last executing test programs:

3m12.343343792s ago: executing program 1 (id=2198):
r0 = socket$kcm(0xa, 0x3, 0x3a)
r1 = gettid()
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x309)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0xad}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_clone(0x200000, &(0x7f0000000300)="fadd7463169a08512ebc1dc2ac201d0150895a5e5be310a7e05237d0fc7552661c1d9065f2b939888705d7d5062ca1856074f9ee68f907d9ba1180557c8e0ad81b504ce2a8f51ffd0073c69117f90025481e41c40b363da10b92b634c9716d9dce8938db7f7416a722cb29411fdb155473efc6a145b9490aa0f07555214a48080e67f1663eadf3013937dd5f8188ece6dea3cf92f41c90ebba4fff2a90af78396c440db99e45", 0xa6, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c3090000a0000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) (async)
sendmsg$kcm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000880)="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", 0x1000}, {&(0x7f0000001880)="596eb160ac17e63652d7470fc1", 0xd}, {&(0x7f00000018c0)="a605140fd53cfc41d27fb8d82817b1234ec4d0", 0x13}, {&(0x7f0000001900)="d25f6cd22beceea77c9d9a36fd15aba7c6025e365acbdebd3502b54b654cd2bb9d80a3e3fafcde06412ba9a23505c59214", 0x31}], 0x4}, 0x8080) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001f000000000000001c0000008d7477256882633fe74ca2000000baa4a77a4a8e09fcd0e5000f04000000100000000000000e03000000020000009f7800616100"], &(0x7f0000001fc0)=""/4128, 0x3a, 0x1020, 0x1}, 0x28) (async)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0)

3m11.048670423s ago: executing program 1 (id=2202):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x0, r0}, 0x94)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
gettid()
r2 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r2, r0, 0x0, 0x0, 0x0}, 0x30)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
socketpair(0x15, 0x1, 0x3, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043f000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

3m10.441346392s ago: executing program 1 (id=2206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffa}}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x5ae)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x15, 0x5, 0x0, &(0x7f0000000500))
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb2dcc009f476718ec977a2d4ba13e26370397a24064", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32, @ANYBLOB='\x00'/14], 0x48)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000000380), 0x12)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="928e04b416f09fa7a009aee21be2", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3m7.575647596s ago: executing program 1 (id=2211):
socket$kcm(0x2b, 0x1, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x7, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
setsockopt$sock_attach_bpf(r0, 0x29, 0x4e, &(0x7f0000000000), 0x4) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
close(r2) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x41)
syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade928", 0x11, 0x0, &(0x7f0000000840), 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ec0)={r3, 0x58, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00), 0x4)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r4, r5, 0x2, 0x3, 0x5}, 0x50) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r5}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x16, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="b70200000a0000007b2ac0ff00000000632ac8ff00000000b70200000001010abfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r7, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) (async)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x9d, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f20e94d079f199b8a1fb521f3756a955ecdf157902f64d1c3c941187f21467c767be90f8829742af2bc17d5721b550573478b6b8282040c5a3747186fdbb5cd07a005be37af4306c2444dad7bc6bee8ca671654ba67b740554a723ad450d2fe05e561efd5b5fd646a06d273ca188f346864bb2a4ba3f2ea1dfb3a21122eae0d8b60fad85a08720d94453f17dff13d4b", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000040)={<r9=>r1})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x10)
sendmsg(r9, &(0x7f0000000d40)={&(0x7f0000000540)=@xdp={0x2c, 0x1, r10, 0x6}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000740)="baf09fe828f11ecbddd370813685b0f0124f7b9320bcf4167daa2ee36b75a609cc7adf8c94d574e21440ae2276f9068350c71fe36cab78c6edefede1fb14606deafb549b1ebb83fb767b81229a454202896e57bc0a4f3896c9ab5326f1aa36b3cbb50b3f955686686975ea4ae01207ff09738834cad034f3d96ab61fdf6a2635956f8ee3c1f464c83a11b5a96d7560c321d71f3f0e566acb3614cbde0a1a1800ed169c8127384ebad80cd15e97563cdd030a20d74925cccd45488b26268319293f97615d39473962e8292918cbfa8d736d3e", 0xd2}, {&(0x7f0000001280)="de1d572b25cddb8ef2bfce7bc71042931745b64ec8dccdfc563a45b522a088490f4275527980d6bf4dac17e3e99638e20feaea271ff757cba216b947d5451387165031963dcd99f6db7cdd63bfe96c3e8fcbc3f9a8dd59de5662186b6ff87ca6e21e369a6bccd1affd84d270cca4e406b6a905d6c2a0764ef1d9d08c0a94e330e57499c46dd6ca9eeb7844d901c7e548abf37793e9d0fac12039e1d12024cf7594cdcd640468dffd584b39388b1e305a304d655680372effbe695094af3dca83fe35fdc0623b12340b0e0e46eaa2bd0268d0cabcbbac6ee56258ed6c12cc14bef1b5dc2d663711b562d64623e65bda5d080b45c732a1d69669565e94000409f2a5fdd0a3b3c7632c0595f86c21854921b295a610523e602cf2da383b65219218c7b37d72c14dab5bb0f28d8491648acf5ae1f62fad7386773dece2e7e4cafdea671e74", 0x143}, {&(0x7f0000000900)="927310586c35bae80195cf1b26dbe9ca61e979bf3cf1a9860bb0bbb5772aee44355bd2b8d09fe2b4351b7f12fa32657171bfd3c66785f6cdf0667a7f2c6f2e086f4e7f355d02563be7f452de6e6403441905033aea1760912f11babf4a3aeb530eba1b797bf5adf2084d901707770f2ca08690f0b759a78780ea3db5826969df2588fbdc9bf1be1dd79a5433e7e66a720db015869a4611b9ffb3defc7e10689fb841", 0xa2}, {&(0x7f0000000a00)="c0bf9a0bafe2fd7365de39ba2ceb", 0xe}, {&(0x7f0000000a40)="168b5c4c7d60ba6e6a1ab5ab6df6ac7da84714d8f0038363e8599f0dd6f991fbd386f986090c640e633b0702f96c958d227648a1f12c20b37a0747b72abe75c3de0a230257dab106590982217eab470285f4c33c45477b9c017738138d5883cb54cb17ee3846f50936b4526f54b5ef1c315c81f76923c2efa82db3b32263589279187d822d90552c7f3e2d72e6bad1618ee09a5a295c0b6c3bb85879d1bd0a8f982170ed719bd50f527380e00ce4550365f6fd05a15f4d4f71ffe45e22dc532ea2", 0xc1}, {&(0x7f0000000b40)="82b4d5516124aa32113da0caa7dbb8ffd86e084a00000000d0d28008ca94aa0842924cbe6bf0658b9b85ddbef8157efd7e3b3a684f464f38f6fd29a617fb770fb903d4bd8baa07ff7476af4b4430b49ce3debdf3b6a37c9ed4960f787836bb82178d5afc4206b1cb33a3d520ee9254754e1a4ef725a8f156cbd63a92e35dbbfe", 0x80}], 0x6, &(0x7f0000000fc0)=ANY=[@ANYRES32=r5], 0xe0}, 0x4001) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8924, 0x0)

3m6.553838574s ago: executing program 1 (id=2216):
r0 = socket$kcm(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x1}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @volatile={0xf, 0x0, 0x0, 0x9, 0x2}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x33, 0x2}]}, {0x0, [0x5f, 0x30]}}, &(0x7f0000000580)=""/120, 0x50, 0x78, 0x0, 0x5, 0x10000}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x1, 0x20, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0x0}}, 0x10)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x800}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000a80)=ANY=[@ANYBLOB="852000000500000085100000003341ed323dcee970756a05000800000018000000ff0300000000000001800000186a00"], &(0x7f0000000ac0)='GPL\x00', 0x5, 0x36, &(0x7f0000000b00)=""/54, 0x41000, 0x21, '\x00', r4, 0x4848987f67b3660b, r3, 0x8, &(0x7f0000000b40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x4, 0x2e1, 0x1}, 0x10, 0xe2d3, r5, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000000000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000b0d37ccf080000000100000800000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000300"/28], 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0)
socket$kcm(0x22, 0x3, 0x0)
r7 = socket$kcm(0x22, 0x3, 0x0)
close(r7)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1f848020000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)
r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000802000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="7f00000000520e2e861fe7fa7f52ee0000000000", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="0000000001"], 0x50)
r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x24, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8d36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x31}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x69c, 0x0, 0x0, 0x41100, 0x2, '\x00', r4, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x7, 0x4}, 0x10, 0x506, 0xffffffffffffffff, 0x9, &(0x7f0000000380)=[0x1], &(0x7f00000003c0)=[{0x2, 0x2, 0xb, 0x7}, {0x1, 0x1, 0xa, 0x8}, {0x2, 0x5, 0x2}, {0x4, 0x3, 0xc, 0xd}, {0x3, 0x5, 0x4, 0x3}, {0x3, 0x5, 0x2, 0x9}, {0x3, 0x2, 0x0, 0xb}, {0x5, 0x5, 0xf, 0x3}, {0x3, 0x3, 0x8, 0xb}], 0x10, 0x1}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x6, 0xc, 0x2, 0x2, 0x400, r10, 0x1, '\x00', r4, 0xffffffffffffffff, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0x19, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffffe}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff9}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x1, 0x46, &(0x7f00000007c0)=""/70, 0x41000, 0x10, '\x00', r4, @sock_ops=0x3, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x3, 0x1, 0x0, 0xc}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000a00)=[r1, r12, r1, r10], &(0x7f0000000a40)=[{0x1, 0x5, 0x1, 0x8}], 0x10, 0xa}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x80000, @dev={0xfe, 0x80, '\x00', 0x22}, 0x3, 0x1}, 0x80, 0x0}, 0x200008c1)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000640)=@generic={&(0x7f0000000100)='./file0\x00', r11}, 0x18)

3m6.229811599s ago: executing program 1 (id=2220):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) (async, rerun: 32)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async)
r4 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12) (async)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x7, &(0x7f00000007c0), 0x4) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)

2m50.965064604s ago: executing program 32 (id=2220):
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async)
r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 64)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0}, 0x94)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) (async, rerun: 32)
r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r3, &(0x7f0000000280), 0x9) (async)
r4 = openat$cgroup_procs(r2, &(0x7f0000000400)='cgroup.threads\x00', 0x2, 0x0) (async)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r4, &(0x7f0000000080), 0x12) (async)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) (async)
r7 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r7, 0x84, 0x7, &(0x7f00000007c0), 0x4) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) (async)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f00000001c0), 0x12)

9.505569266s ago: executing program 2 (id=3022):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae890000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
close(0xffffffffffffffff) (async, rerun: 64)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)={r3, r2, 0x4, r2}, 0x10) (async)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) (rerun: 64)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x8a, 0x0, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r4, r6}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3}, 0x94)
r8 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={<r11=>0xffffffffffffffff}) (rerun: 32)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4)

8.512487602s ago: executing program 0 (id=3024):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x2300, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700000000000000de80000085000000750000009500000000000000"], 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15917939fc24ceb8}, 0x94)
r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x1, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
syz_clone(0x566599ab5ea52b61, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xfffffffffffffffe, 0xc2ba, 0x0, 0x4000000, 0x7, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x6, 0x1f, &(0x7f00000000c0), 0xd8)
close(0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x801c581f, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80040, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000014c0)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRESOCT=r5, @ANYBLOB="bf9f74e5270adbfb5c806045d14634a4d5c8b8f6d8cd38d858852195f060f55b4701aa121b71b5754d523e419d36bf803da1179f75a2b5090c7ce80d825a", @ANYRESDEC, @ANYRESHEX, @ANYRES32], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x78}, 0x94)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x76e9bdd7, &(0x7f0000000080)=[{&(0x7f0000000b80)="c00e02002c000b35d25a806f8c6394f90a24fc602f1b02000a740100053582c137153e370248018000f01700d1bda35d97dd4680a1602eb7b5d3c778e4128f4e4179c2ee7a4f7b7520483cfa140482c7c6a93f855c766e19a8d84784437ed3b1feead649d6d371107f11a7da905316d53c222fa1c76b0df5dc91a48b2266cf763b0d052e118f50eb0170cc01935718b72fc00e961b6b7c436125b94153950dd2b3c170e7d49048cf0f425b5afd508463e2656cf4304103", 0x33fe0}], 0x1}, 0x40)

8.073043212s ago: executing program 0 (id=3026):
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)

7.833544264s ago: executing program 0 (id=3028):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffffffffffdfc)
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffba}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={r0, 0x20, &(0x7f0000001880)={&(0x7f0000000800)=""/4096, 0x1000, 0x0, &(0x7f0000001800)=""/87, 0x57}}, 0x10)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000040)="5a6e41dea4", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfffffffffffffdfc) (async)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
close(r0) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffba}, 0x80) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2880, 0xc8, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={r0, 0x20, &(0x7f0000001880)={&(0x7f0000000800)=""/4096, 0x1000, 0x0, &(0x7f0000001800)=""/87, 0x57}}, 0x10) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
close(r3) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000040)="5a6e41dea4", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) (async)

7.417793833s ago: executing program 0 (id=3031):
r0 = socket$kcm(0x2, 0x3, 0x84)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000001600)={r1, &(0x7f0000000100)}, 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000002101"], 0x48)
r2 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x4, 0x8, 0xf, 0x0, 0x7, 0x8004, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x4, @perf_bp, 0x40, 0x4, 0xb, 0x2, 0xc00000000, 0xfffffffd, 0xd91, 0x0, 0x7, 0x0, 0xa4db}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r2, 0x0) (async, rerun: 32)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, &(0x7f0000000100)) (rerun: 32)

6.965146485s ago: executing program 0 (id=3032):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000200)=@raw=[@ldst, @exit], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94)

6.84142729s ago: executing program 3 (id=3033):
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = gettid()
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x200020000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0x72}, 0x40, 0x5, 0x0, 0x0, 0x3, 0x7, 0x81, 0x0, 0x0, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

6.527987655s ago: executing program 0 (id=3034):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x4, 0x103, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000024004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb3500a007a290457f0189b316277ce06bbace8017cbd74c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0x11a}], 0x1}, 0x4000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\vD\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$kcm(0x21, 0x2, 0x2)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000000c0)='&\x00')
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x3, 0x0, 0x0, 0xc}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20)
r6 = socket$kcm(0x11, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000080)=r9, 0x4)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
close(r3)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r11], 0x9a)

5.636823367s ago: executing program 4 (id=2953):
r0 = socket$kcm(0x10, 0x2, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d030000000000000000000009040000000000000000000002020000000000000061"], 0x0, 0x52}, 0x20) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x8}, 0x428, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0x2, 0x300)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) (async)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x8}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) (async)
recvmsg(r3, &(0x7f0000000840)={&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)=""/197, 0xc5}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/151, 0x97}, {&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/92, 0x5c}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000500)=""/164, 0xa4}, {&(0x7f00000005c0)=""/227, 0xe3}, {&(0x7f00000006c0)=""/1, 0x1}, {&(0x7f0000000700)=""/7, 0x7}], 0xa, &(0x7f0000000800)=""/40, 0x28}, 0x22)

5.545620851s ago: executing program 5 (id=3036):
socket$kcm(0x21, 0x2, 0x2)
r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000500))
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, r4, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b07d25a806f8c6394f90424fc60040001002b1b0100083582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x1f00)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x4000000000000000, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8, 0x2, 0xfffffffe, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x7, 0x10)

5.542379261s ago: executing program 3 (id=3037):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000001a40), 0x1003, r6}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000080)={r6, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20)
r7 = socket$kcm(0xf, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94)
sendmsg$inet(r7, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000fc482707750b81c3d6f24a7a241bdd202e138354"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x88408, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xc, 0xffffffffffffd059}, 0x0, 0x2000003, 0x0, 0x5, 0x0, 0x48e7, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r10 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r10, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r10, &(0x7f0000000240)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x326684230b85cfdc)

5.361870889s ago: executing program 2 (id=3038):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600200003401c000200035c0461c1d67f6f94007134cf6efb8000a007a290", 0x51}], 0x1}, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x29, 0x14, &(0x7f0000000440), 0x3d)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r1}, 0x38)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000020100)={0x3, 0x7, &(0x7f00000201c0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000088000000b70000000000000095000000000000"], &(0x7f0000020200)='GPL\x00', 0x2, 0x20000, &(0x7f0000000100)=""/131072, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="120000000000001600"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)
recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x20)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180)=r9, 0x17e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000802000000000000000000000d00000000000000000100008500000000deffffff0000000000000000000000005100"], 0x0, 0x4e}, 0x28)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000060000000b"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r11}, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_type(r12, &(0x7f0000000100), 0x2, 0x0)

4.486847741s ago: executing program 5 (id=3040):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000061198800000000009500000000000000611d84d2f04e31f7316fc8882727e09b50ce3a17cdc4cd3f17f410e4a0520db00b8e8ade1a62a15f7ab4f3d534c16a4d7b005c5f174625511b1ef8f731d6c7f8376f86af007d9714308e47ce6e402add88399648a1cdd9e171af2443535dd24840468fbc9552288a982a27dfa3aa2424e58e78f332d6d020747e0632be9b091de95b5740b35eae746b83f73ae122350419c85ee7f64cad034575cd772902459e9a2ccb75fe9e006632c4a3b8599aff08db67eeb726db41"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64)
socket$kcm(0x10, 0x2, 0x10) (async)
socket$kcm(0x2, 0x200000000000003, 0x106)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) (async)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2004d, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x2, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x1001, 0x0, 0xfffffffe, 0x5, 0x0, 0xffffff77, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) (async, rerun: 64)
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (rerun: 64)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r0], 0xfe33)

4.350076567s ago: executing program 4 (id=3041):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x1e, 0x5, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x324a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1a220, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
unlink(&(0x7f0000000040)='./file0\x00')
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88fbffff4000890677fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

4.254586541s ago: executing program 2 (id=3042):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @func={0x4, 0x0, 0x0, 0xc, 0x3}, @float={0xe, 0x0, 0x0, 0x10, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0xf}, 0x28)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$kcm(0x11, 0x20000000000000a, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"})
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="9d71069f725945c76ea0b81d3870a9eefe8c021ce75a1742204c03e2aebe43d534eec6d8eed9732e356d702c2cc341b3c215c1ff6b39ae995c9f08a199863ecaffe003fc5d4d0746710da3400fee06554c1255e66f903baa76e8c03b92b4e59dc2037e7d1f8395dd829f1efdb6b77740bc048a9d32fc4486eb962de3e23fb9ca53699929ebe2507779937968c132a8cded05d2dc6abb3926384d57ad19db688b8c8e", 0xa2}], 0x1}, 0x41)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010003000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8993, &(0x7f0000000040)={'bond0\x00', @random='\x00\x00\x00\x00\x00 '})

3.252436428s ago: executing program 5 (id=3043):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
recvmsg$kcm(r1, &(0x7f0000001280)={&(0x7f0000000000)=@can={0x1d, <r2=>0x0}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/75, 0x4b}], 0x2, &(0x7f0000001240)=""/9, 0x9}, 0x588ee92e0308c6ce)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)=0x1)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0)={[{0x2b, 'io'}, {0x2d, 'blkio'}, {0x2d, 'rlimit'}, {0x2d, 'net'}]}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="18"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
close(0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x13, &(0x7f00000016c0)=ANY=[@ANYBLOB="aa2910ac24b1790a708f597d5e5fbf121ddf67d380ed4efd89e1eb9b5116bd41ed9fa8bd11b0e4dbabb13be51339ce78c3ebf9f3e6ed9713a725e279fab6ed2c0542d34b93e51f682984ac3b4e7e248059efa4a2b7624fdc05db01eba8e007b3716ef3598a3bb75ebfde012711edd609a1a4c2b5a1cc87081450d573691b534951a4f5b690e8c8ef2a", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000002d0000b7080000080000007b8af0ff00000000bfa100000000000007010000f82698aeb3890a8727475ac9fe9dffffffbfa400000000000007040000f0ffffffb7020000080000001823000006f70000000000000000000000000000000c806ca743627655c607bd379f67a8eaa1a32a", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000035760400f0ffffffbf45050007000000"], &(0x7f0000001380)='syzkaller\x00', 0x5, 0x99, &(0x7f00000013c0)=""/153, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x3, 0x7, 0x9, 0x40002}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r8}, 0xc)
recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [<r9=>0xffffffffffffffff]}}], 0x18}, 0x0)
r10 = socket$kcm(0xa, 0x2, 0x88)
setsockopt$sock_attach_bpf(r10, 0x1, 0x41, &(0x7f0000000040)=r9, 0x4)

3.097773055s ago: executing program 4 (id=3044):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000002d40)=ANY=[@ANYBLOB="004bd97f2aa2890e264dddf01ce1d450141a0c011253cb2fa32c46b3ed3439eac50a91cc275662892bf056269df68e01b08f298ac8022d22b8ee1a5a8fa9d96ed78d6a46bc7bc5d70092327dede5ee0c4cdc72b000073e7b5bd6a495953f2aedc4cc4bd4ec4aa5c52a29af54c8030107729fee532e20bbcd9f5776d0eb04b5f95e7855eeac6edb5d7b9b08dfe6507fd219a26f3658cbd01d912c90ec1de5d500f06c06906b50104315619d90a7fd484be00e191b7d3fb57630a75f30b1366925fa8275c61681dfb72a82d80fcf02c5acb204466ea07c357474056fca10c3e767ebd28f23", @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r5}, 0x8)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r4, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20)

2.803902569s ago: executing program 3 (id=3045):
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b000000140000"], 0x28}, 0x0) (async)
r1 = getpid()
syz_open_procfs$namespace(r1, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r5, &(0x7f0000000840)={&(0x7f0000000500)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/247, 0xf7}], 0x2, &(0x7f00000007c0)=""/78, 0x4e}, 0x12100) (async)
close(r5) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) (async)
r6 = socket$kcm(0x2, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async)
setsockopt$sock_attach_bpf(r6, 0x84, 0x77, 0x0, 0x0) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8b20, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x4}, 0x5601, 0x0, 0x0, 0x9, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x9, 0x77c}, 0x0, 0xd1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ef05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000)
r8 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000140)='!!=prio\x0ea&\x00')
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50)
close(r9)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0200"/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdbb, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.811617696s ago: executing program 4 (id=3046):
socket$kcm(0x10, 0x2, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32)
r0 = socket$kcm(0x10, 0x3, 0x10) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x10000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) (async)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64)
r3 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x8, 0x0, 0x44) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x14008000) (async)
perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0xcc, 0x0, 0xa, 0x0, 0x5, 0x8044, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_config_ext={0xd4, 0x2}, 0x100, 0x32, 0x1, 0x5, 0x8, 0x9b9b, 0x6fff, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x91, 0x0, 0x0, 0x0, 0x4d31, 0x102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x0, 0x2, 0xffffffffffffffff, 0xb)
r4 = socket$kcm(0x1e, 0x5, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0xfffffffffffffd75, 0x0}, 0x40810)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600", @ANYRES32], 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x201, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x401, 0x20f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffd, 0x0, 0x0, 0x5ff, 0x0, 0x80}, 0x0, 0x10, 0xffffffffffffffff, 0x9) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))
recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/264, 0x108}], 0x1}, 0x40000010) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') (rerun: 32)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) (async, rerun: 32)
socket$kcm(0x2, 0x3, 0x2) (rerun: 32)

1.669534102s ago: executing program 5 (id=3047):
r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x2, 0x40}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x508, 0x0, 0x1, 0x70, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040)
recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/56, 0x38}, {&(0x7f00000000c0)=""/46, 0x2e}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/158, 0x9e}], 0x4}, 0x22)
recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0)
recvmsg$kcm(r5, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x40002020)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000007000000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r6)

1.669064013s ago: executing program 2 (id=3048):
r0 = socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x10) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async, rerun: 64)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (rerun: 64)
recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.638771084s ago: executing program 3 (id=3049):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="4200000004000000060000000500000a00100000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c02000a040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffff, 0x18}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x6, 0x0, 0x0, 0x6, 0x10}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1.06639133s ago: executing program 4 (id=3050):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50194, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x6, 0x8, 0x80000000000000, 0x2, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000007c0)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}, 0x326684230b85cfdc)
r2 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33)

982.462525ms ago: executing program 5 (id=3051):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001880)={&(0x7f0000001740)=ANY=[@ANYBLOB="9feb01001800000000000000620000006200000008000000010000000700000f020000000500eea689d300000300000002000000040000000400000004000000050000000500000004000000ca0000000300000001000000070000000800000001000000040000000038000002000000060000000700000029fe00000000300061002e00"], &(0x7f0000001800)=""/120, 0x84, 0x78, 0x1, 0x7, 0x10000}, 0x28)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001940)={0x1, 0x58, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000001980)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="905d429b000000000000000000000000001006", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', r3, @fallback=0x22, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x94)
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0)
r5 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe)
socket$kcm(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000040)=@generic={0x0}, 0x18)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0)
r6 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x400c844)
socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)}, {&(0x7f0000000640), 0x97ff}], 0x2}, 0x0)
r7 = socket$kcm(0x21, 0x2, 0xa)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0xfffff000, 0xe, 0x0, &(0x7f0000000080)="5c250ed6087361df712bc884fed5", 0x0, 0x81, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}, 0xfcca, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x807e)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3}}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000080)="8cf72b70971e369af74e017604d6067a570fe09277542dab0f340fedc36020bd98a733ade1017e36f16b269dcbc8060148e4906cfa72161611b2286ab4216179eef06b3dc3e6e4a9bf30f51081947519c5046d56938b70d12913b5a234c3f6513e17eb7e7cfc9db7ec5b6d8b69b0d249b777e9158eda9ed97e64a20866fffb54b331f3f0ca1653218e55a05968b712e2b02cb1bf11f15b2c66f2868a9b30c476b3b2ef25679e5dac8a6d2c8c10f70cfa0ee3aad3fbe2b54d3bda31e03f7befdd09f0c8dbb0f35d9e318b7c13262b852eb2058cc213dcc9811e", 0xd9}, {&(0x7f0000000180)="a8dfd5012c3d440f87034448515519e99c25d66233d486db8ef5da9962a2c2cba11aa2fea42496718b690432ffbb", 0x2e}, {&(0x7f0000000340)="19ea990a376c523afc38d0a13696c499c0ec7ff3f2336cd63593e4adc05ff43869632420e30156642eb36fa729b0673a484ea0b5fc7652d4bd5e647d85e097a1553d06800a81e1dc138b89c395711f9de3c0a2ee8e041f42b7357607601d42337a9962564e9a7472944464db58dc4e19bbbc7c58473e1d39abf4a7da008bae6d81b2", 0x82}, {&(0x7f0000000400)="4e33414293edc11b45e1dee8e6dcc16909aaba97f9bec4e412717e51e3f5cecbe165a503ffb91b0020768663415f7b924dad2d409386e041e7e6956521d9b4a406047e694012027781d8e12c4426392edf13f01fc3044120647310d59d171e8b50536b40c934b8d331f341a52d1725ea5b5c37538811e59c15ea2692ebf41336110c25ff77c4a9f578698532fcb65aefd485c232fe1ef639fa1ca37e8d78a67b4caeb7f2113a242777d0e1748fa84219fd91b4c50e502b42187413d6138655c4baa4cfadee3a61b7b0bd9b432fcafeac7b180013ad82d7c40c75f5a35e17b1ce217c74706245ab174de1a2533831098afb7b75f0ca36cf01f6a81720bc0460e8b4388f50c20659036b3fcfcefba1b21b4c121926eb531db72bc6755401ace12ec09d362b6823d17a87473474a2220db94a5d6143bbec15888b892659adf9d664a7dc88cc1912eb834a4ee691b9d40ba895d01ad18ace68a3d1ea8ff30ef452ebedf1044b4b2af7c8aaffa4d54b51c90db1b8f2c8ed53a1e45f41ea4d9f3bfbcfbd573feca0c3eb167c54661670f4e5db11c2ff829ea94f26089e950b60aebbe6b2e7618bb41c6d0167a2fb7980b9b6ea8ad3b2fb3a63903d1113f6b8d7c37cc9f48c868f5e71f2ee0dba8fb6d4b7aaeb35450ed4dfeef5e12132d685dd3a016afeb51538e34eb86e89a536e2235209e53af7b2075410050a0c854a057758150be060aa2960725f7f6931f165c07201d73a88f6edb53f8b399a0c950dd57cab33fc2925a5afafe88fd7c8aa36f6ef3ae64e02546ba17083efbcbbc2ced7f870a82dbcf2a6a79645f2d7a544e2d505401482e1887c73f4127732b8d0995369e459dcd612adbe4beaae85b0d275d0cf5d5c96a888fe0a100f0a39295187ca191daa7357bbf2810854c25ae6a52cac1bcd497ceb97d2738105d3fd11ba87f02499ebdf8f2b4095a120d1feeacbd9319add9bfaa2072590f63dd275787899909f45073ef5147b2ff236c13152b923cffcaed8262bdf0fa0440d08d9344c7aaae7eebcf75b45869988e36d4ba764d33c372ad5efc0e81356da88b38a2c24c35bc9cd5693f2e9c44278377cdbeefadaadba71129c9525b9798bb478f37d0704ec1536bb7c0a36e52816f73bf63550c5d7d428264cfd3cd2278774f504cc6c094da8be5c62c273b7b04c88d0d05f0efaffe0836c24a3adbcdc76983c9aefc501e736edf44d12314a82ccf77db60287cc3a0684306bf6fcfe01dc031575fa04d321b2fe1df9ccd3f121db8a96526d9ef3aad8d36708d59a77de9791df4c813f52268380752504b7b1e45e044f22e3a3735cfccc2ebbfa61b50ffe45f2bc8ddddace8485cb8cffee524f87bee8d1194dc3ea59adf6bf30bd01cfd1d796031b9f595fcacb6b2f65187fd28c5b8a5d3f4bbd6f8fc3ff7ef7dee32fe9aeeb0ce0b3c581f81edcbd514b9c30c4dbf05685a6a57d11b4572945ed2327d2b64890d1a6d19d2a84659f2324842b6c79c2328333dbbc96016c008bdf16d31ef8196ecdbb2d00d93f26dc61361f21e0f5fd9a3baf8f5b578df95415cac7c7b65794561a64865214ec63cdcecc0d2f3cf6026d8c548574e80d287d44ffe68a0e06928a4c105d48e63a815a919bacadea6bdade1f31fbc35c984d204e387462a4cb4751143b75ec1b800024fa7b410e238969859063155867970256ad812aa5f6d53707f27df7dd4056a905cea82001f9accaa28e02aea92ce11b7315fdf8625e92f71223a118dd0704204d7b223f092493327da8484c742d144857c6378c01d85f589c17c73ce1087aa28fa937748550bbadd5d7bae55f5f93197ec476dc926d965068ce1e3644c218f24d3dc11c165e94e79a49f575ce4b02aa917e32c5c8397453f77ffdddc3aa53f9c84511789eb68c43c0d3a0f8652aaf2ee7c4748df9aa93802abeff0a5929ad21eb3dd90d40fe32328250f51241c42789f8f3884698e4b4ea7f7490409baba38932b42a28fd8149fdc8da12e831710d867f9663c23321df70a74a297ea481b8fb109305e8c1ea759ba6600e3b567088a4a4d1b757b8a75f23584a924a4b455be51487f804f79d748c398ebfb8fd6170c29f01cca9fc040f21c5a7622461a84adae846061fd4edf5e465b0174bf0b06f0cf5e8f200d69b03dfb3bdfb6ecff4a2394d0e771cea0627813c3f8b2338ae36369df05f4772ca43773ab3b1886ae52a20186d17c66451566869b6910990f1b9d8220b3f91eeeef497033aa254409ab7310faafe055124c3d192423c6d6d86aad1f1a62941614da29824739822f084066c803361a452d59ae905d0647c1b0d80d767d96100e0f647c3042822923cc52ac6ac1d77b4b212a7e76db24f4cd79d17a41411cafd46f69ab8ca840812c17097e9e7b5b685a2281e79ac56da85d6327b0c11db5bcc9f187fcbb60be7615043d3557370dfe693aea9cdafadd00633586ed92a146e8212fd30fed94aec079e37e3cb533aae7a9368dfed41f6a32580faf66b2920bb69c49f3446f8a026036770b19306712901245f04897017d253d567f7f8e7cf391d12c03d2f74ba3668638f573b05451160401f94e6053d625bb44b009d3516657924f648688b0ace6f1195110753444a49b58220713f4b86178154e30ef74636ffddb07c5fe85a7f1e75e829397b281aaf921cfb7870de59f881849e8531f60ff412e82502b72407a83f3400ce1529f6785e74dee20cf99ef1de3e6fbc45dfe240ed26659e676b9013f72a97e0ea268a69b4d3395a8b6b7c6e3d709f7fae5b43b02f36a94938ab6033ae8453674aeae89bcbd14a021cac1d282678cdcc48fcb678cb4898284140ed6cb2d6e2a18d543c6c035cfbf8d9ec321d78abbd6261b7fde19b73d886386a7447a739f506fe2e097c53393bdba707dc7d73ef155565bdc9e1a884835dd403611e99314c0b80e0d330ba874d77be337234cad451f73dd1ef0d6550405a8d6761c304ff26e8e43c363a6719daad19a256bf1f80a107ef464521e4b961d42f3bb9550c238e301d6f6221050532b99f737db8cdac1ec62adb708d7ad593352b2266c3ddaca4b7f248bc734569518fb9492e9799f80c22d954bae466530be11caf4edf8b966f7f6643e43364b0f7f8e1a4d8fd99a1fc88861468ebb7576c5dce238e6cf344dd20b210009585ca1fae199c287c412f5bbb40acebc89212954f2b3e3f59ee503f7ae9c0b0698a723005db918dc50ac97bf7b3585183629d15c57ce1fef38e1095a518173c9f0abaed84dc12ef4b79234606e25afba894d305f2e68e692dc0474588c544a45c905151330aa40a9476070a761fee63e62eea8626c1aa3b106cad9fa431ec4b8375443e8250318de2bdfb6a4f08a0a5fada9c60d34e3fa6be30d014a87819476a81e942d2eb018e8fbc031c7600578c75e24335a773d6dce14725e8240b3b3bb0ac0fbb99728d7e1b0edd4adacd58c2e1698dd2dd9a88b83f2cabff6067249d706687c54b2ca3c6cf336ea567c69d43c2e4e110e05360c24ee5c2db78b1a1c3fa08b2cfdd3b271b10f191c90e16c104137eabcdd7d3204567b041fd71e436244a3d71f5a148c92f1d985e0c8459cc009d8ff01097706ba484efa1a9661d3dc106579bf8a031f8503b642e8f43015bc86cd5b30426303d469ecfcd8a90f1caf6c77adfd5219e03b78fa58d148e847cbc6fa5287a9274f811bc6b59a998ca5c5a664329e35f12f4c8b3bc2a0f015b2ecde7f64eca76edc579351bb302697e121cf934157707db2bbc1aae45257a6641faf0ef044616d54d1f27c0090e9c57d38846fd2fbbf3dbe50ba6b6981c26f5fa49a101ed694800d351831a34c62e17049329fb443beb80f047d8c0ceb2efa6ad458229c85bf486e6f8d3f3c29fc2d629bf48c7179bb054d01890fa04880553212e3ecf9ce7fa00a2eaf9bc9548bc57d334497dcf3a862102b8de60bd63d6c59f1a8a9d4852115196a8bbb308dd73c73d00654e87e9f13c49693d26ec29307a8529795dc3f9c7c4c0654380424e425301f04d36f5621dc258ba87cd2b89ca3ddc9388da0f2e0060dd5da5e0e407fe4e34e547e2d52e552401bd1c86e7505cf01ce0bc0458ef604111e756c451cf281898ced7a2e3d3a789dd10f35862bae4c37abab1cd39085e9644587d62f3cdebbf0b9e8a42403851bbdfe2962fcb802e8bbabab63183567c9e16f67753563c4e12417dbfe53f6fb97a8eb60f7e8484cfcebdff6dc65c18892b27af77a9d5772a08ee18c66b6c9a46f61475b5d60f399f19629ea18cfcbe0e8630b25fb5e32894418fd2db4d8a355a887ebdf9d70670161519b59ed74fadd50fda41e5895f1dcbfa6310811163947fb41866dc2a596fa3110affe4465e683c52ff974fff0164dbd23e80322b2ca034efe0d056d44950650358156ff903cd363e08bf6ac9ca9c6e006126d0f9cfb177ca90fbf604ed6961ca4fd27538f26d9fc1c886acbd304d6d99b2233758fdf92158914d4c845494d083e105a48ba60903e5d07be0c0e2f2acaeb9413490a25ba6614dd4fe0b778251687c7b44b3bcd3ac49cd9c4eefd8634a8be620fee014e2697067cab2a16357987ce029740db0b65c7ef3c3d1c380ee02e1ebb733833e64f3b5e8425dbdce4fde6c02de07cbb2826f94153c36bee5ac9073a1a99cd147f099f491d669f8d20a1e8e8a30d3c8b6d3362eda02d82e9d35881aa843b1e3133a2dc656b202b43b4ec37840e539496d571a66adeb5a9fc91b45ccd053c7fce10ebc0d6a8f92538807b8fc007c4fce1327a0d7dad98dec1d06a73838a2923f348aee38f7e61f272ca1620d1becc4194ce1020e724baffee161309fcab420fd21e4a9e82a05ad99e760c8f3c32b81fb51c4bde1bed5cd8ed296e8d2742e3b9aedc4cc5b9f57480b4aac2f8842421c43bfa2bb84bff3b5e21275d0864ec35d19e112f8ae06e922353f3454676ca32556d074237a58be8e03708c70304bb8cb57e1573f398fe61b337d65b17d9c9c846c8b9cfa380d65a4518aba0fe90a8d204804043e4f76ac6b013e13384a2e58da1f27c48fb0eb082abf34201c600c491612376f4ec4e4e9815db26d04451915090dfb9d665475ce5bd72b6656b2900751a5e3b44d2fdc62c16ad86935a86b72dfc3baf095edc0ca44767c1c4847cedbc9da046db01f95d3b0935d331bc1eed77ae1ec0999c879dc707f44f89cc51d9cfe28adcc961b754f76086e85723b9eaffb7f655e36a8807905aefdc3320673f557ae9b86b49db214aa17df379a41e7e4283f672302d41b092013a7b8ad91af123cebf4376d4b7fb5f7a24c73402058c3fc508781d4c035b3a75283adce078ba3fb224ff2cdb5c8a542e398410f5135f0437261e43d0fb46fa7fd2629136bbed12d26c832fe480d0b711bd3dc228b654e41dd1cb14d0bebc49b4365899f1e6b2c39ef019035f67a9daa8e16cd9dfc898057c6c893ee4187b6ac024bb54feffc4d994771ef524e96d28b2a270ad3599098d204285348636b1221a71668ddd751084327b454e426c429c217809aabd278a2a37fad3a9c8a216d014ec9e54dc4049fba8d1c19cff07a7b90acce0871dcab57e56b80c8334306cfee3f23b452438f66abdd8d226ba13712cd8db5b6bf3383c3c46ad53c5d8e773f01c71e8770d3e37a235cca555bf9bb3b314db40ac6c87d742c89ccf745df972eb4d9047c120bd478c01e353169ffc6e24c8fb34ba192330c9e4de70dd48c8a9533157981138480718a31362d40dc67fd7af1aa56b255adda14edc983b7bd3bc2ee8391a462", 0x1000}, {&(0x7f0000001400)="6823f0145f54f40efada78b9f10bc190830a64250b8eb409a11b1a86fde8b455d8381e08cc7d28a2ea2a67fc32eb8c80ba24e36c285fb43b2316e436f4dee7b1e0d70866a3be0fd71360ba4fb20b2f2b276beb4305d02fefe8f7379cfab71c8eb4dbeffcfe8074a3cab4bbcd2a67da0dacb62a826e45bfd653bc1225ba02e3fdfdc91fcef70fa6c839c6a9595cbeb56e2a66cd230f2b6c7c884aaafefe8e0f4d9dc8d8865bf26227d35efa39485faa5d5c0f66631ed5d62bba764651d0e3647b9cd9", 0xc2}, {&(0x7f0000001500)="bb2f0d37225f76b8b1bad0f7267c6bd9ea78", 0x12}, {&(0x7f0000001540)="52e55215888aba3ad39baa86a034ad134d14c2fb68a8b1f15439025ce6881022aa57e86268e9c6092436cf367332653af7d1c4bb344b13f0a4c5d494079c607d8846c17cafbdb3d3fc32", 0x4a}, {&(0x7f00000015c0)="f7ec3a5c2ad733d8f8c7391d5b1881eccfa010537b68f0bcb9a68257e2b4356b2557f7f207c1592d288ffc8856728f83ab1b78", 0x33}], 0x8, &(0x7f0000001680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}], 0x48}, 0x400c094)

889.743869ms ago: executing program 3 (id=3052):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000004740)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000004640)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x1, 0x2}]}]}}}], 0x18}, 0x40000d0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r2, &(0x7f0000001000), 0x0}, 0x20)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

785.495314ms ago: executing program 4 (id=3053):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0xff6, &(0x7f0000001e00)=""/4086, 0x41100, 0x24}, 0x94) (async)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1}, 0x0) (async)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="02090000000000000001"]) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xcc, &(0x7f0000000340)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) (rerun: 32)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x8e0, 0xa8}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
r8 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x8905, &(0x7f0000000100))
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x7, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f088a847e0ffff2000000000010000ac141416e000000129a13011", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfe103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x3}, 0x2040, 0x5, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_type(r10, &(0x7f0000000180), 0x13bb711e) (async)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001c00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)

757.714375ms ago: executing program 2 (id=3054):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x158c8, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async)
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext={0x0, 0xe00000000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./cgroup.cpu/cpuset.cpus\x00'}, 0x18)
perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0xa, 0x5, 0x0) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000300)={0x2, 0x4e21, @multicast1}, 0x4, 0x0}, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000000)={'batadv_slave_0\x00', @random="440000001000"})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c082, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC=r0], 0x50)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000009af93e576387297cb184a9e68e4c1800e560e153000004000000020000000000000c02000000000040000000000d2000000000005f00a53168cc4c6bc2fe00c752f5d49799212cf445f4032645161d69b677e203bf9c520860e382277709494faf665595db"], 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socket$kcm(0xa, 0x1, 0x0) (async)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x18000000000002a0, 0x7c, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08f086ddcef11086828ba3a1cc136e6931fe9ccb9db10495160409e01b6f", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r7 = socket$kcm(0xa, 0x7, 0x0)
sendmsg$inet(r7, &(0x7f0000001c40)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000240)="c308", 0x2}], 0x1}, 0x20000001) (async)
setsockopt$sock_attach_bpf(r7, 0x29, 0x1a, &(0x7f0000000140), 0x4)

153.547104ms ago: executing program 5 (id=3055):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x40, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x3, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x3, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x7, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
r8 = socket$kcm(0x1e, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f00000000c0))
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)

147.118534ms ago: executing program 3 (id=3056):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000006000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2a24a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9877399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a8449f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d2943e6f5f828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000056c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c072083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a00000000000000000000d550c9f15fbb2324a3f37dc4ba"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000340)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x800, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x6b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x4, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70)

0s ago: executing program 2 (id=3057):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x97}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
close(0x3)

kernel console output (not intermixed with test programs):

over after parsing attributes in process `syz.2.1660'.
[  570.147811][T11596] IPv6: NLM_F_CREATE should be specified when creating new route
[  570.155695][T11596] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1668'.
[  570.394267][T11613] netlink: 'syz.4.1674': attribute type 10 has an invalid length.
[  570.404214][T11613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1674'.
[  570.421039][T11613] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  570.535563][T11615] sctp: [Deprecated]: syz.1.1675 (pid 11615) Use of struct sctp_assoc_value in delayed_ack socket option.
[  570.535563][T11615] Use struct sctp_sack_info instead
[  570.582730][T11616] sctp: [Deprecated]: syz.1.1675 (pid 11616) Use of struct sctp_assoc_value in delayed_ack socket option.
[  570.582730][T11616] Use struct sctp_sack_info instead
[  570.645192][T11620] device syzkaller0 entered promiscuous mode
[  570.659999][T11615] netlink: 'syz.1.1675': attribute type 46 has an invalid length.
[  570.680301][T11623] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487
[  570.700623][T11615] netlink: 'syz.1.1675': attribute type 46 has an invalid length.
[  571.083485][T11647] netlink: 'syz.1.1682': attribute type 9 has an invalid length.
[  571.128129][T11647] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1682'.
[  571.529148][T11645] device syzkaller0 entered promiscuous mode
[  571.561866][T11642] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1681'.
[  575.606852][T11675] netlink: 'syz.1.1685': attribute type 10 has an invalid length.
[  575.614847][T11675] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1685'.
[  575.645386][T11675] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  575.680690][T11679] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1689'.
[  575.696943][T11679] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  575.990010][T11694] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1690'.
[  576.491924][T11701] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1696'.
[  576.552747][T11705] netlink: 'syz.2.1696': attribute type 21 has an invalid length.
[  576.567585][T11708] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1696'.
[  576.599954][T11708] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  576.648801][T11708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  576.685988][T11714] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1699'.
[  577.532099][T11740] netlink: 'syz.1.1706': attribute type 11 has an invalid length.
[  577.540771][T11740] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1706'.
[  577.830349][T11739] netlink: 'syz.1.1706': attribute type 16 has an invalid length.
[  577.856999][T11739] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1706'.
[  577.866182][T11739] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  578.279654][T11755] netlink: 'syz.3.1712': attribute type 4 has an invalid length.
[  578.455417][T11758] netlink: 'syz.2.1713': attribute type 11 has an invalid length.
[  578.544755][T11760] netlink: 'syz.1.1714': attribute type 25 has an invalid length.
[  578.552867][T11760] netlink: 'syz.1.1714': attribute type 3 has an invalid length.
[  578.596987][T11760] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1714'.
[  579.579941][T11776] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1719'.
[  579.701926][T11779] netlink: 'syz.1.1720': attribute type 2 has an invalid length.
[  579.727386][T11779] netlink: 'syz.1.1720': attribute type 4 has an invalid length.
[  581.342968][T11809] netlink: 'syz.1.1726': attribute type 9 has an invalid length.
[  581.377756][T11809] __nla_validate_parse: 1 callbacks suppressed
[  581.377892][T11809] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1726'.
[  581.587078][   T49] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18
[  581.596192][   T49] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0'
[  581.611053][   T49] CPU: 0 PID: 49 Comm: kworker/u5:0 Not tainted syzkaller #0
[  581.618631][   T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  581.628734][   T49] Workqueue: hci3 hci_rx_work
[  581.633571][   T49] Call Trace:
[  581.636882][   T49]  <TASK>
[  581.639845][   T49]  dump_stack_lvl+0x188/0x24e
[  581.644561][   T49]  ? show_regs_print_info+0x12/0x12
[  581.649796][   T49]  ? load_image+0x410/0x410
[  581.654353][   T49]  sysfs_create_dir_ns+0x26a/0x290
[  581.659576][   T49]  ? __lock_acquire+0x7c40/0x7c40
[  581.664900][   T49]  ? sysfs_warn_dup+0xa0/0xa0
[  581.669651][   T49]  ? do_raw_spin_unlock+0x11d/0x230
[  581.675069][   T49]  kobject_add_internal+0x617/0xca0
[  581.680343][   T49]  kobject_add+0x160/0x230
[  581.684807][   T49]  ? kobject_init+0x1c0/0x1c0
[  581.689546][   T49]  ? __raw_spin_lock_init+0x41/0x100
[  581.694903][   T49]  ? klist_children_get+0x50/0x50
[  581.700054][   T49]  ? get_device_parent+0x121/0x3e0
[  581.705380][   T49]  device_add+0x470/0x1050
[  581.709850][   T49]  hci_conn_add_sysfs+0xd1/0x1e0
[  581.714917][   T49]  le_conn_complete_evt+0xf93/0x15c0
[  581.720259][   T49]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  581.726549][   T49]  ? bt_info+0x180/0x180
[  581.730843][   T49]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  581.736520][   T49]  ? mutex_unlock+0x10/0x10
[  581.741057][   T49]  ? skb_pull_data+0xec/0x1f0
[  581.745834][   T49]  hci_le_conn_complete_evt+0x183/0x440
[  581.751434][   T49]  ? hci_remote_host_features_evt+0x230/0x230
[  581.757553][   T49]  hci_event_packet+0x7b3/0x1290
[  581.762622][   T49]  ? lock_chain_count+0x20/0x20
[  581.767514][   T49]  ? bis_list+0x280/0x280
[  581.771966][   T49]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  581.777992][   T49]  ? kcov_remote_start+0x50f/0x810
[  581.783209][   T49]  ? lockdep_hardirqs_on+0x94/0x140
[  581.788456][   T49]  ? hci_send_to_monitor+0x9c/0x4a0
[  581.793714][   T49]  hci_rx_work+0x3eb/0xd40
[  581.798183][   T49]  ? _raw_spin_unlock+0x40/0x40
[  581.803087][   T49]  ? process_one_work+0x7b4/0x1160
[  581.808303][   T49]  process_one_work+0x8ab/0x1160
[  581.813295][   T49]  ? worker_detach_from_pool+0x240/0x240
[  581.818962][   T49]  ? _raw_spin_lock_irq+0x86/0xf0
[  581.824035][   T49]  ? _raw_spin_lock_irq+0xb7/0xf0
[  581.829102][   T49]  ? _raw_spin_lock_irqsave+0x100/0x100
[  581.834702][   T49]  ? wq_worker_running+0x97/0x190
[  581.839764][   T49]  worker_thread+0xaf5/0x12a0
[  581.844509][   T49]  kthread+0x29d/0x330
[  581.848684][   T49]  ? worker_clr_flags+0x1a0/0x1a0
[  581.853757][   T49]  ? kthread_blkcg+0xd0/0xd0
[  581.858411][   T49]  ret_from_fork+0x1f/0x30
[  581.862962][   T49]  </TASK>
[  581.869479][   T49] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  581.883718][   T49] Bluetooth: hci3: failed to register connection device
[  583.544880][T11863] ¥: port 2(bond0) entered blocking state
[  583.583479][T11863] ¥: port 2(bond0) entered disabled state
[  583.669606][T11863] device bond0 entered promiscuous mode
[  583.750401][T11863] device bond_slave_1 entered promiscuous mode
[  584.882918][T11906] netlink: 'syz.2.1746': attribute type 21 has an invalid length.
[  584.926640][T11907] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1746'.
[  589.082608][T11936] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1752'.
[  589.092034][T11937] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1752'.
[  589.355119][T11960] netlink: 'syz.0.1757': attribute type 2 has an invalid length.
[  589.382136][T11960] netlink: 'syz.0.1757': attribute type 8 has an invalid length.
[  589.402882][T11969] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1758'.
[  589.438530][T11960] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1757'.
[  589.467009][T11965] netlink: 'syz.1.1759': attribute type 2 has an invalid length.
[  589.517563][T11965] netlink: 'syz.1.1759': attribute type 8 has an invalid length.
[  589.531191][T11965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1759'.
[  589.603164][T11973] netlink: 'syz.1.1759': attribute type 2 has an invalid length.
[  589.657877][T11973] netlink: 'syz.1.1759': attribute type 8 has an invalid length.
[  589.677544][T11973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1759'.
[  589.700160][T11978] netlink: 'syz.2.1763': attribute type 27 has an invalid length.
[  589.743064][T11978] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1763'.
[  591.365071][T12004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1769'.
[  591.404583][T12004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1769'.
[  591.441673][T12004] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1769'.
[  591.716165][T12007] netlink: 'syz.2.1769': attribute type 3 has an invalid length.
[  592.775388][T12014] netlink: 'syz.0.1771': attribute type 10 has an invalid length.
[  593.191438][T12014] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  593.460093][T12026] delete_channel: no stack
[  593.878593][T12044] netlink: 'syz.1.1778': attribute type 1 has an invalid length.
[  594.052027][T12023] delete_channel: no stack
[  594.478310][T12056] validate_nla: 3 callbacks suppressed
[  594.478414][T12056] netlink: 'syz.4.1780': attribute type 1 has an invalid length.
[  594.735704][T12066] device ipvlan1 left promiscuous mode
[  594.763236][T12066] netlink: 'syz.2.1784': attribute type 10 has an invalid length.
[  594.853606][T12066] device nlmon0 entered promiscuous mode
[  594.868139][T12066] team0: Device nlmon0 is of different type
[  595.110913][T12078] __nla_validate_parse: 3 callbacks suppressed
[  595.110931][T12078] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1785'.
[  596.269839][T12100] netlink: 8964 bytes leftover after parsing attributes in process `syz.1.1789'.
[  596.305651][T12094] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1788'.
[  596.325321][T12105] netlink: 'syz.3.1790': attribute type 29 has an invalid length.
[  596.340257][T12105] netlink: 'syz.3.1790': attribute type 29 has an invalid length.
[  596.370045][T12107] netlink: 'syz.3.1790': attribute type 29 has an invalid length.
[  598.215660][T12154] netlink: 'syz.3.1803': attribute type 13 has an invalid length.
[  598.226657][T12154] netlink: 'syz.3.1803': attribute type 14 has an invalid length.
[  598.251693][T12154] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1803'.
[  598.423503][T12163] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  598.491194][T12163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  598.539725][T12168] netlink: 'syz.0.1805': attribute type 10 has an invalid length.
[  599.098085][T12168] team0: Device gre0 is of different type
[  599.210868][T12186] netlink: 'syz.3.1807': attribute type 10 has an invalid length.
[  599.262122][T12186] device batadv0 left promiscuous mode
[  599.361500][T12186] team0: Port device batadv0 removed
[  599.393754][T12186] 8021q: adding VLAN 0 to HW filter on device batadv0
[  599.415934][T12186] device batadv0 entered promiscuous mode
[  599.445393][T12186] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  599.491863][T12196] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1808'.
[  599.536950][T12196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'.
[  602.868158][T11826] Bluetooth: hci3: unexpected event 0x09 length: 151 > 3
[  602.920911][T11826] Bluetooth: hci3: unexpected event 0x09 length: 151 > 3
[  603.081464][T12233] netlink: 12399 bytes leftover after parsing attributes in process `syz.0.1814'.
[  603.132699][T12235] netlink: 12399 bytes leftover after parsing attributes in process `syz.0.1814'.
[  604.790926][T12274] netlink: 'syz.2.1824': attribute type 10 has an invalid length.
[  604.820048][T12269] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1826'.
[  604.838044][T12269] openvswitch: netlink: Message has 6 unknown bytes.
[  605.204523][T12274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  605.241193][T12274] device hsr0 entered promiscuous mode
[  605.255440][T12284] netlink: 'syz.1.1828': attribute type 3 has an invalid length.
[  605.272961][T12274] team0: Port device hsr0 added
[  605.331921][T12282] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1828'.
[  605.357373][T12284] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1828'.
[  605.597552][T12293] netlink: 'syz.3.1829': attribute type 1 has an invalid length.
[  605.977601][T12303] pim6reg0: tun_chr_ioctl cmd 1074025677
[  605.983496][T12303] pim6reg0: linktype set to 780
[  606.052187][T12308] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1835'.
[  606.120286][T12317] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1835'.
[  606.207660][T12326] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1838'.
[  607.619157][T12336] netlink: 'syz.4.1839': attribute type 10 has an invalid length.
[  607.894757][T12347] device sit0 left promiscuous mode
[  607.920422][T11826] Bluetooth: hci4: ISO packet for unknown connection handle 2366
[  608.019931][T11826] Bluetooth: hci4: ISO packet for unknown connection handle 2366
[  608.391784][T12362] netlink: 'syz.1.1844': attribute type 21 has an invalid length.
[  609.631524][T12409] netlink: 'syz.2.1853': attribute type 10 has an invalid length.
[  611.430329][T12419] netlink: 'syz.1.1857': attribute type 46 has an invalid length.
[  611.543654][T12423] tipc: Started in network mode
[  611.561140][T12423] tipc: Node identity 9215a268, cluster identity 4711
[  611.576877][T12423] tipc: Node number set to 2450891368
[  611.999714][T12442] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1863'.
[  612.162094][T12447] netlink: 'syz.3.1862': attribute type 10 has an invalid length.
[  612.335577][T12460] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1866'.
[  612.875297][T12455] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1866'.
[  612.892896][T12460] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1866'.
[  612.925074][T12467] netlink: 'syz.1.1868': attribute type 10 has an invalid length.
[  612.944919][T12467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1868'.
[  613.018315][T12452] netlink: 'syz.3.1862': attribute type 27 has an invalid length.
[  613.046905][T12452] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1862'.
[  613.097559][T12452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  613.225214][T12456] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1866'.
[  613.550727][T12496] netlink: 'syz.0.1872': attribute type 4 has an invalid length.
[  613.628909][T12494] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1873'.
[  613.660666][T12496] netlink: 'syz.0.1872': attribute type 10 has an invalid length.
[  613.669422][T12499] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1873'.
[  613.700210][T12496] device veth0_macvtap left promiscuous mode
[  614.609928][T12499] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  614.621336][T12500] netlink: 'syz.3.1871': attribute type 10 has an invalid length.
[  614.621339][T12499] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  614.632577][T12499] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  615.438039][T12522] netlink: 'syz.2.1875': attribute type 21 has an invalid length.
[  615.464057][T12522] netlink: 'syz.2.1875': attribute type 2 has an invalid length.
[  615.539456][T12522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1875'.
[  616.678791][T12555] netlink: 'syz.4.1886': attribute type 29 has an invalid length.
[  616.867265][T12555] netlink: 'syz.4.1886': attribute type 29 has an invalid length.
[  616.885874][T12569] netlink: 'syz.4.1886': attribute type 29 has an invalid length.
[  617.184219][T12573] netlink: 'syz.1.1889': attribute type 3 has an invalid length.
[  617.209164][T12578] __nla_validate_parse: 2 callbacks suppressed
[  617.209183][T12578] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1890'.
[  617.229764][T12573] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1889'.
[  617.396409][T12588] tun0: tun_chr_ioctl cmd 1074812117
[  617.782071][T12602] netlink: 'syz.3.1896': attribute type 2 has an invalid length.
[  617.845366][T12602] netlink: 'syz.3.1896': attribute type 4 has an invalid length.
[  617.897412][T12602] netlink: 'syz.3.1896': attribute type 8 has an invalid length.
[  617.928933][T12602] netlink: 'syz.3.1896': attribute type 9 has an invalid length.
[  617.964348][T12602] netlink: 'syz.3.1896': attribute type 10 has an invalid length.
[  618.015212][T12602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1896'.
[  618.540747][T12617] netlink: 'syz.1.1901': attribute type 10 has an invalid length.
[  618.641758][T12617] team0: Device nlmon0 is of different type
[  619.110496][T12621] device nlmon0 entered promiscuous mode
[  619.137654][T12621] team0: Device nlmon0 is of different type
[  619.219523][T12621] team0: Device nlmon0 is of different type
[  619.570589][T12640] device syzkaller0 entered promiscuous mode
[  619.691714][T12645] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1908'.
[  623.322532][T12654] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1911'.
[  623.338296][T12654] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1911'.
[  623.367103][T12654] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1911'.
[  623.376165][T12655] validate_nla: 6 callbacks suppressed
[  623.376180][T12655] netlink: 'syz.4.1911': attribute type 21 has an invalid length.
[  624.350332][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.356967][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.506300][T12689] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1922'.
[  624.777469][T12688] can: request_module (can-proto-3) failed.
[  625.292997][T12710] netlink: 'syz.0.1926': attribute type 29 has an invalid length.
[  625.359413][T12710] netlink: 'syz.0.1926': attribute type 29 has an invalid length.
[  625.369746][T12714] netlink: 'syz.0.1926': attribute type 29 has an invalid length.
[  625.437253][T12717] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1928'.
[  625.458228][T12715] netlink: 'syz.4.1927': attribute type 13 has an invalid length.
[  625.487301][T12715] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1927'.
[  625.541911][T11826] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  625.582767][T12715] syz_tun: refused to change device tx_queue_len
[  625.625310][T12715] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  625.916354][T12733] netlink: 'syz.1.1933': attribute type 29 has an invalid length.
[  625.931207][T12732] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1934'.
[  625.954910][T12732] bridge: RTM_NEWNEIGH with invalid state 0x1
[  626.002090][T12733] netlink: 'syz.1.1933': attribute type 29 has an invalid length.
[  626.993099][T12771] netlink: 'syz.3.1942': attribute type 2 has an invalid length.
[  627.032080][T12771] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1942'.
[  627.045084][T12774] netlink: 'syz.3.1942': attribute type 10 has an invalid length.
[  627.637111][T11826] Bluetooth: hci0: command 0x2016 tx timeout
[  628.663324][T12774] device wg1 entered promiscuous mode
[  628.680682][T12774] team0: Device wg1 is of different type
[  628.739582][T12790] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1946'.
[  629.323651][T12822] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  629.943333][T12833] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1957'.
[  629.949548][T12831] delete_channel: no stack
[  632.623790][T12865] netlink: 'syz.3.1965': attribute type 12 has an invalid length.
[  632.634779][T12865] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1965'.
[  633.981477][T12917] netlink: 'syz.0.1973': attribute type 29 has an invalid length.
[  634.031888][T12917] netlink: 'syz.0.1973': attribute type 29 has an invalid length.
[  634.051524][T12920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1971'.
[  634.069229][T12912] netlink: 'syz.0.1973': attribute type 29 has an invalid length.
[  634.166631][T12912] netlink: 'syz.0.1973': attribute type 29 has an invalid length.
[  635.140365][T12955] delete_channel: no stack
[  635.145068][T12955] delete_channel: no stack
[  635.166486][T12947] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1980'.
[  635.618384][T12962] Dead loop on virtual device ip6_vti0, fix it urgently!
[  636.278508][T12988] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1989'.
[  636.336557][T12990] netlink: 'syz.3.1989': attribute type 28 has an invalid length.
[  636.395024][T12990] netlink: 'syz.3.1989': attribute type 4 has an invalid length.
[  636.447882][T12990] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1989'.
[  637.069798][T13017] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1996'.
[  637.081530][T13027] netlink: 'syz.0.1995': attribute type 29 has an invalid length.
[  637.101095][T13027] netlink: 'syz.0.1995': attribute type 29 has an invalid length.
[  637.159707][T13032] netlink: 'syz.0.1995': attribute type 29 has an invalid length.
[  637.180087][T13022] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1997'.
[  637.443320][T13022] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  637.606489][T13022] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1997'.
[  637.814746][T13022] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  637.844415][T13022] CPU: 0 PID: 13022 Comm: syz.1.1997 Not tainted syzkaller #0
[  637.851981][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  637.862089][T13022] Call Trace:
[  637.865418][T13022]  <TASK>
[  637.868393][T13022]  dump_stack_lvl+0x188/0x24e
[  637.873134][T13022]  ? show_regs_print_info+0x12/0x12
[  637.878381][T13022]  ? load_image+0x410/0x410
[  637.882999][T13022]  sysfs_warn_dup+0x8a/0xa0
[  637.887566][T13022]  sysfs_do_create_link_sd+0xc0/0x110
[  637.892999][T13022]  device_add+0x83b/0x1050
[  637.897491][T13022]  wiphy_register+0x1d8b/0x2aa0
[  637.902496][T13022]  ? cfg80211_event_work+0x40/0x40
[  637.907668][T13022]  ? minstrel_ht_alloc+0x894/0xa20
[  637.912910][T13022]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  637.919141][T13022]  ieee80211_register_hw+0x2d48/0x39f0
[  637.924750][T13022]  ? ieee80211_register_hw+0xf41/0x39f0
[  637.930365][T13022]  ? ieee80211_register_hw+0xf41/0x39f0
[  637.935967][T13022]  ? ieee80211_tasklet_handler+0x20/0x20
[  637.941648][T13022]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  637.947606][T13022]  ? __debug_object_init+0xed/0x440
[  637.952932][T13022]  ? memset+0x1e/0x40
[  637.957020][T13022]  ? __hrtimer_init+0x189/0x270
[  637.962010][T13022]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  637.967905][T13022]  ? memcpy+0x3c/0x60
[  637.971953][T13022]  hwsim_new_radio_nl+0xab7/0xc90
[  637.977053][T13022]  genl_family_rcv_msg_doit+0x22f/0x350
[  637.982780][T13022]  ? end_current_label_crit_section+0x170/0x170
[  637.989182][T13022]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  637.995132][T13022]  ? bpf_lsm_capable+0x5/0x10
[  637.999933][T13022]  ? security_capable+0x85/0xb0
[  638.004876][T13022]  genl_rcv_msg+0x601/0x790
[  638.009464][T13022]  ? genl_bind+0x360/0x360
[  638.013937][T13022]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  638.020355][T13022]  netlink_rcv_skb+0x1ef/0x440
[  638.025174][T13022]  ? genl_bind+0x360/0x360
[  638.029646][T13022]  ? netlink_ack+0x1160/0x1160
[  638.034480][T13022]  ? down_read+0x1a8/0x2d0
[  638.038952][T13022]  genl_rcv+0x24/0x40
[  638.042987][T13022]  netlink_unicast+0x7ad/0x920
[  638.047843][T13022]  netlink_sendmsg+0x8ad/0xbd0
[  638.052672][T13022]  ? netlink_getsockopt+0x550/0x550
[  638.057930][T13022]  ? apparmor_socket_sendmsg+0x8a/0x330
[  638.063533][T13022]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  638.069011][T13022]  ? security_socket_sendmsg+0x7c/0xa0
[  638.074583][T13022]  ? netlink_getsockopt+0x550/0x550
[  638.079844][T13022]  ____sys_sendmsg+0x5ed/0x9a0
[  638.084676][T13022]  ? __sys_sendmsg_sock+0x30/0x30
[  638.089764][T13022]  ? __import_iovec+0x306/0x510
[  638.094715][T13022]  ? import_iovec+0x6f/0xa0
[  638.099287][T13022]  ___sys_sendmsg+0x2a2/0x360
[  638.104027][T13022]  ? __sys_sendmsg+0x2a0/0x2a0
[  638.108901][T13022]  __se_sys_sendmsg+0x1c3/0x2b0
[  638.113838][T13022]  ? __x64_sys_sendmsg+0x80/0x80
[  638.118845][T13022]  ? lockdep_hardirqs_on+0x94/0x140
[  638.124111][T13022]  do_syscall_64+0x4c/0xa0
[  638.128597][T13022]  ? clear_bhb_loop+0x60/0xb0
[  638.133326][T13022]  ? clear_bhb_loop+0x60/0xb0
[  638.138051][T13022]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  638.144004][T13022] RIP: 0033:0x7fb0c059e159
[  638.148485][T13022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  638.168238][T13022] RSP: 002b:00007fb0c13fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  638.176807][T13022] RAX: ffffffffffffffda RBX: 00007fb0c0826180 RCX: 00007fb0c059e159
[  638.184836][T13022] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000099
[  638.192984][T13022] RBP: 00007fb0c063506b R08: 0000000000000000 R09: 0000000000000000
[  638.201096][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  638.209386][T13022] R13: 00007fb0c0826218 R14: 00007fb0c0826180 R15: 00007fff14dc1e58
[  638.217434][T13022]  </TASK>
[  638.569623][T13036] validate_nla: 2 callbacks suppressed
[  638.569645][T13036] netlink: 'syz.3.1993': attribute type 10 has an invalid length.
[  638.583966][T13036] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1993'.
[  638.638859][T13055] netlink: 'syz.2.2000': attribute type 10 has an invalid length.
[  638.657112][T13055] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2000'.
[  638.695051][T13055] team0: Port device hsr0 removed
[  638.710429][T13055] bridge0: port 3(hsr0) entered blocking state
[  638.721588][T13055] bridge0: port 3(hsr0) entered disabled state
[  638.859323][T13061] netlink: 'syz.4.2001': attribute type 10 has an invalid length.
[  639.394243][T13077] device lo entered promiscuous mode
[  639.810843][T13085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  639.976392][T13089] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.2009'.
[  640.504666][T13098] device syzkaller0 entered promiscuous mode
[  640.630587][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'.
[  640.641425][T13114] netlink: 'syz.4.2015': attribute type 1 has an invalid length.
[  640.671722][T13114] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2015'.
[  648.117168][T13159] device bond0 left promiscuous mode
[  648.122558][T13159] device bond_slave_1 left promiscuous mode
[  648.129066][T13159] device batadv0 left promiscuous mode
[  648.134843][T13159] ¥: port 2(bond0) entered disabled state
[  648.142829][T13159] device team0 left promiscuous mode
[  648.148392][T13159] device team_slave_1 left promiscuous mode
[  648.154473][T13159] device geneve1 left promiscuous mode
[  648.162100][T13159] ¥: port 1(team0) entered disabled state
[  648.386597][T11826] Bluetooth: hci1: ISO packet for unknown connection handle 1279
[  648.434853][T13173] netlink: 'syz.3.2029': attribute type 6 has an invalid length.
[  648.445880][T13173] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2029'.
[  648.520205][T13169] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2027'.
[  648.548214][T13171] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2027'.
[  649.394483][T13192] netlink: 'syz.2.2033': attribute type 21 has an invalid length.
[  649.408587][T13192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2033'.
[  649.422694][T13192] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2033'.
[  649.606641][T13196] netlink: 'syz.3.2034': attribute type 22 has an invalid length.
[  649.614922][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'.
[  649.792057][T13202] netlink: 212908 bytes leftover after parsing attributes in process `syz.4.2035'.
[  649.816896][T13202] netlink: zone id is out of range
[  650.031047][T13216] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  650.102807][T13204] device syzkaller0 entered promiscuous mode
[  650.135634][T13206] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2037'.
[  650.174419][T13206] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  650.248317][T13206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  650.410574][T13216] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  650.567188][T13219] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  650.605510][T13204] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  650.654578][T13211] netlink: 'syz.2.2036': attribute type 29 has an invalid length.
[  655.040220][T13242] netlink: 'syz.0.2041': attribute type 6 has an invalid length.
[  655.097334][T13242] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.2041'.
[  659.833189][T13232] netlink: 'syz.4.2040': attribute type 21 has an invalid length.
[  659.845522][T13232] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2040'.
[  659.854714][T13232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'.
[  659.865437][T13233] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2040'.
[  659.881196][T13233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'.
[  661.118199][T13283] netlink: 'syz.2.2054': attribute type 6 has an invalid length.
[  661.143013][T13283] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2054'.
[  661.180739][T13284] netlink: 'syz.0.2053': attribute type 3 has an invalid length.
[  661.205907][T13284] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2053'.
[  662.276622][T13294] device syzkaller0 entered promiscuous mode
[  662.301368][T13307] netlink: 'syz.3.2056': attribute type 29 has an invalid length.
[  662.398715][T13307] netlink: 'syz.3.2056': attribute type 29 has an invalid length.
[  662.441982][T13294] netlink: 'syz.3.2056': attribute type 29 has an invalid length.
[  662.502568][T13311] sctp: [Deprecated]: syz.4.2060 (pid 13311) Use of struct sctp_assoc_value in delayed_ack socket option.
[  662.502568][T13311] Use struct sctp_sack_info instead
[  662.519804][T13304] netlink: 'syz.3.2056': attribute type 29 has an invalid length.
[  662.559285][T13294] netlink: 'syz.3.2056': attribute type 29 has an invalid length.
[  663.074389][T13331] netlink: 'syz.2.2064': attribute type 1 has an invalid length.
[  663.085370][T13331] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.2064'.
[  663.101706][T13331] netlink: 'syz.2.2064': attribute type 29 has an invalid length.
[  664.142206][T13338] netlink: 'syz.4.2067': attribute type 3 has an invalid length.
[  664.151342][T13338] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2067'.
[  665.153941][T13318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2061'.
[  665.188792][T13305] device syzkaller0 entered promiscuous mode
[  665.270711][T13344] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2069'.
[  665.314661][T13333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2064'.
[  666.662437][T13377] sctp: [Deprecated]: syz.2.2074 (pid 13377) Use of int in max_burst socket option deprecated.
[  666.662437][T13377] Use struct sctp_assoc_value instead
[  668.009810][T13350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2068'.
[  668.023488][T13355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2071'.
[  668.301935][T13399] validate_nla: 4 callbacks suppressed
[  668.301953][T13399] netlink: 'syz.2.2078': attribute type 7 has an invalid length.
[  668.528324][T13395] device syzkaller0 entered promiscuous mode
[  668.733215][T13406] netlink: 'syz.4.2079': attribute type 29 has an invalid length.
[  669.133384][T13406] netlink: 'syz.4.2079': attribute type 29 has an invalid length.
[  669.202861][T13414] netlink: 'syz.4.2079': attribute type 29 has an invalid length.
[  669.251819][T13415] netlink: 'syz.4.2079': attribute type 29 has an invalid length.
[  669.300001][T13417] netlink: 'syz.4.2079': attribute type 29 has an invalid length.
[  672.351024][T13440] netlink: 'syz.0.2089': attribute type 10 has an invalid length.
[  672.370937][T13440] team0: Device hsr_slave_0 failed to register rx_handler
[  672.453496][T13448] netlink: 'syz.3.2090': attribute type 39 has an invalid length.
[  672.616926][T13457] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2092'.
[  672.726326][T13469] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.2092'.
[  672.946173][T13457] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2092'.
[  672.959012][T13467] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2092'.
[  673.154907][T13475] netlink: 'syz.2.2096': attribute type 3 has an invalid length.
[  673.218388][T13475] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2096'.
[  673.273165][T13481] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2098'.
[  673.318490][T13481] netlink: 'syz.0.2098': attribute type 10 has an invalid length.
[  673.459501][T13481] bond0: (slave team0): Releasing backup interface
[  673.498171][T13481] team0 (unregistering): Port device team_slave_0 removed
[  673.593262][T13481] team0 (unregistering): Port device team_slave_1 removed
[  673.699194][T13481] team0 (unregistering): Port device wlan1 removed
[  674.385969][T13496] device syzkaller0 entered promiscuous mode
[  677.525364][T13517] device syzkaller0 entered promiscuous mode
[  677.532766][T13533] netlink: 192 bytes leftover after parsing attributes in process `syz.3.2109'.
[  678.232588][T13558] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2115'.
[  678.900874][T13570] netlink: 'syz.3.2118': attribute type 29 has an invalid length.
[  678.918809][T13570] netlink: 'syz.3.2118': attribute type 16 has an invalid length.
[  678.947185][T13570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2118'.
[  679.305038][T13594] sctp: [Deprecated]: syz.0.2123 (pid 13594) Use of struct sctp_assoc_value in delayed_ack socket option.
[  679.305038][T13594] Use struct sctp_sack_info instead
[  682.705527][T13546] netlink: 'syz.1.2113': attribute type 21 has an invalid length.
[  682.713775][T13546] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2113'.
[  682.723357][T13582] netlink: 'syz.4.2121': attribute type 10 has an invalid length.
[  682.746793][T13582] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2121'.
[  682.778941][T13621] netlink: 'syz.3.2128': attribute type 27 has an invalid length.
[  682.803488][T13621] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2128'.
[  682.817490][T13621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  683.029307][T13629] device syzkaller0 entered promiscuous mode
[  683.123249][T13639] netlink: 'syz.1.2133': attribute type 3 has an invalid length.
[  683.177607][T13639] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2133'.
[  684.599787][T13666] netlink: 'syz.0.2138': attribute type 3 has an invalid length.
[  684.617024][T13666] netlink: 'syz.0.2138': attribute type 1 has an invalid length.
[  684.630075][T13666] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2138'.
[  685.790780][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.797451][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  687.347584][T13695] netlink: 'syz.1.2145': attribute type 28 has an invalid length.
[  687.389330][T13695] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2145'.
[  687.636409][T13698] device syzkaller0 entered promiscuous mode
[  687.670373][T13704] netlink: 'syz.1.2145': attribute type 28 has an invalid length.
[  687.683639][T13704] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2145'.
[  687.761513][T13714] netlink: 'syz.0.2148': attribute type 4 has an invalid length.
[  687.812220][T13714] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2148'.
[  688.590408][T13738] netlink: 'syz.3.2152': attribute type 29 has an invalid length.
[  688.710035][T13740] netlink: 'syz.3.2152': attribute type 3 has an invalid length.
[  688.721574][T13740] netlink: 118424 bytes leftover after parsing attributes in process `syz.3.2152'.
[  690.352521][T13738] netlink: 'syz.3.2152': attribute type 29 has an invalid length.
[  690.616642][T13751] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2157'.
[  691.227403][T13775] netlink: 'syz.0.2159': attribute type 29 has an invalid length.
[  691.245866][T13775] netlink: 'syz.0.2159': attribute type 29 has an invalid length.
[  691.273754][T13772] netlink: 'syz.0.2159': attribute type 29 has an invalid length.
[  691.375004][T13777] netlink: 'syz.2.2160': attribute type 3 has an invalid length.
[  691.417371][T13777] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2160'.
[  694.773093][T13794] netlink: 'syz.1.2162': attribute type 21 has an invalid length.
[  694.781570][T13794] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2162'.
[  694.791668][T13794] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2162'.
[  694.939202][T13802] delete_channel: no stack
[  695.992303][T13854] device sit0 entered promiscuous mode
[  696.701264][T13851] netlink: 763 bytes leftover after parsing attributes in process `syz.4.2177'.
[  696.791528][T13867] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.2178'.
[  699.368276][T13879] netlink: 'syz.2.2181': attribute type 29 has an invalid length.
[  699.376499][T13879] netlink: 'syz.2.2181': attribute type 29 has an invalid length.
[  699.425279][T13886] netlink: 'syz.2.2181': attribute type 29 has an invalid length.
[  699.450677][T13885] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2183'.
[  699.495663][T13885] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  699.972467][T13900] netlink: 'syz.3.2185': attribute type 10 has an invalid length.
[  700.095124][T13902] netlink: 95 bytes leftover after parsing attributes in process `syz.4.2186'.
[  700.393792][T13915] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2187'.
[  700.416600][T13915] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  700.435263][T13915] CPU: 1 PID: 13915 Comm: syz.0.2187 Not tainted syzkaller #0
[  700.442825][T13915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  700.452940][T13915] Call Trace:
[  700.456275][T13915]  <TASK>
[  700.459346][T13915]  dump_stack_lvl+0x188/0x24e
[  700.464125][T13915]  ? show_regs_print_info+0x12/0x12
[  700.469399][T13915]  ? load_image+0x410/0x410
[  700.473977][T13915]  sysfs_warn_dup+0x8a/0xa0
[  700.478545][T13915]  sysfs_do_create_link_sd+0xc0/0x110
[  700.484168][T13915]  device_add+0x83b/0x1050
[  700.488785][T13915]  wiphy_register+0x1d8b/0x2aa0
[  700.493805][T13915]  ? cfg80211_event_work+0x40/0x40
[  700.499104][T13915]  ? minstrel_ht_alloc+0x894/0xa20
[  700.504289][T13915]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  700.510433][T13915]  ieee80211_register_hw+0x2d48/0x39f0
[  700.515965][T13915]  ? ieee80211_register_hw+0xf41/0x39f0
[  700.521669][T13915]  ? ieee80211_register_hw+0xf41/0x39f0
[  700.527332][T13915]  ? ieee80211_tasklet_handler+0x20/0x20
[  700.533027][T13915]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  700.538997][T13915]  ? __debug_object_init+0xed/0x440
[  700.544263][T13915]  ? memset+0x1e/0x40
[  700.548366][T13915]  ? __hrtimer_init+0x189/0x270
[  700.553309][T13915]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  700.559116][T13915]  ? memcpy+0x3c/0x60
[  700.563169][T13915]  hwsim_new_radio_nl+0xab7/0xc90
[  700.568281][T13915]  genl_family_rcv_msg_doit+0x22f/0x350
[  700.573900][T13915]  ? end_current_label_crit_section+0x170/0x170
[  700.580245][T13915]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  700.586216][T13915]  ? bpf_lsm_capable+0x5/0x10
[  700.591321][T13915]  ? security_capable+0x85/0xb0
[  700.596268][T13915]  genl_rcv_msg+0x601/0x790
[  700.600981][T13915]  ? lock_chain_count+0x20/0x20
[  700.605948][T13915]  ? genl_bind+0x360/0x360
[  700.610437][T13915]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  700.616870][T13915]  netlink_rcv_skb+0x1ef/0x440
[  700.621717][T13915]  ? genl_bind+0x360/0x360
[  700.626215][T13915]  ? netlink_ack+0x1160/0x1160
[  700.631067][T13915]  ? down_read+0x1a8/0x2d0
[  700.635566][T13915]  genl_rcv+0x24/0x40
[  700.639665][T13915]  netlink_unicast+0x7ad/0x920
[  700.644530][T13915]  netlink_sendmsg+0x8ad/0xbd0
[  700.649397][T13915]  ? netlink_getsockopt+0x550/0x550
[  700.654871][T13915]  ? apparmor_socket_sendmsg+0x8a/0x330
[  700.660513][T13915]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  700.665882][T13915]  ? security_socket_sendmsg+0x7c/0xa0
[  700.671516][T13915]  ? netlink_getsockopt+0x550/0x550
[  700.676899][T13915]  ____sys_sendmsg+0x5ed/0x9a0
[  700.681760][T13915]  ? __sys_sendmsg_sock+0x30/0x30
[  700.686853][T13915]  ? __import_iovec+0x306/0x510
[  700.691800][T13915]  ? import_iovec+0x6f/0xa0
[  700.696407][T13915]  ___sys_sendmsg+0x2a2/0x360
[  700.701173][T13915]  ? __sys_sendmsg+0x2a0/0x2a0
[  700.706068][T13915]  __se_sys_sendmsg+0x1c3/0x2b0
[  700.711013][T13915]  ? __x64_sys_sendmsg+0x80/0x80
[  700.716046][T13915]  ? lockdep_hardirqs_on+0x94/0x140
[  700.721332][T13915]  do_syscall_64+0x4c/0xa0
[  700.725829][T13915]  ? clear_bhb_loop+0x60/0xb0
[  700.730588][T13915]  ? clear_bhb_loop+0x60/0xb0
[  700.735352][T13915]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  700.741324][T13915] RIP: 0033:0x7fbc0c99e159
[  700.745812][T13915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  700.765499][T13915] RSP: 002b:00007fbc0d790028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  700.774009][T13915] RAX: ffffffffffffffda RBX: 00007fbc0cc26180 RCX: 00007fbc0c99e159
[  700.782057][T13915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  700.790096][T13915] RBP: 00007fbc0ca3506b R08: 0000000000000000 R09: 0000000000000000
[  700.798419][T13915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  700.806446][T13915] R13: 00007fbc0cc26218 R14: 00007fbc0cc26180 R15: 00007ffd759792b8
[  700.814507][T13915]  </TASK>
[  701.113160][T13918] tap0: tun_chr_ioctl cmd 1074025675
[  701.130330][T13918] tap0: persist disabled
[  701.563721][T13929] netlink: 'syz.3.2193': attribute type 1 has an invalid length.
[  701.585794][T13929] netlink: 'syz.3.2193': attribute type 4 has an invalid length.
[  701.612883][T13929] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2193'.
[  702.861224][T13958] tap0: tun_chr_ioctl cmd 1074812117
[  702.887361][T13960] tap0: tun_chr_ioctl cmd 1074025675
[  702.913274][T13960] tap0: persist enabled
[  702.934213][T13961] tap0: tun_chr_ioctl cmd 1074025675
[  702.946863][T13961] tap0: persist disabled
[  703.292672][T13970] device syzkaller0 entered promiscuous mode
[  703.328503][T13971] netlink: 'syz.2.2200': attribute type 10 has an invalid length.
[  703.679944][T13983] netlink: 'syz.2.2205': attribute type 29 has an invalid length.
[  703.732225][T13983] netlink: 'syz.2.2205': attribute type 29 has an invalid length.
[  706.409872][T13986] netlink: 'syz.2.2205': attribute type 29 has an invalid length.
[  707.633313][T14025] netlink: 'syz.4.2213': attribute type 21 has an invalid length.
[  707.703902][T14042] device syzkaller0 entered promiscuous mode
[  707.854520][T14049] netlink: 'syz.1.2216': attribute type 10 has an invalid length.
[  710.905397][T14069] netlink: 'syz.4.2222': attribute type 7 has an invalid length.
[  712.790721][T14123] netlink: 'syz.4.2238': attribute type 12 has an invalid length.
[  712.800204][T14123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2238'.
[  712.821323][T14124] netlink: 'syz.2.2237': attribute type 21 has an invalid length.
[  712.842692][T14124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2237'.
[  713.497602][T14147] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2244'.
[  713.531941][T14147] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2244'.
[  713.575900][T14147] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  714.642008][T14182] netlink: 'syz.3.2249': attribute type 10 has an invalid length.
[  714.694456][T14182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2249'.
[  715.221977][T14202] netlink: 'syz.2.2255': attribute type 21 has an invalid length.
[  715.307916][T14202] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2255'.
[  716.302067][T14215] netlink: 'syz.4.2259': attribute type 10 has an invalid length.
[  716.520989][T14226] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2261'.
[  717.654336][T14239] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check.
[  717.909093][T14239] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2265'.
[  718.458518][T14254] netlink: 'syz.3.2272': attribute type 10 has an invalid length.
[  718.548448][T14254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  718.555777][T14254] IPv6: NLM_F_CREATE should be set when creating new route
[  718.563158][T14254] IPv6: NLM_F_CREATE should be set when creating new route
[  719.815847][T14298] netlink: 'syz.2.2279': attribute type 10 has an invalid length.
[  720.146211][T14298] device geneve1 entered promiscuous mode
[  720.276176][T14298] team0: Port device geneve1 added
[  721.321120][T14330] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2286'.
[  721.512286][T14334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2286'.
[  724.341625][ T4286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  724.352255][ T4286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  724.367273][ T4286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  724.381890][ T4286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  724.397053][ T4286] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  724.404874][ T4286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  725.128497][T14395] chnl_net:caif_netlink_parms(): no params data found
[  725.575783][T14395] bridge0: port 1(bridge_slave_0) entered blocking state
[  725.600381][T14395] bridge0: port 1(bridge_slave_0) entered disabled state
[  725.657351][T14395] device bridge_slave_0 entered promiscuous mode
[  725.702646][T14435] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2314'.
[  725.787653][T14395] bridge0: port 2(bridge_slave_1) entered blocking state
[  725.794885][T14395] bridge0: port 2(bridge_slave_1) entered disabled state
[  725.848226][T14395] device bridge_slave_1 entered promiscuous mode
[  726.062661][T14395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  726.104807][T14395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  726.280887][T14395] team0: Port device team_slave_0 added
[  726.288718][T14438] netlink: 'syz.4.2315': attribute type 3 has an invalid length.
[  726.300212][T14395] team0: Port device team_slave_1 added
[  726.307542][T14438] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2315'.
[  726.344070][T14395] batman_adv: batadv0: Adding interface: batadv_slave_0
[  726.373981][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.433907][ T4286] Bluetooth: hci5: command 0x0409 tx timeout
[  726.444978][T14395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  726.502521][T14395] batman_adv: batadv0: Adding interface: batadv_slave_1
[  726.510251][T14395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  726.541793][T14395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  726.745329][T14395] device hsr_slave_0 entered promiscuous mode
[  726.755705][T14395] device hsr_slave_1 entered promiscuous mode
[  726.774770][T14395] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  726.794318][T14395] Cannot create hsr debugfs directory
[  726.986296][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2319'.
[  727.045895][T14468] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2321'.
[  727.091965][T14468] bridge_slave_1: default FDB implementation only supports local addresses
[  727.289653][T14468] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2321'.
[  727.383519][T14468] bridge_slave_1: default FDB implementation only supports local addresses
[  727.846007][T14395] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  727.900592][T14395] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  727.942674][T14395] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  728.011350][T14395] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  728.165875][T14497] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2328'.
[  728.278200][T14395] 8021q: adding VLAN 0 to HW filter on device bond0
[  728.330345][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  728.346381][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  728.385700][T14395] 8021q: adding VLAN 0 to HW filter on device team0
[  728.417665][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  728.442629][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  728.466955][ T5701] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.474183][ T5701] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.506794][ T4286] Bluetooth: hci5: command 0x041b tx timeout
[  728.513628][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  728.536335][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  728.566966][ T5701] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  728.589635][ T5701] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.596859][ T5701] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.627196][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  728.671763][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  728.703028][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  728.717253][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  728.732768][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  728.743582][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  728.753048][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  728.761903][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  728.771055][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  728.793099][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  728.801856][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  728.827873][T14395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  729.421585][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  729.448226][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  729.482329][T14395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  729.761605][T14540] netlink: 'syz.2.2340': attribute type 21 has an invalid length.
[  730.207090][T14554] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2342'.
[  730.572034][T14560] syz.0.2344[14560] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  730.572318][T14560] syz.0.2344[14560] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  730.588560][ T4286] Bluetooth: hci5: command 0x040f tx timeout
[  731.614506][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  731.644620][T10454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  731.801414][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  731.832632][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  731.900133][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  731.929339][T10866] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  731.947714][T14586] netlink: 'syz.0.2350': attribute type 3 has an invalid length.
[  731.955774][T14586] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2350'.
[  731.993651][T14395] device veth0_vlan entered promiscuous mode
[  732.044443][T14395] device veth1_vlan entered promiscuous mode
[  732.247607][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  732.342159][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  732.395959][T14395] device veth0_macvtap entered promiscuous mode
[  732.492368][T14395] device veth1_macvtap entered promiscuous mode
[  732.566613][T14395] batman_adv: batadv0: Interface activated: batadv_slave_0
[  732.615108][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  732.647541][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  732.666396][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  732.727383][ T4286] Bluetooth: hci5: command 0x0419 tx timeout
[  732.733225][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  732.798477][T14395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.837021][T14395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.857003][T14395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  732.906131][T14395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.942370][T14395] batman_adv: batadv0: Interface activated: batadv_slave_1
[  733.014151][T14395] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  733.056843][T14395] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  733.066464][T14395] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  733.125559][T14395] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  733.137824][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  733.147605][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  733.350491][T10866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.380580][T10866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.403915][ T5963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  733.502543][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.533239][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.566023][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  733.763570][T14615] netlink: 'syz.5.2297': attribute type 10 has an invalid length.
[  733.992247][T14615] team0: Port device geneve1 added
[  734.476386][T14626] device syzkaller0 entered promiscuous mode
[  734.612865][T14636] netlink: 'syz.5.2363': attribute type 1 has an invalid length.
[  734.639770][T14636] netlink: 131740 bytes leftover after parsing attributes in process `syz.5.2363'.
[  734.655525][T14630] tipc: Started in network mode
[  734.667163][T14630] tipc: Node identity 9215a268, cluster identity 4711
[  734.675151][T14630] tipc: Node number set to 2450891368
[  735.095304][T14647] netlink: 'syz.2.2366': attribute type 21 has an invalid length.
[  735.109271][T14647] netlink: 'syz.2.2366': attribute type 7 has an invalid length.
[  735.381083][T14656] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2368'.
[  735.646373][T14664] netlink: 87536 bytes leftover after parsing attributes in process `syz.2.2371'.
[  735.859247][T14671] netlink: 'syz.5.2373': attribute type 39 has an invalid length.
[  735.889651][T14671] device macvlan0 entered promiscuous mode
[  735.921706][T14675] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2375'.
[  736.313286][T14681] netlink: 'syz.5.2376': attribute type 3 has an invalid length.
[  736.372640][T14681] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2376'.
[  737.811122][T14719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2385'.
[  737.881195][T14722] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2384'.
[  737.930777][T14722] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2384'.
[  738.019718][T14722] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2384'.
[  738.741459][T14722] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2384'.
[  739.313987][T14760] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving
[  739.525959][T14764] netlink: 'syz.4.2392': attribute type 10 has an invalid length.
[  741.050368][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2403'.
[  741.193177][T14807] netlink: 'syz.3.2404': attribute type 29 has an invalid length.
[  741.271902][T14813] netlink: 'syz.3.2404': attribute type 29 has an invalid length.
[  741.413767][T14807] netlink: 'syz.3.2404': attribute type 29 has an invalid length.
[  741.589417][T14816] netlink: 'syz.3.2404': attribute type 29 has an invalid length.
[  742.532254][T14836] netlink: 'syz.3.2409': attribute type 27 has an invalid length.
[  742.618576][T14836] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2409'.
[  742.799898][T14842] netlink: 'syz.2.2410': attribute type 13 has an invalid length.
[  742.897079][T14842] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2410'.
[  742.963284][T14842] @: renamed from team_slave_0
[  743.816431][T14860] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2417'.
[  744.122189][T14867] netlink: 'syz.0.2414': attribute type 11 has an invalid length.
[  744.179314][T14855] syzkaller1: tun_chr_ioctl cmd 1074025677
[  744.223045][T14855] syzkaller1: linktype set to 804
[  745.115823][T14871] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2418'.
[  745.573039][T14872] device syzkaller0 entered promiscuous mode
[  745.959916][T14912] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2424'.
[  747.236593][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  747.244086][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  748.980677][T14911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  748.988032][T14911] IPv6: NLM_F_CREATE should be set when creating new route
[  748.995362][T14911] IPv6: NLM_F_CREATE should be set when creating new route
[  749.002727][T14911] IPv6: NLM_F_CREATE should be set when creating new route
[  749.053404][T14904] device syzkaller0 entered promiscuous mode
[  752.045431][T14912] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  752.053740][T14912] CPU: 1 PID: 14912 Comm: syz.3.2424 Not tainted syzkaller #0
[  752.061255][T14912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  752.071364][T14912] Call Trace:
[  752.074682][T14912]  <TASK>
[  752.077641][T14912]  dump_stack_lvl+0x188/0x24e
[  752.082366][T14912]  ? show_regs_print_info+0x12/0x12
[  752.087600][T14912]  ? load_image+0x410/0x410
[  752.092211][T14912]  sysfs_warn_dup+0x8a/0xa0
[  752.096779][T14912]  sysfs_do_create_link_sd+0xc0/0x110
[  752.102312][T14912]  device_add+0x83b/0x1050
[  752.106790][T14912]  wiphy_register+0x1d8b/0x2aa0
[  752.111780][T14912]  ? cfg80211_event_work+0x40/0x40
[  752.116976][T14912]  ? minstrel_ht_alloc+0x894/0xa20
[  752.122196][T14912]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  752.128516][T14912]  ieee80211_register_hw+0x2d48/0x39f0
[  752.134080][T14912]  ? ieee80211_register_hw+0xf41/0x39f0
[  752.139732][T14912]  ? ieee80211_register_hw+0xf41/0x39f0
[  752.145349][T14912]  ? ieee80211_tasklet_handler+0x20/0x20
[  752.151031][T14912]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  752.156985][T14912]  ? __debug_object_init+0xed/0x440
[  752.162237][T14912]  ? memset+0x1e/0x40
[  752.166260][T14912]  ? __hrtimer_init+0x189/0x270
[  752.171157][T14912]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  752.176946][T14912]  ? memcpy+0x3c/0x60
[  752.180975][T14912]  hwsim_new_radio_nl+0xab7/0xc90
[  752.186080][T14912]  genl_family_rcv_msg_doit+0x22f/0x350
[  752.191679][T14912]  ? end_current_label_crit_section+0x170/0x170
[  752.198021][T14912]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  752.203975][T14912]  ? bpf_lsm_capable+0x5/0x10
[  752.208708][T14912]  ? security_capable+0x85/0xb0
[  752.213623][T14912]  genl_rcv_msg+0x601/0x790
[  752.218198][T14912]  ? genl_bind+0x360/0x360
[  752.222664][T14912]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  752.229162][T14912]  netlink_rcv_skb+0x1ef/0x440
[  752.233980][T14912]  ? genl_bind+0x360/0x360
[  752.238446][T14912]  ? netlink_ack+0x1160/0x1160
[  752.243274][T14912]  ? down_read+0x1a8/0x2d0
[  752.247744][T14912]  genl_rcv+0x24/0x40
[  752.251770][T14912]  netlink_unicast+0x7ad/0x920
[  752.256588][T14912]  netlink_sendmsg+0x8ad/0xbd0
[  752.261418][T14912]  ? netlink_getsockopt+0x550/0x550
[  752.266661][T14912]  ? apparmor_socket_sendmsg+0x8a/0x330
[  752.272302][T14912]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  752.277632][T14912]  ? security_socket_sendmsg+0x7c/0xa0
[  752.283143][T14912]  ? netlink_getsockopt+0x550/0x550
[  752.288385][T14912]  ____sys_sendmsg+0x5ed/0x9a0
[  752.293213][T14912]  ? __sys_sendmsg_sock+0x30/0x30
[  752.298312][T14912]  ? __import_iovec+0x306/0x510
[  752.303254][T14912]  ? import_iovec+0x6f/0xa0
[  752.307903][T14912]  ___sys_sendmsg+0x2a2/0x360
[  752.312679][T14912]  ? __sys_sendmsg+0x2a0/0x2a0
[  752.317541][T14912]  __se_sys_sendmsg+0x1c3/0x2b0
[  752.322434][T14912]  ? ct_nmi_exit+0x145/0x1c0
[  752.327085][T14912]  ? __x64_sys_sendmsg+0x80/0x80
[  752.332085][T14912]  ? lockdep_hardirqs_on+0x94/0x140
[  752.337341][T14912]  do_syscall_64+0x4c/0xa0
[  752.341808][T14912]  ? clear_bhb_loop+0x60/0xb0
[  752.347143][T14912]  ? clear_bhb_loop+0x60/0xb0
[  752.351865][T14912]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  752.358537][T14912] RIP: 0033:0x7f8699f9e159
[  752.363039][T14912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  752.382726][T14912] RSP: 002b:00007f869ae0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  752.391184][T14912] RAX: ffffffffffffffda RBX: 00007f869a226090 RCX: 00007f8699f9e159
[  752.399193][T14912] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  752.407199][T14912] RBP: 00007f869a03506b R08: 0000000000000000 R09: 0000000000000000
[  752.415211][T14912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  752.423229][T14912] R13: 00007f869a226128 R14: 00007f869a226090 R15: 00007ffdfd339c78
[  752.431288][T14912]  </TASK>
[  752.452904][T14935] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2429'.
[  752.721640][T14952] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2433'.
[  753.372979][T14970] netlink: 'syz.2.2440': attribute type 27 has an invalid length.
[  753.389703][T14970] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2440'.
[  754.478206][T14983] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2444'.
[  755.031204][T14991] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2445'.
[  755.068769][T14988] netlink: 'syz.2.2445': attribute type 19 has an invalid length.
[  755.088731][T14988] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2445'.
[  756.164426][T15008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2450'.
[  756.397401][T15018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2452'.
[  756.590243][T15026] netlink: 'syz.5.2454': attribute type 21 has an invalid length.
[  756.714034][T15028] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2455'.
[  757.053426][T15046] sctp: [Deprecated]: syz.2.2460 (pid 15046) Use of struct sctp_assoc_value in delayed_ack socket option.
[  757.053426][T15046] Use struct sctp_sack_info instead
[  757.110562][T15047] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.2461'.
[  757.934561][T15057] netlink: 'syz.3.2464': attribute type 4 has an invalid length.
[  758.588558][T15088] sctp: [Deprecated]: syz.5.2475 (pid 15088) Use of int in maxseg socket option.
[  758.588558][T15088] Use struct sctp_assoc_value instead
[  759.004516][T15088] netlink: 'syz.5.2475': attribute type 12 has an invalid length.
[  759.046954][T15088] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2475'.
[  759.062613][T15101] netlink: 'syz.2.2476': attribute type 10 has an invalid length.
[  759.197445][T15101] team0: Device wg1 is of different type
[  759.472476][T15108] netlink: 'syz.4.2478': attribute type 15 has an invalid length.
[  760.789607][T15133] netlink: 'syz.5.2484': attribute type 10 has an invalid length.
[  761.903401][ T4286] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15
[  762.153018][T15163] netlink: 'syz.5.2492': attribute type 21 has an invalid length.
[  762.215610][T15163] netlink: 'syz.5.2492': attribute type 2 has an invalid length.
[  763.620447][T15190] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.2497'.
[  763.926024][T15196] netlink: 'syz.4.2499': attribute type 39 has an invalid length.
[  764.683746][T15204] netlink: 212908 bytes leftover after parsing attributes in process `syz.0.2501'.
[  764.826363][T15204] netlink: zone id is out of range
[  764.832759][T15202] netlink: 'syz.5.2502': attribute type 10 has an invalid length.
[  765.450554][T15202] team0: Device wg1 is of different type
[  765.667087][T15204] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2501'.
[  768.531218][T15243] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  768.539998][T15243] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  768.568947][T15243] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  768.576365][T15243] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  768.624313][T15243] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  768.632454][T15243] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  768.652344][T15243] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  768.660360][T15243] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  768.695881][T15243] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  770.389100][T15281] netlink: 'syz.3.2520': attribute type 10 has an invalid length.
[  771.545451][T15311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2525'.
[  771.642046][T15310] netlink: 'syz.5.2530': attribute type 10 has an invalid length.
[  771.787553][T15310] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2530'.
[  773.155569][T15326] netlink: 'syz.5.2533': attribute type 10 has an invalid length.
[  773.264810][T15326] team0: Device nlmon0 is of different type
[  773.461860][T15328] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2534'.
[  774.014013][T15348] netlink: 'syz.2.2540': attribute type 29 has an invalid length.
[  774.243401][T15348] netlink: 'syz.2.2540': attribute type 29 has an invalid length.
[  775.244148][T15357] netlink: 'syz.3.2542': attribute type 10 has an invalid length.
[  775.253545][T15357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2542'.
[  775.273982][T15357] bridge0: port 4(veth0_to_bridge) entered blocking state
[  775.283254][T15357] bridge0: port 4(veth0_to_bridge) entered disabled state
[  775.301713][T15357] device veth0_to_bridge entered promiscuous mode
[  775.669562][ T4286] Bluetooth: hci2: ISO packet for unknown connection handle 5
[  775.820676][T15369] netlink: 'syz.0.2544': attribute type 39 has an invalid length.
[  776.204071][T15369] device hsr_slave_1 left promiscuous mode
[  776.375148][T15375] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2549'.
[  776.390703][T15378] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2549'.
[  776.410214][T15380] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2550'.
[  776.424020][T15380] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  776.463287][T15380] net_ratelimit: 277 callbacks suppressed
[  776.463382][T15380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  777.065999][T15391] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2555'.
[  777.963618][T15414] syz.3.2560[15414] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  777.963782][T15414] syz.3.2560[15414] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  778.398036][T15421] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2562'.
[  778.918674][T15425] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2564'.
[  781.660644][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2571'.
[  781.756552][T15465] netlink: 'syz.0.2572': attribute type 2 has an invalid length.
[  783.762008][T15455] netlink: 'syz.5.2568': attribute type 13 has an invalid length.
[  783.769995][T15455] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2568'.
[  783.780957][T15455] syz_tun: refused to change device tx_queue_len
[  783.787417][T15455] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  783.806816][T15464] netlink: 'syz.0.2572': attribute type 46 has an invalid length.
[  783.814689][T15464] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2572'.
[  783.848856][T15465] device .*! entered promiscuous mode
[  784.056711][T15469] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  784.064082][T15469] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  784.104609][T15469] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  784.111910][T15469] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  784.121665][T15469] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  784.128847][T15469] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  784.147306][T15469] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  784.154606][T15469] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  784.177485][T15469] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  784.210303][T15478] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.2577'.
[  784.540519][T15493] netlink: 'syz.2.2579': attribute type 7 has an invalid length.
[  784.552562][T15493] netlink: 'syz.2.2579': attribute type 6 has an invalid length.
[  784.636414][T15493] netlink: 'syz.2.2579': attribute type 7 has an invalid length.
[  784.696141][T15493] netlink: 'syz.2.2579': attribute type 6 has an invalid length.
[  784.730160][T15503] netlink: 'syz.0.2580': attribute type 2 has an invalid length.
[  784.795596][T15503] netlink: 'syz.0.2580': attribute type 8 has an invalid length.
[  784.859481][T15503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2580'.
[  785.228001][T15508] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2582'.
[  785.833175][T15521] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2585'.
[  786.264147][T15525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2587'.
[  786.494222][T15537] netlink: 'syz.2.2589': attribute type 21 has an invalid length.
[  787.719485][T15579] netlink: 'syz.5.2598': attribute type 29 has an invalid length.
[  787.883414][T15556] device syzkaller0 entered promiscuous mode
[  787.924903][T15579] netlink: 'syz.5.2598': attribute type 29 has an invalid length.
[  789.069467][T15603] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2603'.
[  791.684608][T15584] netlink: 'syz.5.2598': attribute type 29 has an invalid length.
[  792.367720][T15633] netlink: 'syz.5.2610': attribute type 39 has an invalid length.
[  793.038490][T15633] device hsr_slave_1 left promiscuous mode
[  793.205499][T15650] netlink: 'syz.3.2614': attribute type 10 has an invalid length.
[  793.214194][T15650] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2614'.
[  794.086353][T15667] device syzkaller0 entered promiscuous mode
[  794.182646][T15667] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  794.216228][T15667] device  entered promiscuous mode
[  794.437300][T15682] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  794.525954][T15682] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  794.606892][T15702] netlink: 'syz.2.2623': attribute type 10 has an invalid length.
[  794.726177][T15702] device bridge_slave_1 left promiscuous mode
[  794.749125][T15702] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.811404][T15683] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  794.849776][T15705] netlink: 'syz.0.2626': attribute type 10 has an invalid length.
[  794.864158][T15705] bridge0: port 2(bridge_slave_1) entered disabled state
[  794.871908][T15705] bridge0: port 1(bridge_slave_0) entered disabled state
[  794.885118][T15705] device bridge0 left promiscuous mode
[  794.916013][T15684] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  794.929104][T15683] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  794.947178][T15683] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  794.955325][T15683] netlink: 'syz.5.2622': attribute type 29 has an invalid length.
[  794.994765][T15682] rose0: tun_chr_ioctl cmd 1074025673
[  795.041374][T15682] rose0: tun_chr_ioctl cmd 1074025673
[  795.160488][T15682] rose0: tun_chr_ioctl cmd 1074025673
[  795.259240][T15717] syzkaller1: tun_chr_ioctl cmd 1074025677
[  795.265362][T15717] syzkaller1: linktype set to 0
[  796.302986][T15755] IPv6: NLM_F_CREATE should be specified when creating new route
[  796.418239][T15757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'.
[  797.018896][T15768] netlink: 87536 bytes leftover after parsing attributes in process `syz.0.2644'.
[  797.051545][T15769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2644'.
[  797.205986][T15771] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2645'.
[  797.572003][T15777] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  799.335364][T15803] validate_nla: 24 callbacks suppressed
[  799.335383][T15803] netlink: 'syz.0.2652': attribute type 17 has an invalid length.
[  799.349869][T15803] netlink: 'syz.0.2652': attribute type 16 has an invalid length.
[  799.426420][T15803] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2652'.
[  800.242732][T15817] netlink: 61203 bytes leftover after parsing attributes in process `syz.4.2655'.
[  800.716512][T15841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2659'.
[  800.946065][T15851] netlink: 'syz.0.2663': attribute type 16 has an invalid length.
[  801.040541][T15851] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2663'.
[  801.114347][T15846] netlink: 'syz.0.2663': attribute type 16 has an invalid length.
[  801.180258][T15846] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2663'.
[  801.245273][T15859] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.2667'.
[  802.492431][T15891] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.2673'.
[  802.703803][T15902] netlink: 'syz.0.2684': attribute type 29 has an invalid length.
[  802.735683][T15902] netlink: 'syz.0.2684': attribute type 29 has an invalid length.
[  802.766232][T15903] netlink: 'syz.0.2684': attribute type 29 has an invalid length.
[  803.143403][T15917] netlink: 'syz.4.2677': attribute type 3 has an invalid length.
[  803.171928][T15917] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2677'.
[  804.763649][T15944] netlink: 87536 bytes leftover after parsing attributes in process `syz.5.2686'.
[  804.822338][T15944] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2686'.
[  805.634139][T15966] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2692'.
[  805.779431][T15968] netlink: 'syz.4.2691': attribute type 29 has an invalid length.
[  805.802976][T15968] netlink: 'syz.4.2691': attribute type 29 has an invalid length.
[  806.216131][T15976] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2694'.
[  806.323089][T15976] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  806.349822][T15976] CPU: 1 PID: 15976 Comm: syz.4.2694 Not tainted syzkaller #0
[  806.357393][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  806.367507][T15976] Call Trace:
[  806.370848][T15976]  <TASK>
[  806.373838][T15976]  dump_stack_lvl+0x188/0x24e
[  806.378667][T15976]  ? show_regs_print_info+0x12/0x12
[  806.383940][T15976]  ? load_image+0x410/0x410
[  806.388539][T15976]  sysfs_warn_dup+0x8a/0xa0
[  806.393108][T15976]  sysfs_do_create_link_sd+0xc0/0x110
[  806.398615][T15976]  device_add+0x83b/0x1050
[  806.403085][T15976]  wiphy_register+0x1d8b/0x2aa0
[  806.408087][T15976]  ? cfg80211_event_work+0x40/0x40
[  806.413248][T15976]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  806.419471][T15976]  ieee80211_register_hw+0x2d48/0x39f0
[  806.424988][T15976]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  806.431368][T15976]  ? ieee80211_register_hw+0xf41/0x39f0
[  806.437946][T15976]  ? ieee80211_register_hw+0xf41/0x39f0
[  806.443685][T15976]  ? ieee80211_tasklet_handler+0x20/0x20
[  806.449488][T15976]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  806.455459][T15976]  ? __debug_object_init+0xed/0x440
[  806.460721][T15976]  ? memset+0x1e/0x40
[  806.464753][T15976]  ? __hrtimer_init+0x189/0x270
[  806.469656][T15976]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  806.475437][T15976]  ? memcpy+0x3c/0x60
[  806.479461][T15976]  hwsim_new_radio_nl+0xab7/0xc90
[  806.484895][T15976]  genl_family_rcv_msg_doit+0x22f/0x350
[  806.490487][T15976]  ? end_current_label_crit_section+0x170/0x170
[  806.496868][T15976]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  806.503058][T15976]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  806.509049][T15976]  ? bpf_lsm_capable+0x5/0x10
[  806.513788][T15976]  ? security_capable+0x85/0xb0
[  806.518774][T15976]  genl_rcv_msg+0x601/0x790
[  806.523319][T15976]  ? rcu_is_watching+0x11/0xa0
[  806.528244][T15976]  ? genl_bind+0x360/0x360
[  806.532700][T15976]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  806.539076][T15976]  ? netlink_rcv_skb+0x1ce/0x440
[  806.544055][T15976]  netlink_rcv_skb+0x1ef/0x440
[  806.548857][T15976]  ? genl_bind+0x360/0x360
[  806.553314][T15976]  ? netlink_ack+0x1160/0x1160
[  806.558133][T15976]  ? down_read+0x1a8/0x2d0
[  806.562696][T15976]  genl_rcv+0x24/0x40
[  806.566772][T15976]  netlink_unicast+0x7ad/0x920
[  806.571583][T15976]  netlink_sendmsg+0x8ad/0xbd0
[  806.576391][T15976]  ? netlink_getsockopt+0x550/0x550
[  806.581643][T15976]  ? apparmor_socket_sendmsg+0x8a/0x330
[  806.587240][T15976]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  806.592565][T15976]  ? security_socket_sendmsg+0x7c/0xa0
[  806.598066][T15976]  ? netlink_getsockopt+0x550/0x550
[  806.603306][T15976]  ____sys_sendmsg+0x5ed/0x9a0
[  806.608479][T15976]  ? __sys_sendmsg_sock+0x30/0x30
[  806.613560][T15976]  ? __import_iovec+0x306/0x510
[  806.618472][T15976]  ? import_iovec+0x6f/0xa0
[  806.623048][T15976]  ___sys_sendmsg+0x2a2/0x360
[  806.627823][T15976]  ? __sys_sendmsg+0x2a0/0x2a0
[  806.632679][T15976]  __se_sys_sendmsg+0x1c3/0x2b0
[  806.637571][T15976]  ? __x64_sys_sendmsg+0x80/0x80
[  806.642557][T15976]  ? trace_sys_enter+0x22/0x80
[  806.647367][T15976]  do_syscall_64+0x4c/0xa0
[  806.651847][T15976]  ? clear_bhb_loop+0x60/0xb0
[  806.656557][T15976]  ? clear_bhb_loop+0x60/0xb0
[  806.661298][T15976]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  806.667245][T15976] RIP: 0033:0x7f393ef9e159
[  806.672138][T15976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  806.691880][T15976] RSP: 002b:00007f393ff36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  806.700338][T15976] RAX: ffffffffffffffda RBX: 00007f393f225fa0 RCX: 00007f393ef9e159
[  806.708343][T15976] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  806.716459][T15976] RBP: 00007f393f03506b R08: 0000000000000000 R09: 0000000000000000
[  806.724465][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  806.732502][T15976] R13: 00007f393f226038 R14: 00007f393f225fa0 R15: 00007ffec3a3c5b8
[  806.740533][T15976]  </TASK>
[  807.189732][T15999] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2699'.
[  807.271503][T15983] netlink: 'syz.5.2696': attribute type 3 has an invalid length.
[  807.287064][T15983] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2696'.
[  808.669893][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  808.676360][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  809.236343][T16040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2707'.
[  809.747354][T16043] netlink: 'syz.4.2708': attribute type 10 has an invalid length.
[  809.798068][T16043] device wlan1 left promiscuous mode
[  810.504590][T16043] device wlan1 entered promiscuous mode
[  810.557894][T16043] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  810.681064][T16050] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2708'.
[  810.860772][T16050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  810.887482][T16050] device bond_slave_0 left promiscuous mode
[  810.952112][T16050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  810.972831][T16050] device bond_slave_1 left promiscuous mode
[  811.016321][T16050] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  811.039344][T16050] device bridge_slave_1 left promiscuous mode
[  811.058655][T16050] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  811.114069][T16050] device wlan1 left promiscuous mode
[  811.134522][T16050] bond0 (unregistering): Released all slaves
[  811.893069][T16083] netlink: 'syz.0.2719': attribute type 3 has an invalid length.
[  812.026716][T16083] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2719'.
[  812.828132][T16103] netlink: 4079 bytes leftover after parsing attributes in process `syz.5.2725'.
[  815.714971][T16136] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2733'.
[  815.914000][T16141] netlink: 'syz.2.2734': attribute type 3 has an invalid length.
[  815.950264][T16141] netlink: 'syz.2.2734': attribute type 1 has an invalid length.
[  815.972951][T16141] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2734'.
[  818.152087][T16189] bridge0: port 1(bridge_slave_0) entered forwarding state
[  818.984761][T16210] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2754'.
[  819.068436][T16207] netlink: 'syz.3.2752': attribute type 13 has an invalid length.
[  819.076714][T16207] netlink: 14581 bytes leftover after parsing attributes in process `syz.3.2752'.
[  821.355231][T16224] netlink: 'syz.4.2757': attribute type 21 has an invalid length.
[  821.380889][T16224] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2757'.
[  821.514373][T16224] netlink: 'syz.4.2757': attribute type 4 has an invalid length.
[  822.703702][T16248] netlink: 'syz.3.2765': attribute type 2 has an invalid length.
[  822.736705][T16248] netlink: 'syz.3.2765': attribute type 9 has an invalid length.
[  823.676925][T16270] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2767'.
[  823.812273][T16270] net_ratelimit: 895 callbacks suppressed
[  823.812290][T16270] netlink: zone id is out of range
[  823.893025][T16270] netlink: zone id is out of range
[  823.929192][T16270] netlink: zone id is out of range
[  823.975361][T16270] netlink: zone id is out of range
[  824.008039][T16270] netlink: zone id is out of range
[  824.101609][T16270] netlink: del zone limit has 4 unknown bytes
[  824.411200][T16281] netlink: 'syz.5.2771': attribute type 4 has an invalid length.
[  825.179658][ T4286] Bluetooth: hci5: unexpected event 0x04 length: 151 > 10
[  825.349731][T16283] device syzkaller0 entered promiscuous mode
[  827.236452][T11826] Bluetooth: hci5: command 0x0409 tx timeout
[  828.476775][T16300] device syzkaller0 entered promiscuous mode
[  831.243932][T16336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2781'.
[  831.745978][T16346] netlink: 'syz.4.2786': attribute type 2 has an invalid length.
[  831.762799][T16346] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2786'.
[  832.001714][T16356] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2784'.
[  835.777787][T16400] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2798'.
[  835.872779][T16400] debugfs: Directory '.!
 5‚Á7>7H
€' with parent 'ieee80211' already present!
[  838.611147][T16455] rose0: tun_chr_ioctl cmd 1074812118
[  838.631873][T16455] rose0: tun_chr_ioctl cmd 1074812117
[  839.644012][T16485] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2819'.
[  840.047286][T16496] netlink: 'syz.2.2820': attribute type 21 has an invalid length.
[  840.131217][T16496] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2820'.
[  840.453047][T16505] netlink: 'syz.3.2822': attribute type 2 has an invalid length.
[  840.545871][T16505] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2822'.
[  841.414866][T16515] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2825'.
[  841.618315][T16515] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  844.408094][T16562] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2834'.
[  844.525862][T16564] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2835'.
[  846.110456][T16595] netlink: 'syz.3.2842': attribute type 4 has an invalid length.
[  846.266378][T16600] netlink: 'syz.3.2842': attribute type 4 has an invalid length.
[  846.326324][T16595] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2842'.
[  846.341187][T16602] netlink: 'syz.5.2844': attribute type 10 has an invalid length.
[  846.383210][T16600] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2842'.
[  846.587751][ T4286] Bluetooth: hci5: command 0x0406 tx timeout
[  847.556493][T16626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2848'.
[  847.808131][T16635] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2851'.
[  848.093823][T16638] netlink: 'syz.0.2852': attribute type 1 has an invalid length.
[  848.323058][T16650] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2855'.
[  848.755040][T16665] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  848.764188][T16666] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  848.782670][T16665] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  848.857242][T16669] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  848.914649][T16668] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  849.054874][T16669] netlink: 'syz.2.2857': attribute type 29 has an invalid length.
[  849.130146][T16675] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2860'.
[  849.152625][T16675] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  849.172212][T16675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  849.824159][T16682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2862'.
[  850.404267][T16701] delete_channel: no stack
[  850.438544][T16701] delete_channel: no stack
[  851.431665][T11826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  851.442990][T11826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  851.453204][T11826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  851.454374][ T5691] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.497799][   T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  851.511528][   T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  851.519319][   T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  851.750354][ T5691] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.002437][ T5691] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.132453][ T5691] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.310783][T16744] validate_nla: 2 callbacks suppressed
[  852.310801][T16744] netlink: 'syz.3.2880': attribute type 19 has an invalid length.
[  852.714269][T16753] netlink: 'syz.4.2883': attribute type 3 has an invalid length.
[  852.728927][T16753] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2883'.
[  852.762292][T16721] chnl_net:caif_netlink_parms(): no params data found
[  853.345368][T16721] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.379679][T16721] bridge0: port 1(bridge_slave_0) entered disabled state
[  853.421181][T16721] device bridge_slave_0 entered promiscuous mode
[  853.561397][   T49] Bluetooth: hci2: command 0x0409 tx timeout
[  854.300145][T16721] bridge0: port 2(bridge_slave_1) entered blocking state
[  854.317649][T16721] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.326319][T16721] device bridge_slave_1 entered promiscuous mode
[  854.696952][T16721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  854.790105][T16721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  855.169223][T16721] team0: Port device team_slave_0 added
[  855.382349][T16721] team0: Port device team_slave_1 added
[  855.450835][T16793] netlink: 'syz.3.2891': attribute type 16 has an invalid length.
[  855.464441][T16793] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2891'.
[  855.626769][   T49] Bluetooth: hci2: command 0x041b tx timeout
[  855.638688][T16809] netlink: 63579 bytes leftover after parsing attributes in process `syz.4.2894'.
[  855.663877][T16721] batman_adv: batadv0: Adding interface: batadv_slave_0
[  855.703830][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  855.742020][T16721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  855.837712][T16721] batman_adv: batadv0: Adding interface: batadv_slave_1
[  855.844749][T16721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  855.906721][T16721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  856.425296][T16721] device hsr_slave_0 entered promiscuous mode
[  856.482361][T16721] device hsr_slave_1 entered promiscuous mode
[  856.502882][T16721] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  856.522151][T16721] Cannot create hsr debugfs directory
[  856.566179][T16832] -1: renamed from syzkaller0
[  856.991497][T16844] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.2903'.
[  857.023059][T16852] netlink: 'syz.3.2904': attribute type 3 has an invalid length.
[  857.060837][T16852] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2904'.
[  857.145848][T16855] netlink: 'syz.3.2904': attribute type 21 has an invalid length.
[  857.167793][T16855] netlink: 'syz.3.2904': attribute type 7 has an invalid length.
[  857.221821][T16852] netlink: 'syz.3.2904': attribute type 10 has an invalid length.
[  857.327709][T16852] device dummy0 left promiscuous mode
[  857.333514][T16852] bridge0: port 3(dummy0) entered disabled state
[  857.378381][T16852] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  857.702299][T16873] netlink: 63579 bytes leftover after parsing attributes in process `syz.5.2908'.
[  857.713478][   T49] Bluetooth: hci2: command 0x040f tx timeout
[  858.068150][T16883] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2910'.
[  858.113783][T16883] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  858.398512][ T5691] device team0 left promiscuous mode
[  858.416941][ T5691] device @ left promiscuous mode
[  858.444761][ T5691] device team_slave_1 left promiscuous mode
[  858.466866][ T5691] device geneve1 left promiscuous mode
[  858.493809][ T5691] ¥: port 1(team0) entered disabled state
[  858.527554][ T5691] device hsr_slave_0 left promiscuous mode
[  858.554125][ T5691] device hsr_slave_1 left promiscuous mode
[  858.577319][ T5691] bridge0: port 3(hsr0) entered disabled state
[  858.605169][ T5691] device bridge_slave_0 left promiscuous mode
[  858.617074][ T5691] bridge0: port 1(bridge_slave_0) entered disabled state
[  858.660452][ T5691] device veth1_vlan left promiscuous mode
[  858.722509][T16904] netlink: 'syz.3.2914': attribute type 7 has an invalid length.
[  858.775827][T16904] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2914'.
[  859.052728][ T5691] team0 (unregistering): Port device geneve1 removed
[  859.481871][ T5691] team0 (unregistering): Port device team_slave_1 removed
[  859.540571][ T5691] team0 (unregistering): Port device @ removed
[  859.786842][ T4286] Bluetooth: hci2: command 0x0419 tx timeout
[  860.112633][T16910] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.189500][T16910] device bridge_slave_0 left promiscuous mode
[  860.195706][T16910] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.206550][T16911] device sit0 entered promiscuous mode
[  860.284594][T16721] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  860.368725][T16721] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  860.426567][T16721] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  860.481493][T16721] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  860.624842][T16931] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.2920'.
[  860.655959][T16932] netlink: 'syz.4.2919': attribute type 16 has an invalid length.
[  860.727876][T16932] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2919'.
[  861.041868][T16721] 8021q: adding VLAN 0 to HW filter on device bond0
[  861.132272][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  861.146593][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  861.195920][T16721] 8021q: adding VLAN 0 to HW filter on device team0
[  861.251474][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  861.285892][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  861.346743][T10456] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.354215][T10456] bridge0: port 1(bridge_slave_0) entered forwarding state
[  861.466895][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  861.492265][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  861.512430][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  861.532432][T10456] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.539765][T10456] bridge0: port 2(bridge_slave_1) entered forwarding state
[  861.589827][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  861.676497][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  861.698659][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  861.735939][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  861.786184][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  861.833187][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  861.875253][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  861.936263][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  861.948579][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  862.008356][T16721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  862.046235][T16721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  862.091334][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  862.117812][ T5964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  862.622211][T16976] device syzkaller0 entered promiscuous mode
[  862.630741][T16975] netlink: 'syz.0.2927': attribute type 13 has an invalid length.
[  862.639766][T16975] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2927'.
[  862.664134][T16975] syz_tun: refused to change device tx_queue_len
[  862.681343][T16975] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  865.561330][T16983] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2928'.
[  865.580997][T16987] netlink: 'syz.0.2928': attribute type 10 has an invalid length.
[  865.634901][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  865.653024][T10456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  865.678755][T16721] 8021q: adding VLAN 0 to HW filter on device batadv0
[  865.801412][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  865.825987][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  865.897572][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  865.924599][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  866.022577][T16721] device veth0_vlan entered promiscuous mode
[  866.068524][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  866.089491][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  866.167744][T16721] device veth1_vlan entered promiscuous mode
[  866.252662][T17003] netlink: 'syz.5.2932': attribute type 12 has an invalid length.
[  866.282487][T17003] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2932'.
[  866.421479][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  866.457088][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  866.490198][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  866.530102][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  867.668113][T16721] device veth0_macvtap entered promiscuous mode
[  867.704345][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  867.749690][T16721] device veth1_macvtap entered promiscuous mode
[  867.952321][T16721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  867.995810][T16721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.059024][T16721] batman_adv: batadv0: Interface activated: batadv_slave_0
[  868.067080][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  868.076006][ T5704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  868.131121][T16721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.148335][T16721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.182676][T16721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.200955][T16721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.211350][T16721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  868.222254][T16721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  868.246807][T16721] batman_adv: batadv0: Interface activated: batadv_slave_1
[  868.304395][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  868.347139][ T5707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  868.372606][T16721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  868.394063][T16721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  868.414920][T16721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  868.435319][T16721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  868.811845][T17084] device syzkaller0 entered promiscuous mode
[  869.602551][T10454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.642420][T10454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.678735][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  869.768744][ T9194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.801537][ T9194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.810640][T17113] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.2950'.
[  869.827825][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  869.891594][T17113] netlink: zone id is out of range
[  869.909335][T17113] netlink: zone id is out of range
[  869.982177][T17113] netlink: zone id is out of range
[  870.024485][T17113] netlink: zone id is out of range
[  870.068753][T17113] netlink: zone id is out of range
[  870.109030][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  870.115539][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  870.127925][T17113] netlink: zone id is out of range
[  870.133143][T17113] netlink: zone id is out of range
[  870.204951][T17113] netlink: zone id is out of range
[  870.240461][T17113] netlink: zone id is out of range
[  870.245775][T17113] netlink: zone id is out of range
[  870.775354][T17136] bridge0: port 1(batadv0) entered blocking state
[  870.782630][T17136] bridge0: port 1(batadv0) entered disabled state
[  870.879215][T17136] device batadv0 entered promiscuous mode
[  870.938424][   T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  870.952176][   T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  870.962317][   T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  870.965693][T17136] bridge0: port 1(batadv0) entered blocking state
[  870.976350][T17136] bridge0: port 1(batadv0) entered forwarding state
[  870.999270][T11826] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  871.008514][T11826] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  871.015938][T11826] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  871.279945][ T5702] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  871.289527][ T5702] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  871.453681][T17153] IPv6: Can't replace route, no match found
[  871.899794][T17164] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2964'.
[  872.140182][T17145] chnl_net:caif_netlink_parms(): no params data found
[  872.227864][T17170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2963'.
[  872.661638][T17180] netlink: 'syz.5.2968': attribute type 2 has an invalid length.
[  872.671080][T17180] netlink: 'syz.5.2968': attribute type 8 has an invalid length.
[  872.685366][T17180] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2968'.
[  872.925743][T17145] bridge0: port 1(bridge_slave_0) entered blocking state
[  872.960090][T17145] bridge0: port 1(bridge_slave_0) entered disabled state
[  872.997511][T17145] device bridge_slave_0 entered promiscuous mode
[  873.036903][T17145] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.066890][T11826] Bluetooth: hci3: command 0x0409 tx timeout
[  873.098064][T17145] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.151530][T17145] device bridge_slave_1 entered promiscuous mode
[  873.374749][T17145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.426080][T17145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.489032][T17145] team0: Port device team_slave_0 added
[  873.520057][T17145] team0: Port device team_slave_1 added
[  873.575691][T17200] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2971'.
[  873.590707][T17200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'.
[  873.621551][T17145] batman_adv: batadv0: Adding interface: batadv_slave_0
[  873.636711][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  873.666691][T17145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  873.679954][T17145] batman_adv: batadv0: Adding interface: batadv_slave_1
[  873.696692][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  873.753747][T17145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  874.832967][T17145] device hsr_slave_0 entered promiscuous mode
[  874.848621][T17145] device hsr_slave_1 entered promiscuous mode
[  874.857670][T17145] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  874.873227][T17145] Cannot create hsr debugfs directory
[  875.003930][T17205] netlink: 'syz.2.2972': attribute type 1 has an invalid length.
[  875.054001][T17205] netlink: 'syz.2.2972': attribute type 3 has an invalid length.
[  875.085294][ T5690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.096811][T17206] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2972'.
[  875.129767][T17205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2972'.
[  875.146818][ T4286] Bluetooth: hci3: command 0x041b tx timeout
[  875.216976][T17204] netlink: 'syz.3.2973': attribute type 10 has an invalid length.
[  875.357719][ T5690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.413573][T17216] netlink: 'syz.0.2976': attribute type 16 has an invalid length.
[  875.424558][T17216] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2976'.
[  875.439553][T17214] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2975'.
[  875.495543][ T5690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.663835][ T5690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.907525][T17229] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2979'.
[  876.065633][T17229] sysfs: cannot create duplicate filename '/class/ieee80211/.!
'
[  876.108493][T17229] CPU: 0 PID: 17229 Comm: syz.0.2979 Not tainted syzkaller #0
[  876.116050][T17229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  876.126155][T17229] Call Trace:
[  876.129470][T17229]  <TASK>
[  876.132436][T17229]  dump_stack_lvl+0x188/0x24e
[  876.137151][T17229]  ? show_regs_print_info+0x12/0x12
[  876.142519][T17229]  ? load_image+0x410/0x410
[  876.147075][T17229]  sysfs_warn_dup+0x8a/0xa0
[  876.151618][T17229]  sysfs_do_create_link_sd+0xc0/0x110
[  876.157123][T17229]  device_add+0x83b/0x1050
[  876.161676][T17229]  wiphy_register+0x1d8b/0x2aa0
[  876.166575][T17229]  ? cfg80211_event_work+0x40/0x40
[  876.171719][T17229]  ? minstrel_ht_alloc+0x894/0xa20
[  876.176872][T17229]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  876.182985][T17229]  ieee80211_register_hw+0x2d48/0x39f0
[  876.188489][T17229]  ? ieee80211_register_hw+0xf41/0x39f0
[  876.194153][T17229]  ? ieee80211_register_hw+0xf41/0x39f0
[  876.199737][T17229]  ? ieee80211_tasklet_handler+0x20/0x20
[  876.205398][T17229]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  876.211368][T17229]  ? __debug_object_init+0xed/0x440
[  876.216605][T17229]  ? memset+0x1e/0x40
[  876.220627][T17229]  ? __hrtimer_init+0x189/0x270
[  876.225514][T17229]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  876.231390][T17229]  ? memcpy+0x3c/0x60
[  876.235422][T17229]  hwsim_new_radio_nl+0xab7/0xc90
[  876.240525][T17229]  genl_family_rcv_msg_doit+0x22f/0x350
[  876.246121][T17229]  ? end_current_label_crit_section+0x170/0x170
[  876.252405][T17229]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  876.258336][T17229]  ? bpf_lsm_capable+0x5/0x10
[  876.263041][T17229]  ? security_capable+0x85/0xb0
[  876.267936][T17229]  genl_rcv_msg+0x601/0x790
[  876.272479][T17229]  ? genl_bind+0x360/0x360
[  876.276933][T17229]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  876.283313][T17229]  netlink_rcv_skb+0x1ef/0x440
[  876.288102][T17229]  ? genl_bind+0x360/0x360
[  876.292559][T17229]  ? netlink_ack+0x1160/0x1160
[  876.297362][T17229]  ? down_read+0x1a8/0x2d0
[  876.301828][T17229]  genl_rcv+0x24/0x40
[  876.305837][T17229]  netlink_unicast+0x7ad/0x920
[  876.310639][T17229]  netlink_sendmsg+0x8ad/0xbd0
[  876.315440][T17229]  ? netlink_getsockopt+0x550/0x550
[  876.320683][T17229]  ? apparmor_socket_sendmsg+0x8a/0x330
[  876.326265][T17229]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  876.331585][T17229]  ? security_socket_sendmsg+0x7c/0xa0
[  876.337105][T17229]  ? netlink_getsockopt+0x550/0x550
[  876.342336][T17229]  ____sys_sendmsg+0x5ed/0x9a0
[  876.347134][T17229]  ? __sys_sendmsg_sock+0x30/0x30
[  876.352188][T17229]  ? __import_iovec+0x306/0x510
[  876.357081][T17229]  ? import_iovec+0x6f/0xa0
[  876.361625][T17229]  ___sys_sendmsg+0x2a2/0x360
[  876.366338][T17229]  ? __sys_sendmsg+0x2a0/0x2a0
[  876.371170][T17229]  __se_sys_sendmsg+0x1c3/0x2b0
[  876.376063][T17229]  ? __x64_sys_sendmsg+0x80/0x80
[  876.381047][T17229]  ? lockdep_hardirqs_on+0x94/0x140
[  876.386290][T17229]  do_syscall_64+0x4c/0xa0
[  876.390755][T17229]  ? clear_bhb_loop+0x60/0xb0
[  876.395463][T17229]  ? clear_bhb_loop+0x60/0xb0
[  876.400177][T17229]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  876.406108][T17229] RIP: 0033:0x7fbc0c99e159
[  876.410575][T17229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  876.430380][T17229] RSP: 002b:00007fbc0d7b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  876.439011][T17229] RAX: ffffffffffffffda RBX: 00007fbc0cc26090 RCX: 00007fbc0c99e159
[  876.447205][T17229] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006
[  876.455220][T17229] RBP: 00007fbc0ca3506b R08: 0000000000000000 R09: 0000000000000000
[  876.463226][T17229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  876.471320][T17229] R13: 00007fbc0cc26128 R14: 00007fbc0cc26090 R15: 00007ffd759792b8
[  876.479341][T17229]  </TASK>
[  876.547427][ T5690] tipc: Left network mode
[  877.226989][ T4286] Bluetooth: hci3: command 0x040f tx timeout
[  877.298168][T17278] netlink: 'syz.3.2988': attribute type 2 has an invalid length.
[  877.306081][T17278] __nla_validate_parse: 1 callbacks suppressed
[  877.306099][T17278] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2988'.
[  877.657872][T17145] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  877.705548][T17145] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  877.839511][T17145] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  878.015935][T17145] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  878.162554][T17296] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2992'.
[  878.626202][T17145] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.751953][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  878.792028][ T5708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  878.874268][T17145] 8021q: adding VLAN 0 to HW filter on device team0
[  878.908961][T17313] netlink: 64535 bytes leftover after parsing attributes in process `syz.5.2996'.
[  879.036134][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  879.055042][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  879.083574][ T5691] bridge0: port 1(bridge_slave_0) entered blocking state
[  879.090875][ T5691] bridge0: port 1(bridge_slave_0) entered forwarding state
[  879.118404][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  879.137679][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  879.178007][ T5691] bridge0: port 2(bridge_slave_1) entered blocking state
[  879.185301][ T5691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  879.293398][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  879.317720][ T4286] Bluetooth: hci3: command 0x0419 tx timeout
[  879.342214][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  879.394436][ T5691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  879.499033][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  879.554859][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  879.598170][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  879.632115][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  879.673760][T17145] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  879.704868][T17145] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  879.773919][T17328] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2998'.
[  879.958362][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  879.969374][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  879.983209][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  879.998880][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  880.008863][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  880.018464][ T5702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  880.045252][T17338] netlink: 'syz.0.3000': attribute type 10 has an invalid length.
[  880.059889][T17338] device netdevsim0 entered promiscuous mode
[  880.514202][T17353] netlink: 'syz.5.3003': attribute type 1 has an invalid length.
[  880.633987][T17361] netlink: 'syz.2.3004': attribute type 1 has an invalid length.
[  880.733682][ T5690] device hsr_slave_0 left promiscuous mode
[  880.780123][ T5690] device hsr_slave_1 left promiscuous mode
[  880.814468][ T5690] bridge0: port 2(hsr0) entered disabled state
[  880.834647][ T5690] device bridge_slave_0 left promiscuous mode
[  880.850824][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state
[  880.905523][ T5690] device veth1_vlan left promiscuous mode
[  883.330251][T17374] netlink: 'syz.3.3007': attribute type 21 has an invalid length.
[  883.346217][T17374] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3007'.
[  883.371858][T17374] netlink: 'syz.3.3007': attribute type 4 has an invalid length.
[  883.406066][T17374] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3007'.
[  883.786193][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  883.798054][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  883.851499][T17145] 8021q: adding VLAN 0 to HW filter on device batadv0
[  884.069716][T17428] netlink: 'syz.2.3018': attribute type 2 has an invalid length.
[  884.113006][T17428] netlink: 'syz.2.3018': attribute type 8 has an invalid length.
[  884.165380][T17428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3018'.
[  884.964032][ T4286] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18
[  885.592620][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  885.620596][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  885.815929][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  885.832147][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  885.843557][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  885.865783][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  885.889681][T17145] device veth0_vlan entered promiscuous mode
[  885.973327][T17464] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3024'.
[  886.024975][T17145] device veth1_vlan entered promiscuous mode
[  886.246950][T17145] device veth0_macvtap entered promiscuous mode
[  886.268864][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  886.304437][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  886.336355][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  886.387970][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  886.436251][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  886.468979][T17145] device veth1_macvtap entered promiscuous mode
[  886.561564][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.602990][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.623653][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  886.644719][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.681010][T17145] batman_adv: batadv0: Interface activated: batadv_slave_0
[  886.712827][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  886.732195][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  886.767662][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  886.854245][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.879456][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.946766][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  886.976710][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  886.991600][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.015595][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.038487][T17145] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  887.067158][T17145] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  887.088410][T17145] batman_adv: batadv0: Interface activated: batadv_slave_1
[  887.114442][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  887.128605][ T6952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  887.164487][T17145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  887.194392][T17145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  887.220723][T17145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  887.248387][T17145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  887.563510][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.597168][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.813201][T17500] netlink: 'syz.0.3034': attribute type 1 has an invalid length.
[  887.832734][T17500] netlink: 'syz.0.3034': attribute type 2 has an invalid length.
[  887.841538][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  887.903310][ T5704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  887.916100][T17500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3034'.
[  887.923356][ T5704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  887.933475][   T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  887.980710][T17499] netlink: 'syz.0.3034': attribute type 39 has an invalid length.
[  888.802297][T17513] netlink: 'syz.4.2953': attribute type 39 has an invalid length.
[  890.036325][T17533] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3041'.
[  890.393483][T11826] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  890.403858][T11826] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  890.413495][T11826] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  890.423063][T11826] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  890.432335][T11826] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  890.440950][T11826] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  890.881317][T17537] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.3040'.
[  892.238569][T17557] netlink: 'syz.3.3045': attribute type 1 has an invalid length.
[  892.257928][T17542] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  892.268346][T17542] net_ratelimit: 3613 callbacks suppressed
[  892.268365][T17542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  892.292190][T17557] netlink: 'syz.3.3045': attribute type 3 has an invalid length.
[  892.336938][T17557] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3045'.
[  892.688991][T17569] netlink: 'syz.5.3047': attribute type 29 has an invalid length.
[  892.772703][T17569] netlink: 'syz.5.3047': attribute type 29 has an invalid length.
[  892.850675][T17577] netlink: 'syz.3.3049': attribute type 2 has an invalid length.
[  892.860369][T17574] netlink: 'syz.5.3047': attribute type 29 has an invalid length.
[  892.880245][T17569] netlink: 'syz.5.3047': attribute type 29 has an invalid length.
[  892.911069][T11826] Bluetooth: hci6: command 0x0409 tx timeout
[  892.922138][T17578] netlink: 'syz.5.3047': attribute type 29 has an invalid length.
[  892.941799][T17577] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3049'.
[  893.037777][T17582] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3048'.
[  893.205392][T17543] chnl_net:caif_netlink_parms(): no params data found
[  893.275579][T17586] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.3050'.
[  893.313140][T17586] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.3050'.
[  893.499144][T17593] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3052'.
[  893.597680][T17605] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.3053'.
[  893.738546][T17543] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.745772][T17543] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.802319][T17543] device bridge_slave_0 entered promiscuous mode
[  893.834956][T17543] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.869971][T17543] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.898501][T17543] device bridge_slave_1 entered promiscuous mode
[  894.098416][ T5690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.149546][T17543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  894.399645][ T5690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  894.427252][   T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds.
[  894.445506][   T28]       Not tainted syzkaller #0
[  894.455634][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  894.478241][   T28] task:rcu_tasks_kthre state:D stack:28256 pid:12    ppid:2      flags:0x00004000
[  894.496743][   T28] Call Trace:
[  894.500210][   T28]  <TASK>
[  894.503207][   T28]  __schedule+0x107f/0x4030
[  894.516886][   T28]  ? release_firmware_map_entry+0x187/0x187
[  894.526971][   T28]  schedule+0xb9/0x180
[  894.531132][   T28]  schedule_timeout+0xbd/0x2d0
[  894.547904][   T28]  ? console_conditional_schedule+0x40/0x40
[  894.559636][   T28]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  894.573382][   T28]  ? __lock_acquire+0x7c40/0x7c40
[  894.580267][   T28]  ? lock_chain_count+0x20/0x20
[  894.585338][   T28]  ? _raw_spin_lock_irq+0xb7/0xf0
[  894.591947][   T28]  ? _raw_spin_lock_irqsave+0x100/0x100
[  894.598119][   T28]  ? _raw_spin_unlock_irq+0x1f/0x40
[  894.603567][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  894.609509][   T28]  ? wait_for_completion+0x26f/0x590
[  894.615083][   T28]  wait_for_completion+0x2c2/0x590
[  894.620823][   T28]  ? io_schedule+0xd0/0xd0
[  894.625456][   T28]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  894.631873][   T28]  ? debug_object_active_state+0x6b/0x380
[  894.638150][   T28]  __synchronize_srcu+0x2b3/0x350
[  894.643363][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  894.651336][   T28]  ? synchronize_srcu_expedited+0x20/0x20
[  894.658289][   T28]  ? rcu_read_lock_any_held+0x130/0x130
[  894.664094][   T28]  ? ktime_get_mono_fast_ns+0x199/0x1b0
[  894.670233][   T28]  ? synchronize_srcu+0x18f/0x1b0
[  894.675572][   T28]  rcu_tasks_wait_gp+0x49f/0xac0
[  894.681121][   T28]  ? rcu_tasks_wait_gp+0x21a/0xac0
[  894.686455][   T28]  ? lock_chain_count+0x20/0x20
[  894.691813][   T28]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  894.701090][   T28]  ? lockdep_hardirqs_on+0x94/0x140
[  894.711706][   T28]  ? rcu_tasks_invoke_cbs+0x670/0x670
[  894.720060][   T28]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  894.726155][   T28]  ? _raw_spin_unlock+0x40/0x40
[  894.736288][   T28]  rcu_tasks_one_gp+0xd27/0xef0
[  894.741762][   T28]  ? rcu_tasks_one_gp+0xe5/0xef0
[  894.747677][   T28]  rcu_tasks_kthread+0x6e/0x90
[  894.752669][   T28]  kthread+0x29d/0x330
[  894.757346][   T28]  ? rcu_tasks_postgp+0x10/0x10
[  894.762364][   T28]  ? kthread_blkcg+0xd0/0xd0
[  894.767550][   T28]  ret_from_fork+0x1f/0x30
[  894.772164][   T28]  </TASK>
[  894.780247][   T28] 
[  894.780247][   T28] Showing all locks held in the system:
[  894.786163][T17543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  894.789940][   T28] 1 lock held by rcu_tasks_kthre/12:
[  894.810134][   T28]  #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  894.821439][   T28] 1 lock held by rcu_tasks_trace/13:
[  894.827287][   T28]  #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0
[  894.839031][   T28] 1 lock held by khungtaskd/28:
[  894.844060][   T28]  #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  894.854712][   T28] 2 locks held by getty/4028:
[  894.859845][   T28]  #0: ffff88802f7ee098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  894.870577][   T28]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360
[  894.881704][   T28] 5 locks held by kworker/u4:9/5690:
[  894.888424][   T28]  #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  894.899544][   T28]  #1: ffffc900034d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  894.910541][   T28]  #2: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0
[  894.920870][   T28]  #3: ffff888072dca2f8 (&devlink->lock_key#2){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x104/0x280
[  894.932698][   T28]  #4: ffffffff8cb33380 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5e0
[  894.943586][   T28] 2 locks held by kworker/u4:10/5691:
[  894.949818][   T28] 2 locks held by kworker/u4:14/5696:
[  894.955600][   T28]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  894.967621][   T28]  #1: ffffc90003537d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  894.979863][   T28] 4 locks held by kworker/u4:19/5704:
[  894.985533][   T28]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  894.998232][   T28]  #1: ffffc900038d7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  895.008080][T11826] Bluetooth: hci6: command 0x041b tx timeout
[  895.017981][   T28]  #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  895.034688][   T28]  #3: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890
[  895.046483][   T28] 2 locks held by kworker/0:12/7268:
[  895.052080][   T28]  #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  895.063391][   T28]  #1: ffffc9000cb5fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160
[  895.075324][   T28] 1 lock held by syz-executor/17543:
[  895.080820][   T28]  #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0
[  895.092324][   T28] 2 locks held by syz.4.3053/17600:
[  895.101331][   T28]  #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140
[  895.111952][   T28]  #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890
[  895.126822][   T28] 1 lock held by syz.5.3055/17611:
[  895.132004][   T28]  #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0
[  895.145366][   T28] 1 lock held by syz.2.3057/17619:
[  895.150846][   T28]  #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x3f3/0x1ed0
[  895.160629][   T28] 1 lock held by syz.2.3057/17620:
[  895.165803][   T28]  #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x54d/0xe80
[  895.178529][   T28] 
[  895.188463][   T28] =============================================
[  895.188463][   T28] 
[  895.201843][   T28] NMI backtrace for cpu 0
[  895.206345][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  895.213599][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  895.223696][   T28] Call Trace:
[  895.227027][   T28]  <TASK>
[  895.230003][   T28]  dump_stack_lvl+0x188/0x24e
[  895.234735][   T28]  ? irq_work_queue+0xb8/0x140
[  895.239663][   T28]  ? show_regs_print_info+0x12/0x12
[  895.244929][   T28]  ? load_image+0x410/0x410
[  895.249489][   T28]  ? vprintk_emit+0x59f/0x6a0
[  895.254364][   T28]  ? printk_sprint+0x460/0x460
[  895.259195][   T28]  nmi_cpu_backtrace+0x3e6/0x460
[  895.264188][   T28]  ? nmi_trigger_cpumask_backtrace+0x450/0x450
[  895.270428][   T28]  ? _printk+0xda/0x130
[  895.274649][   T28]  ? load_image+0x410/0x410
[  895.279219][   T28]  ? load_image+0x410/0x410
[  895.283781][   T28]  ? nmi_trigger_cpumask_backtrace+0xf3/0x450
[  895.289897][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  895.296094][   T28]  nmi_trigger_cpumask_backtrace+0x1d4/0x450
[  895.302138][   T28]  watchdog+0xf0e/0xf50
[  895.302754][T17620] device syzkaller0 entered promiscuous mode
[  895.306340][   T28]  ? watchdog+0x1ed/0xf50
[  895.316747][   T28]  kthread+0x29d/0x330
[  895.320861][   T28]  ? hungtask_pm_notify+0x40/0x40
[  895.325930][   T28]  ? kthread_blkcg+0xd0/0xd0
[  895.330580][   T28]  ret_from_fork+0x1f/0x30
[  895.335065][   T28]  </TASK>
[  895.338744][   T28] Sending NMI from CPU 0 to CPUs 1:
[  895.344009][    C1] NMI backtrace for cpu 1
[  895.344019][    C1] CPU: 1 PID: 17604 Comm: syz.4.3053 Not tainted syzkaller #0
[  895.344035][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  895.344045][    C1] RIP: 0010:__lock_acquire+0xe7b/0x7c40
[  895.344074][    C1] Code: 00 00 00 fc ff df 48 0f a3 1d 01 e4 4c 0f 0f 83 f8 4b 00 00 49 8d 9d d0 0a 00 00 48 89 d8 48 c1 e8 03 48 89 84 24 c0 00 00 00 <42> 80 3c 00 00 74 12 48 89 df e8 36 69 6f 00 49 b8 00 00 00 00 00
[  895.344089][    C1] RSP: 0018:ffffc900035aefc0 EFLAGS: 00000806
[  895.344103][    C1] RAX: 1ffff1100f3dcc9a RBX: ffff888079ee64d0 RCX: ffffffff81640e2d
[  895.344116][    C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b0f240
[  895.344127][    C1] RBP: ffffc900035af1f0 R08: dffffc0000000000 R09: 1ffffffff2161e48
[  895.344139][    C1] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: ffff888079ee64d8
[  895.344152][    C1] R13: ffff888079ee5a00 R14: ffff888079ee6530 R15: ffff888079ee6550
[  895.344164][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  895.344178][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  895.344189][    C1] CR2: 00007f576c2b4e9c CR3: 000000005bf67000 CR4: 00000000003506e0
[  895.344204][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  895.344214][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  895.344224][    C1] Call Trace:
[  895.344229][    C1]  <TASK>
[  895.344243][    C1]  ? mark_lock+0x94/0x320
[  895.344267][    C1]  ? verify_lock_unused+0x140/0x140
[  895.344290][    C1]  ? __lock_acquire+0x1465/0x7c40
[  895.344315][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  895.344338][    C1]  ? finish_task_switch+0x262/0x8e0
[  895.344435][    C1]  ? verify_lock_unused+0x140/0x140
[  895.344460][    C1]  ? __schedule+0x1087/0x4030
[  895.344479][    C1]  lock_acquire+0x1bb/0x4a0
[  895.344502][    C1]  ? folio_memcg_lock+0x7d/0x320
[  895.344570][    C1]  ? read_lock_is_recursive+0x10/0x10
[  895.344599][    C1]  folio_memcg_lock+0x9e/0x320
[  895.344619][    C1]  ? folio_memcg_lock+0x7d/0x320
[  895.344642][    C1]  ? folio_memcg_lock+0x7d/0x320
[  895.344661][    C1]  ? mem_cgroup_get_oom_group+0x350/0x350
[  895.344683][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  895.344709][    C1]  page_remove_rmap+0x2e/0xef0
[  895.344752][    C1]  unmap_page_range+0x10db/0x25b0
[  895.344841][    C1]  unmap_vmas+0x260/0x390
[  895.344865][    C1]  ? unmap_vmas+0x1bd/0x390
[  895.344890][    C1]  ? unmap_page_range+0x25b0/0x25b0
[  895.344917][    C1]  ? __lock_acquire+0x7c40/0x7c40
[  895.344947][    C1]  exit_mmap+0x20d/0x970
[  895.344971][    C1]  ? vm_brk+0x20/0x20
[  895.344991][    C1]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  895.345016][    C1]  ? exit_mm+0x23d/0x350
[  895.345052][    C1]  ? uprobe_clear_state+0x274/0x290
[  895.345106][    C1]  __mmput+0x118/0x3a0
[  895.345122][    C1]  exit_mm+0x24d/0x350
[  895.345146][    C1]  ? sysctl_delayacct+0x220/0x220
[  895.345170][    C1]  ? do_exit+0x2570/0x2570
[  895.345195][    C1]  ? tty_audit_exit+0x149/0x1f0
[  895.345216][    C1]  do_exit+0x958/0x2570
[  895.345240][    C1]  ? cgroup_freezing+0x1c/0x340
[  895.345320][    C1]  ? put_task_struct+0x80/0x80
[  895.345346][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  895.345370][    C1]  ? lock_chain_count+0x20/0x20
[  895.345396][    C1]  do_group_exit+0x229/0x2e0
[  895.345419][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  895.345441][    C1]  get_signal+0x1259/0x1340
[  895.345498][    C1]  arch_do_signal_or_restart+0xc4/0x1310
[  895.345529][    C1]  ? seqcount_lockdep_reader_access+0x177/0x1d0
[  895.345553][    C1]  ? do_futex+0x310/0x320
[  895.345592][    C1]  ? get_sigframe_size+0x10/0x10
[  895.345612][    C1]  ? __ia32_sys_get_robust_list+0x100/0x100
[  895.345628][    C1]  ? sched_clock_cpu+0x6e/0x260
[  895.345648][    C1]  ? lapic_next_event+0x5b/0x70
[  895.345686][    C1]  ? exit_to_user_mode_loop+0x3b/0x110
[  895.345712][    C1]  exit_to_user_mode_loop+0x70/0x110
[  895.345737][    C1]  exit_to_user_mode_prepare+0xee/0x180
[  895.345763][    C1]  syscall_exit_to_user_mode+0x16/0x40
[  895.345784][    C1]  do_syscall_64+0x58/0xa0
[  895.345800][    C1]  ? clear_bhb_loop+0x60/0xb0
[  895.345816][    C1]  ? clear_bhb_loop+0x60/0xb0
[  895.345839][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  895.345865][    C1] RIP: 0033:0x7f5accb9e159
[  895.345878][    C1] Code: Unable to access opcode bytes at 0x7f5accb9e12f.
[  895.345922][    C1] RSP: 002b:00007f5acadf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  895.345939][    C1] RAX: fffffffffffffe00 RBX: 00007f5acce26098 RCX: 00007f5accb9e159
[  895.345951][    C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5acce26098
[  895.345961][    C1] RBP: 00007f5acce26090 R08: 0000000000000000 R09: 0000000000000000
[  895.345971][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  895.345981][    C1] R13: 00007f5acce26128 R14: 00007ffc684db8c0 R15: 00007ffc684db9a8
[  895.345999][    C1]  </TASK>
[  895.404027][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  895.404069][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0
[  895.404123][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  895.404155][   T28] Call Trace:
[  895.404176][   T28]  <TASK>
[  895.404197][   T28]  dump_stack_lvl+0x188/0x24e
[  895.404273][   T28]  ? memcpy+0x3c/0x60
[  895.404359][   T28]  ? show_regs_print_info+0x12/0x12
[  895.404430][   T28]  ? load_image+0x410/0x410
[  895.404535][   T28]  panic+0x2d3/0x710
[  895.404599][   T28]  ? schedule_preempt_disabled+0x20/0x20
[  895.404673][   T28]  ? bpf_jit_dump+0xd0/0xd0
[  895.404746][   T28]  ? __irq_work_queue_local+0x12c/0x190
[  895.404841][   T28]  ? nmi_trigger_cpumask_backtrace+0x35b/0x450
[  895.404907][   T28]  ? nmi_trigger_cpumask_backtrace+0x360/0x450
[  895.404980][   T28]  watchdog+0xf4d/0xf50
[  895.405047][   T28]  ? watchdog+0x1ed/0xf50
[  895.405123][   T28]  kthread+0x29d/0x330
[  895.405174][   T28]  ? hungtask_pm_notify+0x40/0x40
[  895.405240][   T28]  ? kthread_blkcg+0xd0/0xd0
[  895.405293][   T28]  ret_from_fork+0x1f/0x30
[  895.405402][   T28]  </TASK>
[  895.408350][   T28] Kernel Offset: disabled
[  895.932218][   T28] Rebooting in 86400 seconds..