1.3325': attribute type 21 has an invalid length.
[  434.094758][T14546] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3325'.
[  434.132836][T14546] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3325'.
[  434.803673][T14568] netlink: 'syz.4.3334': attribute type 11 has an invalid length.
[  435.146635][T14578] netlink: 'syz.3.3338': attribute type 1 has an invalid length.
[  435.191078][T14578] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3338'.
[  435.433689][T14575] delete_channel: no stack
[  435.671083][T14590] FAULT_INJECTION: forcing a failure.
[  435.671083][T14590] name failslab, interval 1, probability 0, space 0, times 0
[  435.707128][T14590] CPU: 1 PID: 14590 Comm: syz.3.3341 Not tainted syzkaller #0
[  435.714682][T14590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  435.724774][T14590] Call Trace:
[  435.728085][T14590]  <TASK>
[  435.731053][T14590]  dump_stack_lvl+0x188/0x250
[  435.735763][T14590]  ? show_regs_print_info+0x20/0x20
[  435.740982][T14590]  ? load_image+0x400/0x400
[  435.745503][T14590]  ? __might_sleep+0xf0/0xf0
[  435.750110][T14590]  ? __lock_acquire+0x7d10/0x7d10
[  435.755166][T14590]  should_fail+0x38c/0x4c0
[  435.759610][T14590]  should_failslab+0x5/0x20
[  435.764126][T14590]  slab_pre_alloc_hook+0x51/0xc0
[  435.769079][T14590]  kmem_cache_alloc_node+0x47/0x2d0
[  435.774294][T14590]  ? __alloc_skb+0xf4/0x750
[  435.778817][T14590]  __alloc_skb+0xf4/0x750
[  435.783165][T14590]  netlink_dump+0x1e8/0xcf0
[  435.787695][T14590]  ? lockdep_hardirqs_on+0x94/0x140
[  435.792919][T14590]  ? slab_free_freelist_hook+0xea/0x170
[  435.798485][T14590]  ? netlink_lookup+0x1d0/0x1d0
[  435.803403][T14590]  netlink_recvmsg+0x672/0xe20
[  435.808266][T14590]  ? netlink_sendmsg+0xbe0/0xbe0
[  435.813234][T14590]  ? aa_sk_perm+0x7dc/0x910
[  435.817843][T14590]  ? aa_af_perm+0x340/0x340
[  435.822370][T14590]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  435.827675][T14590]  ? security_socket_recvmsg+0x85/0xb0
[  435.833151][T14590]  ? netlink_sendmsg+0xbe0/0xbe0
[  435.838112][T14590]  ____sys_recvmsg+0x2cd/0x5e0
[  435.842905][T14590]  ? __sys_recvmsg_sock+0x40/0x40
[  435.847959][T14590]  ? import_iovec+0x6f/0xa0
[  435.852484][T14590]  ___sys_recvmsg+0x21a/0x5c0
[  435.857188][T14590]  ? __sys_recvmsg+0x280/0x280
[  435.861986][T14590]  ? __lock_acquire+0x7d10/0x7d10
[  435.867048][T14590]  __x64_sys_recvmsg+0x1f9/0x2c0
[  435.872009][T14590]  ? ___sys_recvmsg+0x5c0/0x5c0
[  435.876881][T14590]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  435.882889][T14590]  ? lockdep_hardirqs_on+0x94/0x140
[  435.888106][T14590]  do_syscall_64+0x4c/0xa0
[  435.892534][T14590]  ? clear_bhb_loop+0x30/0x80
[  435.897233][T14590]  ? clear_bhb_loop+0x30/0x80
[  435.901930][T14590]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  435.907843][T14590] RIP: 0033:0x7f69225b0e59
[  435.912281][T14590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  435.931906][T14590] RSP: 002b:00007f69207e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  435.940344][T14590] RAX: ffffffffffffffda RBX: 00007f692282a090 RCX: 00007f69225b0e59
[  435.948334][T14590] RDX: 0000000000010000 RSI: 0000200000000300 RDI: 0000000000000004
[  435.956333][T14590] RBP: 00007f69207e9090 R08: 0000000000000000 R09: 0000000000000000
[  435.964320][T14590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  435.972307][T14590] R13: 00007f692282a128 R14: 00007f692282a090 R15: 00007ffcfe184b08
[  435.980308][T14590]  </TASK>
[  436.847033][T14612] netlink: 'syz.0.3347': attribute type 11 has an invalid length.
[  436.941326][T14613] mac80211_hwsim hwsim52 »»»»»»: renamed from wlan0
[  437.106437][T14621] device bridge_slave_1 left promiscuous mode
[  437.130058][T14621] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.141497][T14617] delete_channel: no stack
[  437.196349][T14621] device bridge_slave_0 left promiscuous mode
[  437.210664][T14621] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.349417][T14626] FAULT_INJECTION: forcing a failure.
[  437.349417][T14626] name failslab, interval 1, probability 0, space 0, times 0
[  437.398774][T14626] CPU: 0 PID: 14626 Comm: syz.0.3355 Not tainted syzkaller #0
[  437.406323][T14626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  437.416601][T14626] Call Trace:
[  437.419950][T14626]  <TASK>
[  437.422934][T14626]  dump_stack_lvl+0x188/0x250
[  437.427674][T14626]  ? show_regs_print_info+0x20/0x20
[  437.432925][T14626]  ? load_image+0x400/0x400
[  437.437495][T14626]  ? __might_sleep+0xf0/0xf0
[  437.442147][T14626]  ? __lock_acquire+0x7d10/0x7d10
[  437.447245][T14626]  should_fail+0x38c/0x4c0
[  437.451738][T14626]  should_failslab+0x5/0x20
[  437.456287][T14626]  slab_pre_alloc_hook+0x51/0xc0
[  437.461275][T14626]  __kmalloc_node_track_caller+0x68/0x3a0
[  437.467051][T14626]  ? netlink_dump+0x1e8/0xcf0
[  437.471781][T14626]  ? kmem_cache_alloc_node+0x162/0x2d0
[  437.477291][T14626]  ? __alloc_skb+0xf4/0x750
[  437.481860][T14626]  ? netlink_dump+0x1e8/0xcf0
[  437.486598][T14626]  __alloc_skb+0x22c/0x750
[  437.491099][T14626]  netlink_dump+0x1e8/0xcf0
[  437.495671][T14626]  ? lockdep_hardirqs_on+0x94/0x140
[  437.500943][T14626]  ? slab_free_freelist_hook+0xea/0x170
[  437.506540][T14626]  ? netlink_lookup+0x1d0/0x1d0
[  437.511470][T14626]  netlink_recvmsg+0x672/0xe20
[  437.516277][T14626]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  437.522157][T14626]  ? netlink_sendmsg+0xbe0/0xbe0
[  437.527149][T14626]  ? aa_sk_perm+0x7dc/0x910
[  437.531721][T14626]  ? aa_af_perm+0x340/0x340
[  437.536283][T14626]  ? perf_trace_lock+0xe4/0x390
[  437.541221][T14626]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  437.546565][T14626]  ? security_socket_recvmsg+0x85/0xb0
[  437.552091][T14626]  ? netlink_sendmsg+0xbe0/0xbe0
[  437.557081][T14626]  ____sys_recvmsg+0x2cd/0x5e0
[  437.561928][T14626]  ? __sys_recvmsg_sock+0x40/0x40
[  437.567049][T14626]  ? import_iovec+0x6f/0xa0
[  437.571631][T14626]  ___sys_recvmsg+0x21a/0x5c0
[  437.576382][T14626]  ? __sys_recvmsg+0x280/0x280
[  437.581222][T14626]  ? trace_event_raw_event_lock+0x270/0x270
[  437.587238][T14626]  __x64_sys_recvmsg+0x1f9/0x2c0
[  437.592242][T14626]  ? ___sys_recvmsg+0x5c0/0x5c0
[  437.597157][T14626]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  437.603234][T14626]  ? lockdep_hardirqs_on+0x94/0x140
[  437.608499][T14626]  do_syscall_64+0x4c/0xa0
[  437.612960][T14626]  ? clear_bhb_loop+0x30/0x80
[  437.617688][T14626]  ? clear_bhb_loop+0x30/0x80
[  437.622426][T14626]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  437.628377][T14626] RIP: 0033:0x7f9edc93fe59
[  437.632937][T14626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  437.652598][T14626] RSP: 002b:00007f9edab99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  437.661080][T14626] RAX: ffffffffffffffda RBX: 00007f9edcbb8fa0 RCX: 00007f9edc93fe59
[  437.669104][T14626] RDX: 0000000000010000 RSI: 0000200000000300 RDI: 0000000000000004
[  437.677124][T14626] RBP: 00007f9edab99090 R08: 0000000000000000 R09: 0000000000000000
[  437.685152][T14626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  437.693183][T14626] R13: 00007f9edcbb9038 R14: 00007f9edcbb8fa0 R15: 00007ffda57eb268
[  437.701249][T14626]  </TASK>
[  438.574408][T14651] netlink: 'syz.2.3364': attribute type 29 has an invalid length.
[  438.596445][T14651] netlink: 'syz.2.3364': attribute type 29 has an invalid length.
[  438.630936][T14651] netlink: 'syz.2.3364': attribute type 29 has an invalid length.
[  438.650810][T14651] netlink: 'syz.2.3364': attribute type 29 has an invalid length.
[  438.670503][T14651] netlink: 'syz.2.3364': attribute type 29 has an invalid length.
[  438.873569][T14658] netlink: 'syz.3.3365': attribute type 11 has an invalid length.
[  439.094895][T14667] FAULT_INJECTION: forcing a failure.
[  439.094895][T14667] name failslab, interval 1, probability 0, space 0, times 0
[  439.186010][T14667] CPU: 0 PID: 14667 Comm: syz.3.3369 Not tainted syzkaller #0
[  439.193611][T14667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  439.203728][T14667] Call Trace:
[  439.207044][T14667]  <TASK>
[  439.210009][T14667]  dump_stack_lvl+0x188/0x250
[  439.214742][T14667]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  439.220542][T14667]  ? show_regs_print_info+0x20/0x20
[  439.225805][T14667]  ? load_image+0x400/0x400
[  439.230399][T14667]  should_fail+0x38c/0x4c0
[  439.235007][T14667]  should_failslab+0x5/0x20
[  439.239569][T14667]  slab_pre_alloc_hook+0x51/0xc0
[  439.244573][T14667]  ? skb_clone+0x1bd/0x350
[  439.249158][T14667]  kmem_cache_alloc+0x3d/0x290
[  439.253995][T14667]  skb_clone+0x1bd/0x350
[  439.258343][T14667]  __netlink_deliver_tap+0x3cd/0x7c0
[  439.263724][T14667]  netlink_deliver_tap+0x16c/0x180
[  439.268908][T14667]  __netlink_sendskb+0x4b/0x90
[  439.273740][T14667]  netlink_dump+0x945/0xcf0
[  439.278339][T14667]  ? netlink_lookup+0x1d0/0x1d0
[  439.283284][T14667]  netlink_recvmsg+0x672/0xe20
[  439.288100][T14667]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  439.293895][T14667]  ? netlink_sendmsg+0xbe0/0xbe0
[  439.298886][T14667]  ? aa_sk_perm+0x7dc/0x910
[  439.303457][T14667]  ? aa_af_perm+0x340/0x340
[  439.307992][T14667]  ? perf_trace_lock+0xe4/0x390
[  439.312908][T14667]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  439.318259][T14667]  ? security_socket_recvmsg+0x85/0xb0
[  439.323778][T14667]  ? netlink_sendmsg+0xbe0/0xbe0
[  439.328778][T14667]  ____sys_recvmsg+0x2cd/0x5e0
[  439.333637][T14667]  ? __sys_recvmsg_sock+0x40/0x40
[  439.338765][T14667]  ? import_iovec+0x6f/0xa0
[  439.343339][T14667]  ___sys_recvmsg+0x21a/0x5c0
[  439.348082][T14667]  ? __sys_recvmsg+0x280/0x280
[  439.352901][T14667]  ? trace_event_raw_event_lock+0x270/0x270
[  439.358912][T14667]  __x64_sys_recvmsg+0x1f9/0x2c0
[  439.363913][T14667]  ? ___sys_recvmsg+0x5c0/0x5c0
[  439.368830][T14667]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  439.374905][T14667]  ? lockdep_hardirqs_on+0x94/0x140
[  439.380168][T14667]  do_syscall_64+0x4c/0xa0
[  439.384630][T14667]  ? clear_bhb_loop+0x30/0x80
[  439.389359][T14667]  ? clear_bhb_loop+0x30/0x80
[  439.394078][T14667]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  439.400130][T14667] RIP: 0033:0x7f69225b0e59
[  439.404710][T14667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  439.424370][T14667] RSP: 002b:00007f692080a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  439.432845][T14667] RAX: ffffffffffffffda RBX: 00007f6922829fa0 RCX: 00007f69225b0e59
[  439.440875][T14667] RDX: 0000000000010000 RSI: 0000200000000300 RDI: 0000000000000004
[  439.448897][T14667] RBP: 00007f692080a090 R08: 0000000000000000 R09: 0000000000000000
[  439.456920][T14667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.465161][T14667] R13: 00007f692282a038 R14: 00007f6922829fa0 R15: 00007ffcfe184b08
[  439.473223][T14667]  </TASK>
[  439.569015][T14675] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3371'.
[  439.697696][T14659] delete_channel: no stack
[  439.892861][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  439.899400][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  439.961050][T14675] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3371'.
[  440.158711][T14688] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.3376'.
[  440.188248][T14675] team0: Port device team_slave_0 removed
[  440.217801][T14675] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  440.704844][T14708] netlink: 'syz.3.3382': attribute type 10 has an invalid length.
[  440.957561][T14708] team0: Device hsr_slave_0 failed to register rx_handler
[  440.974589][T14717] FAULT_INJECTION: forcing a failure.
[  440.974589][T14717] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  440.994508][T14717] CPU: 1 PID: 14717 Comm: syz.4.3385 Not tainted syzkaller #0
[  441.002039][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  441.012140][T14717] Call Trace:
[  441.015468][T14717]  <TASK>
[  441.018435][T14717]  dump_stack_lvl+0x188/0x250
[  441.023155][T14717]  ? show_regs_print_info+0x20/0x20
[  441.028407][T14717]  ? load_image+0x400/0x400
[  441.032960][T14717]  ? __lock_acquire+0x7d10/0x7d10
[  441.038044][T14717]  should_fail+0x38c/0x4c0
[  441.042514][T14717]  _copy_to_user+0x2e/0x130
[  441.047071][T14717]  simple_read_from_buffer+0xe3/0x150
[  441.052610][T14717]  proc_fail_nth_read+0x1a6/0x220
[  441.057704][T14717]  ? proc_fault_inject_write+0x310/0x310
[  441.063383][T14717]  ? fsnotify_perm+0x254/0x560
[  441.068269][T14717]  ? proc_fault_inject_write+0x310/0x310
[  441.073957][T14717]  vfs_read+0x301/0xd60
[  441.078173][T14717]  ? kernel_read+0x1e0/0x1e0
[  441.082817][T14717]  ? __fget_files+0x40f/0x480
[  441.087545][T14717]  ? mutex_lock_nested+0x17/0x20
[  441.092529][T14717]  ? __fdget_pos+0x2bf/0x370
[  441.097162][T14717]  ? ksys_read+0x71/0x260
[  441.101554][T14717]  ksys_read+0x152/0x260
[  441.105845][T14717]  ? vfs_write+0xd60/0xd60
[  441.110315][T14717]  ? lockdep_hardirqs_on+0x94/0x140
[  441.115563][T14717]  do_syscall_64+0x4c/0xa0
[  441.120018][T14717]  ? clear_bhb_loop+0x30/0x80
[  441.124738][T14717]  ? clear_bhb_loop+0x30/0x80
[  441.129458][T14717]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  441.135393][T14717] RIP: 0033:0x7f090c62668e
[  441.139851][T14717] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  441.159762][T14717] RSP: 002b:00007f090a8befe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  441.168239][T14717] RAX: ffffffffffffffda RBX: 00007f090a8bf6c0 RCX: 00007f090c62668e
[  441.176277][T14717] RDX: 000000000000000f RSI: 00007f090a8bf0a0 RDI: 0000000000000005
[  441.184312][T14717] RBP: 00007f090a8bf090 R08: 0000000000000000 R09: 0000000000000000
[  441.192335][T14717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  441.200361][T14717] R13: 00007f090c8df038 R14: 00007f090c8defa0 R15: 00007ffca472df28
[  441.208399][T14717]  </TASK>
[  441.248365][T14710] netlink: 'syz.1.3381': attribute type 11 has an invalid length.
[  441.684133][T14729] netlink: 'syz.4.3390': attribute type 2 has an invalid length.
[  441.752459][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3390'.
[  441.845258][T14726] delete_channel: no stack
[  441.959711][T14740] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3393'.
[  442.259751][T14752] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3400'.
[  442.377224][T14754] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3399'.
[  442.412964][T14755] device syzkaller0 entered promiscuous mode
[  442.483047][T14761] validate_nla: 1 callbacks suppressed
[  442.483066][T14761] netlink: 'syz.3.3402': attribute type 4 has an invalid length.
[  442.546474][T14761] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3402'.
[  443.127790][T14779] delete_channel: no stack
[  443.434056][T14791] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3413'.
[  444.679787][T14827] delete_channel: no stack
[  445.730456][T14880] delete_channel: no stack
[  446.407705][T14913] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3459'.
[  446.521206][T14913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3459'.
[  446.944194][T14947] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3470'.
[  447.070745][T14946] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3469'.
[  448.814153][T15014] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.3491'.
[  448.982730][T15016] netlink: 'syz.4.3492': attribute type 39 has an invalid length.
[  449.290597][T15026] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3496'.
[  449.850600][T15048] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  449.858195][T15048] batman_adv: batadv0: Removing interface: batadv_slave_0
[  449.987040][T15048] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.026008][T15048] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.270584][T15054] netlink: 16058 bytes leftover after parsing attributes in process `syz.2.3505'.
[  450.856124][T15077] netlink: 'syz.2.3514': attribute type 3 has an invalid length.
[  450.921478][T15077] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3514'.
[  452.313296][T15115] netlink: 'syz.1.3524': attribute type 10 has an invalid length.
[  452.379389][T15115] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3524'.
[  452.430920][T15115] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  453.250278][T15156] netlink: 'syz.3.3541': attribute type 9 has an invalid length.
[  453.258078][T15156] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3541'.
[  453.488266][T15161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3543'.
[  454.880185][T15209] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3566'.
[  455.548562][T15237] netlink: 'syz.2.3575': attribute type 10 has an invalid length.
[  455.639241][T15237] 8021q: adding VLAN 0 to HW filter on device team0
[  455.776523][T15237] bond0: (slave team0): Enslaving as an active interface with an up link
[  455.900444][T15249] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3578'.
[  456.299304][T15278] netlink: 'syz.1.3587': attribute type 21 has an invalid length.
[  456.349460][T15278] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3587'.
[  456.403782][T15278] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3587'.
[  456.773450][ T4400] wlan1: Trigger new scan to find an IBSS to join
[  456.841019][T15289] netlink: 'syz.4.3590': attribute type 21 has an invalid length.
[  456.930010][T15289] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3590'.
[  457.044407][T15289] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3590'.
[  457.572776][T15302] netlink: 'syz.3.3597': attribute type 21 has an invalid length.
[  457.636341][T15302] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3597'.
[  457.939598][T15324] netlink: 'syz.0.3602': attribute type 21 has an invalid length.
[  457.981678][T15324] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3602'.
[  458.030519][T15324] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3602'.
[  458.265326][T15332] netlink: 'syz.3.3606': attribute type 21 has an invalid length.
[  458.345389][T15332] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3606'.
[  458.701283][T15340] netlink: 'syz.4.3609': attribute type 22 has an invalid length.
[  458.868006][T15349] FAULT_INJECTION: forcing a failure.
[  458.868006][T15349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  458.960414][T15349] CPU: 1 PID: 15349 Comm: syz.0.3612 Not tainted syzkaller #0
[  458.967967][T15349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  458.978184][T15349] Call Trace:
[  458.981516][T15349]  <TASK>
[  458.984482][T15349]  dump_stack_lvl+0x188/0x250
[  458.989210][T15349]  ? show_regs_print_info+0x20/0x20
[  458.994456][T15349]  ? load_image+0x400/0x400
[  458.999009][T15349]  ? __lock_acquire+0x7d10/0x7d10
[  459.004095][T15349]  ? perf_trace_run_bpf_submit+0x1c0/0x1c0
[  459.009958][T15349]  should_fail+0x38c/0x4c0
[  459.014431][T15349]  _copy_from_user+0x2e/0x170
[  459.019162][T15349]  iovec_from_user+0x142/0x370
[  459.023991][T15349]  __import_iovec+0x70/0x490
[  459.028646][T15349]  import_iovec+0x6f/0xa0
[  459.033025][T15349]  ___sys_sendmsg+0x1fd/0x2e0
[  459.037771][T15349]  ? __sys_sendmsg+0x2a0/0x2a0
[  459.042634][T15349]  __se_sys_sendmsg+0x1af/0x290
[  459.047538][T15349]  ? __x64_sys_sendmsg+0x80/0x80
[  459.052529][T15349]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  459.058580][T15349]  ? lockdep_hardirqs_on+0x94/0x140
[  459.063838][T15349]  do_syscall_64+0x4c/0xa0
[  459.068303][T15349]  ? clear_bhb_loop+0x30/0x80
[  459.073037][T15349]  ? clear_bhb_loop+0x30/0x80
[  459.077764][T15349]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  459.083707][T15349] RIP: 0033:0x7f9edc93fe59
[  459.088180][T15349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  459.107832][T15349] RSP: 002b:00007f9edab99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  459.116307][T15349] RAX: ffffffffffffffda RBX: 00007f9edcbb8fa0 RCX: 00007f9edc93fe59
[  459.124326][T15349] RDX: 0000000024044084 RSI: 0000200000000040 RDI: 0000000000000004
[  459.132343][T15349] RBP: 00007f9edab99090 R08: 0000000000000000 R09: 0000000000000000
[  459.140366][T15349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  459.148388][T15349] R13: 00007f9edcbb9038 R14: 00007f9edcbb8fa0 R15: 00007ffda57eb268
[  459.156434][T15349]  </TASK>
[  459.396218][T15352] netlink: 'syz.3.3613': attribute type 21 has an invalid length.
[  461.735022][ T4369] wlan1: Trigger new scan to find an IBSS to join
[  461.830450][T15363] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3615'.
[  461.956179][T15368] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3618'.
[  462.099282][T15371] netlink: 'syz.2.3619': attribute type 21 has an invalid length.
[  462.210376][T15371] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3619'.
[  462.234691][T15371] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3619'.
[  462.386250][T15376] netlink: 'syz.1.3621': attribute type 25 has an invalid length.
[  462.704624][ T4382] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  462.770509][ T4382] wlan1: Trigger new scan to find an IBSS to join
[  462.968798][T15392] mac80211_hwsim hwsim50 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  463.026481][T15393] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3627'.
[  463.104505][T15396] netlink: 209032 bytes leftover after parsing attributes in process `syz.4.3629'.
[  463.747725][T15417] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  463.798080][T15417] batman_adv: batadv0: Removing interface: batadv_slave_0
[  464.011053][T15417] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  464.087535][T15417] batman_adv: batadv0: Removing interface: batadv_slave_1
[  464.532330][T15428] netlink: 'syz.1.3641': attribute type 21 has an invalid length.
[  464.562178][T15428] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3641'.
[  464.678116][T15428] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3641'.
[  464.699785][T15431] netlink: 'syz.3.3643': attribute type 3 has an invalid length.
[  464.720560][T15431] netlink: 'syz.3.3643': attribute type 6 has an invalid length.
[  464.728938][T15431] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3643'.
[  464.849084][T15432] netlink: 15743 bytes leftover after parsing attributes in process `syz.4.3642'.
[  465.012253][T15432] netlink: 'syz.4.3642': attribute type 25 has an invalid length.
[  465.730946][ T4382] wlan1: Trigger new scan to find an IBSS to join
[  465.909201][T15462] netlink: 'syz.4.3654': attribute type 21 has an invalid length.
[  465.989602][T15462] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3654'.
[  466.035510][T15462] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3654'.
[  466.083473][T15449] tap0: tun_chr_ioctl cmd 35111
[  466.262705][T15476] netlink: 'syz.4.3658': attribute type 21 has an invalid length.
[  466.289124][T15476] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3658'.
[  466.365223][T15476] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3658'.
[  466.442799][T15481] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  466.644629][T15492] netlink: 'syz.0.3664': attribute type 4 has an invalid length.
[  467.089199][T15507] delete_channel: no stack
[  467.121226][T15516] netlink: 'syz.1.3671': attribute type 21 has an invalid length.
[  467.231508][T15522] netlink: 'syz.0.3674': attribute type 21 has an invalid length.
[  467.699942][T15553] netlink: 'syz.1.3686': attribute type 21 has an invalid length.
[  467.730573][ T4400] wlan1: Trigger new scan to find an IBSS to join
[  467.877583][T15561] netlink: 'syz.4.3688': attribute type 1 has an invalid length.
[  468.034030][T15566] netlink: 'syz.1.3689': attribute type 3 has an invalid length.
[  468.095629][T15566] __nla_validate_parse: 9 callbacks suppressed
[  468.095650][T15566] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3689'.
[  468.225990][T15562] tap0: tun_chr_ioctl cmd 1074025681
[  468.689204][T15588] netlink: 'syz.1.3697': attribute type 2 has an invalid length.
[  468.700194][ T4387] wlan1: Trigger new scan to find an IBSS to join
[  468.711098][T15588] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.3697'.
[  468.955605][ T4382] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  468.998716][T15594] netlink: 'syz.0.3700': attribute type 21 has an invalid length.
[  469.007871][T15594] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3700'.
[  469.018195][T15594] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3700'.
[  469.477848][T15620] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3708'.
[  469.500717][T15622] C: renamed from team_slave_0
[  469.507367][T15622] netlink: 'syz.2.3710': attribute type 3 has an invalid length.
[  469.530577][T15622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3710'.
[  469.578529][T15622] tap0: tun_chr_ioctl cmd 35108
[  469.586223][T15620] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  469.610627][T15629] netlink: 'syz.0.3711': attribute type 27 has an invalid length.
[  469.639370][T15629] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3711'.
[  469.664518][T15632] netlink: 'syz.0.3711': attribute type 21 has an invalid length.
[  469.673903][T15632] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3711'.
[  469.690697][T15632] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3711'.
[  469.885342][T15641] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3717'.
[  470.841118][T15645] delete_channel: no stack
[  471.270235][T15676] device syzkaller0 entered promiscuous mode
[  471.730331][  T144] wlan1: Trigger new scan to find an IBSS to join
[  471.780872][T15697] device syzkaller0 entered promiscuous mode
[  472.731039][ T4382] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  473.757381][T15732] __nla_validate_parse: 7 callbacks suppressed
[  473.757401][T15732] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3747'.
[  473.956171][T15735] validate_nla: 2 callbacks suppressed
[  473.956225][T15735] netlink: 'syz.4.3749': attribute type 2 has an invalid length.
[  473.980639][T15738] netlink: 'syz.2.3750': attribute type 21 has an invalid length.
[  473.990726][T15735] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3749'.
[  474.014106][T15738] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3750'.
[  474.040392][T15738] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3750'.
[  474.444323][T15746] delete_channel: no stack
[  475.433403][T15766] netlink: 'syz.1.3760': attribute type 21 has an invalid length.
[  475.457412][T15766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3760'.
[  475.713744][T15778] netlink: 'syz.2.3765': attribute type 21 has an invalid length.
[  475.758597][T15778] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3765'.
[  475.797195][T15778] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3765'.
[  475.839565][T15780] netlink: 'syz.0.3766': attribute type 2 has an invalid length.
[  475.863169][T15780] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3766'.
[  476.056123][T15791] delete_channel: no stack
[  476.084079][T15789] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3769'.
[  476.427411][T15819] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3777'.
[  477.436489][T15851] mac80211_hwsim hwsim50 O3ãc¤±: renamed from wlan1
[  477.534673][T15848] delete_channel: no stack
[  477.750008][T15858] tap0: tun_chr_ioctl cmd 1074025673
[  478.315768][T15867] netlink: 'syz.1.3789': attribute type 6 has an invalid length.
[  478.548728][T15877] netlink: 'syz.1.3793': attribute type 1 has an invalid length.
[  478.580636][T15877] netlink: 'syz.1.3793': attribute type 1 has an invalid length.
[  478.624321][T15877] netlink: 'syz.1.3793': attribute type 11 has an invalid length.
[  478.805883][T15882] netlink: 'syz.0.3794': attribute type 10 has an invalid length.
[  478.814461][T15882] __nla_validate_parse: 6 callbacks suppressed
[  478.814479][T15882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3794'.
[  478.840491][T15882] device team0 entered promiscuous mode
[  478.846142][T15882] device team_slave_0 entered promiscuous mode
[  478.860449][T15882] device team_slave_1 entered promiscuous mode
[  478.867668][T15882] bridge0: port 3(team0) entered blocking state
[  478.880346][T15882] bridge0: port 3(team0) entered disabled state
[  478.895130][T15882] bridge0: port 3(team0) entered blocking state
[  478.901593][T15882] bridge0: port 3(team0) entered forwarding state
[  478.917601][T15879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3794'.
[  479.138475][    C1] 
[  479.138485][    C1] ================================
[  479.138492][    C1] WARNING: inconsistent lock state
[  479.138514][    C1] syzkaller #0 Not tainted
[  479.138525][    C1] --------------------------------
[  479.138530][    C1] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[  479.138539][    C1] syz.4.3797/15887 [HC1[1]:SC0[0]:HE0:SE1] takes:
[  479.138562][    C1] ffff888017a64218 (&htab->lockdep_key){....}-{2:2}, at: htab_map_delete_elem+0x1b2/0x520
[  479.138694][    C1] {INITIAL USE} state was registered at:
[  479.138701][    C1]   lock_acquire+0x19e/0x400
[  479.138722][    C1]   _raw_spin_lock_irqsave+0xb0/0x100
[  479.138741][    C1]   htab_map_update_elem+0x225/0xa40
[  479.138772][    C1]   bpf_map_update_value+0x57d/0x650
[  479.138819][    C1]   generic_map_update_batch+0x52d/0x7d0
[  479.138839][    C1]   bpf_map_do_batch+0x466/0x600
[  479.138859][    C1]   __sys_bpf+0x671/0x6f0
[  479.138877][    C1]   __x64_sys_bpf+0x78/0x90
[  479.138895][    C1]   do_syscall_64+0x4c/0xa0
[  479.138913][    C1]   entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  479.138933][    C1] irq event stamp: 1516
[  479.138940][    C1] hardirqs last  enabled at (1515): [<ffffffff89bcb5c6>] exc_debug+0xe6/0x130
[  479.138964][    C1] hardirqs last disabled at (1516): [<ffffffff89bcb54e>] exc_debug+0x6e/0x130
[  479.138986][    C1] softirqs last  enabled at (1510): [<ffffffff881c9da5>] netlink_insert+0xe95/0x11f0
[  479.139010][    C1] softirqs last disabled at (1508): [<ffffffff87db25db>] release_sock+0x2b/0x1b0
[  479.139033][    C1] 
[  479.139033][    C1] other info that might help us debug this:
[  479.139038][    C1]  Possible unsafe locking scenario:
[  479.139038][    C1] 
[  479.139043][    C1]        CPU0
[  479.139046][    C1]        ----
[  479.139049][    C1]   lock(&htab->lockdep_key);
[  479.139061][    C1]   <Interrupt>
[  479.139064][    C1]     lock(&htab->lockdep_key);
[  479.139075][    C1] 
[  479.139075][    C1]  *** DEADLOCK ***
[  479.139075][    C1] 
[  479.139079][    C1] no locks held by syz.4.3797/15887.
[  479.139087][    C1] 
[  479.139087][    C1] stack backtrace:
[  479.139093][    C1] CPU: 1 PID: 15887 Comm: syz.4.3797 Not tainted syzkaller #0
[  479.139113][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  479.139124][    C1] Call Trace:
[  479.139130][    C1]  <#DB>
[  479.139137][    C1]  dump_stack_lvl+0x188/0x250
[  479.139161][    C1]  ? show_regs_print_info+0x20/0x20
[  479.139185][    C1]  ? print_usage_bug+0x42a/0x690
[  479.139204][    C1]  ? verify_lock_unused+0x18/0x140
[  479.139230][    C1]  lock_acquire+0x2c3/0x400
[  479.139252][    C1]  ? perf_swevent_get_recursion_context+0xda/0x150
[  479.139278][    C1]  ? htab_map_delete_elem+0x1b2/0x520
[  479.139299][    C1]  ? read_lock_is_recursive+0x10/0x10
[  479.139330][    C1]  ? perf_trace_lock_acquire+0x1a0/0x3e0
[  479.139352][    C1]  ? look_up_lock_class+0x71/0x110
[  479.139376][    C1]  ? verify_lock_unused+0x18/0x140
[  479.139403][    C1]  _raw_spin_lock_irqsave+0xb0/0x100
[  479.139424][    C1]  ? htab_map_delete_elem+0x1b2/0x520
[  479.139443][    C1]  ? _raw_spin_lock+0x40/0x40
[  479.139464][    C1]  ? htab_map_hash+0x301/0x6d0
[  479.139485][    C1]  htab_map_delete_elem+0x1b2/0x520
[  479.139511][    C1]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x6b0
[  479.139531][    C1]  bpf_overflow_handler+0x3fd/0x4a0
[  479.139559][    C1]  ? perf_event_switch_output+0x730/0x730
[  479.139583][    C1]  ? trace_call_bpf+0x515/0x5b0
[  479.139660][    C1]  ? __perf_event_account_interrupt+0x187/0x280
[  479.139684][    C1]  __perf_event_overflow+0x364/0x530
[  479.139709][    C1]  perf_swevent_event+0x4ad/0x530
[  479.139734][    C1]  perf_bp_event+0x276/0x320
[  479.139756][    C1]  ? perf_trace_lock_acquire+0x340/0x3e0
[  479.139780][    C1]  ? perf_event_free_bpf_prog+0x110/0x110
[  479.139800][    C1]  ? perf_trace_lock+0xe4/0x390
[  479.139838][    C1]  ? rcu_lock_acquire+0x9/0x30
[  479.139907][    C1]  ? read_lock_is_recursive+0x10/0x10
[  479.139935][    C1]  hw_breakpoint_exceptions_notify+0x152/0x470
[  479.139987][    C1]  atomic_notifier_call_chain+0x15d/0x280
[  479.140013][    C1]  notify_die+0x141/0x1a0
[  479.140036][    C1]  ? srcu_init_notifier_head+0x90/0x90
[  479.140062][    C1]  ? exc_debug+0x6e/0x130
[  479.140085][    C1]  ? trace_hardirqs_off_finish+0x57/0x1f0
[  479.140107][    C1]  notify_debug+0x20/0x30
[  479.140135][    C1]  exc_debug+0xcf/0x130
[  479.140156][    C1]  asm_exc_debug+0x1a/0x40
[  479.140175][    C1] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  479.140206][    C1] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8
[  479.140225][    C1] RSP: 0018:ffffc90002f5f7f8 EFLAGS: 00050202
[  479.140243][    C1] RAX: ffffffff83e1fd01 RBX: 00000000000000d8 RCX: 00000000000000d5
[  479.140257][    C1] RDX: 00000000000000d8 RSI: 0000200000000303 RDI: ffff88802196b003
[  479.140272][    C1] RBP: ffffc90002f5f950 R08: ffff88802196b0d7 R09: 1ffff1100432d61a
[  479.140288][    C1] R10: dffffc0000000000 R11: ffffed100432d61b R12: ffff88802196b000
[  479.140304][    C1] R13: dffffc00000000ff R14: 0000200000000300 R15: 0000000000000000
[  479.140330][    C1]  ? _copy_from_iter+0x2f1/0x1170
[  479.140359][    C1]  </#DB>
[  479.140365][    C1]  <TASK>
[  479.140371][    C1]  _copy_from_iter+0x318/0x1170
[  479.140395][    C1]  ? __lock_acquire+0x7d10/0x7d10
[  479.140423][    C1]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  479.140447][    C1]  ? __virt_addr_valid+0x3c6/0x470
[  479.140495][    C1]  ? __phys_addr_symbol+0x2b/0x70
[  479.140514][    C1]  ? __check_object_size+0x30c/0x410
[  479.140539][    C1]  netlink_sendmsg+0x758/0xbe0
[  479.140565][    C1]  ? netlink_getsockopt+0x570/0x570
[  479.140587][    C1]  ? aa_sock_msg_perm+0x94/0x150
[  479.140610][    C1]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  479.140633][    C1]  ? security_socket_sendmsg+0x7c/0xa0
[  479.140655][    C1]  ? netlink_getsockopt+0x570/0x570
[  479.140675][    C1]  ____sys_sendmsg+0x5b7/0x8f0
[  479.140704][    C1]  ? __sys_sendmsg_sock+0x30/0x30
[  479.140733][    C1]  ? import_iovec+0x6f/0xa0
[  479.140758][    C1]  ___sys_sendmsg+0x236/0x2e0
[  479.140786][    C1]  ? __sys_sendmsg+0x2a0/0x2a0
[  479.140817][    C1]  ? trace_event_raw_event_lock+0x270/0x270
[  479.140856][    C1]  __se_sys_sendmsg+0x1af/0x290
[  479.140881][    C1]  ? __x64_sys_sendmsg+0x80/0x80
[  479.140903][    C1]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  479.140935][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  479.140960][    C1]  do_syscall_64+0x4c/0xa0
[  479.140978][    C1]  ? clear_bhb_loop+0x30/0x80
[  479.140998][    C1]  ? clear_bhb_loop+0x30/0x80
[  479.141019][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  479.141040][    C1] RIP: 0033:0x7f090c665e59
[  479.141058][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  479.141074][    C1] RSP: 002b:00007f090a8bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  479.141095][    C1] RAX: ffffffffffffffda RBX: 00007f090c8defa0 RCX: 00007f090c665e59
[  479.141110][    C1] RDX: 0000000024044084 RSI: 0000200000000040 RDI: 000000000000000d
[  479.141124][    C1] RBP: 00007f090c6fbd6f R08: 0000000000000000 R09: 0000000000000000
[  479.141137][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  479.141149][    C1] R13: 00007f090c8df038 R14: 00007f090c8defa0 R15: 00007ffca472df28
[  479.141173][    C1]  </TASK>
[  479.885349][T15887] netlink: 'syz.4.3797': attribute type 21 has an invalid length.
[  479.893475][T15887] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3797'.
[  479.903287][T15887] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3797'.
[  481.371349][T15857] base_sock_release(ffff8880609cf800) sk=ffff888062444000
[  488.050234][ T9080] Bluetooth: hci5: command 0x0406 tx timeout