last executing test programs:

16.061400706s ago: executing program 3 (id=5849):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f00000001c0), 0x7}, 0x100820, 0x6, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00')
r2 = socket$kcm(0xa, 0x5, 0x0)
recvmsg$kcm(r2, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000004040)=[{&(0x7f0000001080)=""/147, 0x93}, {0x0}], 0x2}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x3)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f00000011c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r3, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x5, 0xe, 0x0, &(0x7f0000000200)="259a53f2719efb234644b972a5d2", 0x0, 0xf0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="02000000000000000000000000000d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000013001300ef0500000700002000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001f40), 0x2248, r6}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x300)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r5, <r11=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x28, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x2, 0x1, 0x0, r5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x3, 0x1, 0x0, r5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xfffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x96c, 0x0, 0x0, 0x0, 0x40}, @map_fd={0x18, 0xb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000800)='GPL\x00', 0x7, 0x70, &(0x7f0000000940)=""/112, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x25, 0x4, 0xfffffffd, 0xf}, 0x10, 0xffffffffffffffff, r7, 0x6, &(0x7f0000000b00)=[r11, r5], &(0x7f0000000b40)=[{0x5, 0x1, 0x8, 0x3}, {0x0, 0x1, 0x2}, {0x3, 0x3, 0xf, 0xa}, {0x0, 0x4, 0x8}, {0x3, 0x1, 0x9, 0x4}, {0x3, 0x2, 0xb, 0x1}], 0x10, 0xf66}, 0x94)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4)
ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000280)=r4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000008000000000000000704400069117e00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.841360982s ago: executing program 3 (id=5855):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbefda", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xfa, 0x97, &(0x7f00000002c0)=""/151, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x2, 0x7}, 0x10, 0x19884, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[0x1, 0x1], &(0x7f0000000440)=[{0x3, 0x1, 0x9, 0x7}, {0x3, 0x1, 0xc, 0x5}, {0x3, 0x4, 0x6, 0x9}, {0x1, 0x3, 0x0, 0x7}], 0x10, 0x3}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r0, r1})
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000140081044e81f782db44b904021f080211000000040000a118000200e014000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbefda", 0xd9}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xfa, 0x97, &(0x7f00000002c0)=""/151, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0x2, 0x7}, 0x10, 0x19884, 0xffffffffffffffff, 0x4, &(0x7f0000000400)=[0x1, 0x1], &(0x7f0000000440)=[{0x3, 0x1, 0x9, 0x7}, {0x3, 0x1, 0xc, 0x5}, {0x3, 0x4, 0x6, 0x9}, {0x1, 0x3, 0x0, 0x7}], 0x10, 0x3}, 0x94) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r0, r1}) (async)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async)

14.537280709s ago: executing program 3 (id=5859):
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10000)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)="d80000004a0081064e007c05e8fe55a10a000404018b2d5ed48e9a4002020a600e41b0000900ac00060311000000160015000a87572a6ea28959b561c1d67f6f94007125cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370ed7dbe56192bb940450a721eabe30259703920723f9000000008af26c8b7b55f4", 0xd8}], 0x1}, 0x0)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x2b, 0x800, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x10})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080))
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00002000000000000000000000000000582dc89446dc9b8930bb836521c918b900000000bb827702602f8cddf12d28ede40f7269be06aa3c07bdb0b63cc9dc1d7b877605d6e1db1f6d1e6f716ee69ff9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r5, @ANYBLOB='\x00'/27], 0x50)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r6, &(0x7f0000000200)="ba"}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xf00, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0)
socketpair(0x1a, 0x4, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
socket$kcm(0xa, 0x5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x34, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0]}, 0x40)
socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
close(r8)

11.335890608s ago: executing program 3 (id=5863):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d030000002f6e35400c000200001ec00037153e370a00018025640000d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x12, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc)
setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f00000002c0), 0x1)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x894b, &(0x7f0000000d00)={r2, r6})
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x5, &(0x7f0000000180), 0x43)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r9)
ioctl$TUNSETIFF(r9, 0x400454ca, 0x0)
sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000880)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000640), 0x0, 0x79, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x8, 0xdc, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r8, @ANYBLOB="8300"/18, @ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="00000000816f98a8a3652b5118140000100001000000000000000000"], 0x50)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x1d, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf}, [@call={0x85, 0x0, 0x0, 0xa3}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ldst={0x1, 0x0, 0x4, 0x4, 0xb, 0x4, 0x10}, @jmp={0x5, 0x0, 0x7, 0x0, 0xa, 0xffffffffffffffff}]}, &(0x7f0000000380)='syzkaller\x00', 0xfff, 0x38, &(0x7f00000003c0)=""/56, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x8, 0x4, 0xf}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000004c0)=[{0x2, 0x4, 0xe, 0xc}, {0x0, 0x5, 0x0, 0xb}, {0x4, 0x5, 0xe, 0x4}, {0x4, 0x1, 0x1, 0xa}], 0x10, 0xfffffffe}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r10, @ANYRES32=r6, @ANYBLOB='\t\x00\x00\x00\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="4c6f973c82fc8389a8df70f2ef425d0179df96b76ef44b72ca", @ANYRES64=0x0], 0x20)
syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0)

10.77352041s ago: executing program 3 (id=5868):
r0 = socket$kcm(0x10, 0xb, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000bc0)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1080001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c851dc0c1cd706ff2f41398d8e7429039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x4)
r1 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r0})

10.461179376s ago: executing program 3 (id=5873):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x2a}, 0x28)
bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[], 0x48)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="3c00000033000b12d25a80648c2594f90124fc60100c03400400000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a4479b406db26a57b351c6686", 0x3f}], 0x1}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], 0x0, 0x5}, 0x94)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1f}, 0x107412, 0x0, 0x0, 0x3d603c7d87ed2789, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe4, 0xfd, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0xf}, 0x101019, 0x9, 0x8, 0x0, 0x4000002}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

8.233232334s ago: executing program 1 (id=5886):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0}, 0x4008804)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0x0, 0xffffff7f}, 0x5a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x3, 0x4, 0x4}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f00000001c0), &(0x7f00000005c0)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f0000000140)={{r2}, &(0x7f0000000040), &(0x7f00000000c0)='%-010d \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x13, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec0ebf6abeef", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x2d, 0x0, 0x2}]})

7.184858686s ago: executing program 1 (id=5890):
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c21000000000020", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000000, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unlink(&(0x7f00000000c0)='./file0\x00')
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r0}, 0x18)

6.939915992s ago: executing program 1 (id=5893):
perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2942, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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"/376], 0x178}, 0x4000004)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, 0x0, 0x600)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r7}, 0x38)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup(r8, 0x0, 0x200002, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0xda, 0x6f, &(0x7f0000000500)="e1e5a4092592a5b237312dbe6d8c820955c08cbac474f8bc1463f16d45b7fe625ba17c18ccdc2868a51d048321e72931feb4fa13e76e38bd6b62cf49a1144f8cc1b1689caa75f7e48a289b57b4aadd9ec104735dc0b6fe89e21b0a7b7917e718318604efe8c4273c52e735dfb72f5484b60a1382282b9edd05a8088f0aadaf187d7f6b1ab46a0f66b33212057a4b4e42cba8c09aca62f71ef392e5ecc40a10cbba25c3d77f9a1fc48e1f05cd08150e8eefef39bd5d7f139329e44b34362325497591509ba59da765a869747da333908bf663f99f24c245d00a36", &(0x7f0000000600)=""/111, 0x2255, 0x0, 0xfa, 0xa3, &(0x7f0000000680)="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", &(0x7f00000008c0)="0c314d27d8696599fdfb76e866eedded52900bfd3f0b954f3d2307a69eaea72940bf5563a755c99dc881dee24b1e64b26f6f7727db54a648f225895352b2876654378da38b503fb88973409e0930429f52053d4db1d139f2696b68c6d5fd3071117c60f2ec4b5b9c6dc11113360345bc6592263bd2179faf68f8dff0ed4372179a22c51350e40f303a868114147a6f068b969316f21daa511fa5df2f1b6dc442556b44", 0x0, 0x0, 0x9}, 0x50)
write$cgroup_devices(r1, 0x0, 0xffdd)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

6.389733754s ago: executing program 1 (id=5897):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000000)="1c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8c0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xe}, 0x421, 0x0, 0x0, 0x4, 0x0, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000a500"/23, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000540)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x10}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0xd, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
gettid()

6.221770878s ago: executing program 2 (id=5898):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b35d25a806f8c6394f90524fc602f0009000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @func={0x8}, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)
ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0)

5.873249214s ago: executing program 0 (id=5900):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="010000000800000003000000faffffff28800000", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000f90300"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) (async, rerun: 64)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) (rerun: 64)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x8, 0x0, r0, 0x1, '\x00', r2, r3, 0x1, 0x2, 0x1}, 0x50) (async, rerun: 32)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) (rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) (async)
r4 = socket$kcm(0x10, 0x2, 0x10) (async)
r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x18, 0x800, 0x3, &(0x7f0000000580)) (async)
socketpair(0x23, 0x3, 0x100000, &(0x7f0000000680)) (async)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3) (rerun: 32)
recvmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/77, 0x4d}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f0000000680)=""/267, 0x10b}, {&(0x7f0000000240)=""/243, 0xf3}, {&(0x7f0000000440)=""/240, 0xf0}, {&(0x7f0000000540)=""/58, 0x3a}], 0x7}, 0x122) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="b7be16df06984e", 0x7}], 0x1, 0x0, 0x3c0}, 0x94) (async, rerun: 64)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='N-N:N/'], 0x6a) (async, rerun: 32)
r9 = getpid() (rerun: 32)
r10 = perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000, 0x0, 0x9, 0x0, 0x401}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r6) (async, rerun: 32)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000200)={0x3, 0x80, 0x3, 0x6, 0x5, 0x1, 0x0, 0x8, 0x60810, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x6}, 0x101800, 0x2, 0xa4, 0x7, 0x6, 0x6, 0xff81, 0x0, 0x3, 0x0, 0x3b}) (rerun: 32)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) (async, rerun: 64)
r11 = socket$kcm(0xa, 0x5, 0x0) (rerun: 64)
ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000000)) (async, rerun: 32)
socket$kcm(0x10, 0x2, 0x10) (rerun: 32)

5.764556967s ago: executing program 0 (id=5901):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x10, 0x4, 0x4, 0x12, 0x4}, 0x50)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x1})
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x9)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a7401", 0x1b}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003f000b12d25a80648c2594f90124fc60020c024002000a00053582c137153e370248078000f01705d1bd", 0x33fe0}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000a00)=""/210, 0xd2}, {&(0x7f00000008c0)=""/261, 0x105}, {&(0x7f0000003140)=""/4038, 0xfc6}, {&(0x7f00000014c0)=""/260, 0x104}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000e80)=""/251, 0xfb}, {&(0x7f0000000bc0)=""/76, 0x4c}, {&(0x7f00000006c0)=""/169, 0xa9}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000000)=""/62, 0x3e}, {&(0x7f00000016c0)=""/224, 0xe0}, {&(0x7f0000000b00)=""/170, 0xaa}, {&(0x7f0000000d00)=""/242, 0xf2}], 0xf}, 0x0)

5.742774428s ago: executing program 4 (id=5902):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x1, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00')
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8918, &(0x7f0000000000)={'ip_vti0\x00', @random="02000300"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b", 0x7}], 0x1}, 0x0)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="110000005a"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002880)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008f7200000000000005060000000000000000000000000000000000000f1b060000000000185b0000030000000000000000000000184b0000faffffff0000000000000000186000000600000000000000040000001852000004000000000000000000000041b018000e0000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1000, &(0x7f0000001600)=""/4096, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002840)=[{0x1, 0x2, 0x2, 0xb}], 0x10, 0x80000001}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000001540)=""/155}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800})
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156, 0x0, 0x5}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r6, &(0x7f0000000300), 0x0}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r5, 0x8, 0x0, 0x70c, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
r9 = openat$cgroup(r5, &(0x7f0000000680)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000006c0)={0x361, <r10=>0x0}, 0x8)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="1000"/12, @ANYRES32=r10, @ANYRES64=r8], 0x20)
r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x401, 0x8}, 0xc)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r11, @ANYRES32=r4, @ANYBLOB="1c0080a2830000d42d87f6e2", @ANYRES32=r4, @ANYBLOB, @ANYRES64=r8], 0x20)

5.677205159s ago: executing program 2 (id=5903):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
sendmsg$sock(r0, &(0x7f0000000f80)={&(0x7f0000000b40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000c40)="552e5de1b7cd3139a42603acf28babfe8cf883f1d775ffb89146a47402c4436a5ba7299dd234fe76b7a8564b8e4e6f35058f66bfd0bba6b1e0b1b6f80d002f0e0bd5d7b1234188b2b27c20029ff5fc5f28135784", 0x54}, {&(0x7f0000000cc0)="eaed67dffa40e4f1cd14438dff80d7eb24a9876df4303689fab63b79de591303b01eb2a67db966a1c002de65a8c6af854e5cf247da2e8f6469ca4638f6665582c85a9c2aa38b476e0eb23f5296b9accf9e", 0x51}, {&(0x7f0000000d40)="6d23293e7076b59a2e9a48cb4aa4db07bcc2b46698ef7aa23b96c35fc036ec308c48812fdf31cabe9b1cb0b6332357547adaaadcdbfffe45becbbc3456ebaebf796948f6fcc8f0c19cd7cae65d536635c81cc3458c8150c6777e635046e3075b895c23f18acf05eba4f8ebd67fbdb6153017ffd1faf8bb82bcd50bb4595f52b44515c4f66f09e87b4d9af9e0ae0fff667a34e4438f16e332813aac4bd68e59d52d29da8de4994b08d6fe44e56ce5b5a622d2ea9dee3cf96c9bc2ea17", 0xbc}, {&(0x7f0000000e00)="b8a19da316abe076c58569296766b8830c7a5db51a17fff26c8f3ca2ca6883dddfe7e8b1ef45e685601ba91d0ec236a1a2b6ccf1fe97c551854c2c9c5fff4075daa654be641ca0fe1c84d2c8415a4e5e69517dcc83c1ea2a64ad4b08e137d5c2db6cd217ad8763271ce73d948f526625f75e02ddeff47029ba47470d9bc188aab5a9fa70d3b0b9c9e002673ffb551c28846860c6a92eccbec047091cff555527f3a8fa24f5801f1d9b4e0599cf3a173dae113ad1f0fc4506cfe68c79595118395f800163baf3cbf5c1b8da66c74bce4a58bd75b3d1e61d3b59717136e5994289475007e0d4145592f5767889d647fae3f3d494172fe312f6", 0xf8}], 0x4, &(0x7f0000000f40)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x30}, 0x400)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x2e, 0xfffffbff, 0x3, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x0, 0x8}, 0x0, 0x2e, 0xfffffbff, 0x3, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xa5, 0x7, 0x0, 0x0, 0x80000401, 0x18402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x9}, 0x11362, 0x800000000006, 0x40000, 0x6, 0xfffffffffffffffd, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xf, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x0) (async)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x5b}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x3, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x44}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000580)=@isdn={0x22, 0x9, 0x7, 0x99, 0xc}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000600)="026282a0a54867294be33ae0bfc3168330b02ea08b875b534039bdef860a9db9e0", 0x21}, {&(0x7f0000000640)="0c1ab4e3e967e001683f9af795fab2a4a5af1514fcbc6b", 0x17}, {&(0x7f0000000840)="525bb8ff2aaa00e54285461b5fb9018b6a09bd9a71236a835191ffa1eb2362efd45c80a7fe76cdd6d76f91d51c2cf2ee78886b73cdd7ef262a962af6314e805713147dc938cac15e056f6d0fe835413390bc3f0f9f4b3bd2a4ca026032a1cb7d6a64bf036552b5cdb1b6dcbbfe313f0a8e44dc74c1c58616c52f", 0x7a}], 0x3, &(0x7f0000000980)=[{0xd8, 0x108, 0x47, "66ada14ed5d8b8e1927f00fb6c1f59f7b90b3734c2248a9b7ab0bd471634094d8311ef2c6a0d454ffa2f8938e4333f5aa7c06ea0a1c2312c9e8dd424fc26acb09948bd24e956f520e1dea21b7bdb902fdd78247730cc8db58a4032ff4c21a3e432032a01cf4ba8f1dcd059443e93f6fbfd0a51c1a26231b9126282f86aa88f7b93da850d6884e38d043c30155e49b665d2be2c406bf788a4268382b600575f3ce745b06ef2c26f325c873f1436350a7d771a3e7cb1331dae924cdc313b0e948ab0"}, {0x80, 0x111, 0x48a, "986b8a1dff651555f821ca37a24502fdcbf2a6ee0a2d75946ec590f7f088acf1eb0b54875e557f9629d4dec9e2bda9743f20c63cd5a8e65c6138d0f6d0866d45356ef7d48d733208323b929b4a888d1b6bead05aa6b6b175cd0bba36c9fbe8816d7a997ca96ad14cba22d0fc05"}], 0x158}, 0x20008000)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) (async)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4)

5.598100991s ago: executing program 1 (id=5905):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000edffffff6117d00000000000a6070000a1000022950000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=@base={0x12, 0x2, 0x8, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018000000000000000000000000000000950000002304f866"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xe1, &(0x7f0000000240)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe66}, 0x22)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f00000002c0)="d206bfdb1ff384c22a9a0e0d9d22bee7998c2f942092b0b9720aec381b55b355a09146be22deffafbfb3218fb9137c4fa9007d6085f72f868ea6034d12293f1aa27a6720db3e", &(0x7f0000000000), 0x2}, 0x20)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff21000097ff00000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) (async)
r4 = socket$kcm(0x10, 0x2, 0x0) (async)
r5 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) (async)
recvmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000dc0)=""/232, 0xe8}], 0x1, &(0x7f0000000080)=""/9, 0x9}, 0x40000010) (async)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@ifindex, 0x1, 0x1, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001400)={r2, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"/277], &(0x7f0000000740)=""/5, 0x115, 0x5, 0x1, 0x3}, 0x28) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={&(0x7f0000001840)}, 0x0, 0x0, 0x3fe4, 0x6, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111040000000000731a0eff00000000950000f7ff000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x23}, 0x22) (async)
setsockopt$sock_attach_bpf(r9, 0x1, 0x22, &(0x7f0000000080), 0x4) (async)
sendmsg(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f00000001c0)='2', 0x1}], 0x1, &(0x7f00000014c0)=[{0x80, 0x101, 0x2, "f25ce86e6e6b0cdf374ab80734eb352ce06b23a50f76bc87379144a0d73ad766e2d2e63f725ea7cca89d09f411728a186b3e2a1dd541ac277667f38098f63d6e71d483c04ae1497bdca3cea55c7851befb62eabb858f7b5c7cffc9d17cad618180d1716e284e4766ac7b"}, {0xa8, 0x104, 0x7, "5d4dc6d22da60461321e995071995afdb51fd32e42846d957b9298a3182a36c09d8f97f3a45204fdcda0d5b06cc7168f70d79237a50236c1dbb9314ed154b189f602b51356588d43cf681a17e88e7c936e11824e879b0e9f99d1423b6d5d5e7de46cb99cd56b7f14e6a02d38755fb7f71502bc0c6d4fb24be9c48b5ca5eabd5dd4ffc35d15c34ac725dbbca26486904a5f4f"}, {0x108, 0x10b, 0x1000, "9f5031abf33806e510b436beada6066d77eee28cf81a13f9cffdabbb0b178f6a8a7ba3ba6b8e32805fca0029f50748296cba9e7583a143fe87c943734f4873e830bc1da1993c9f60748262d148cd23a0b3b517003b7c8e634d6d47ef10c77fb0831a04727d0c451db4004a8bc68256143599e3c04ccb00d324f38b06dad5618d0b4a09d88b8971b277d27772059b7a6518c1139355b426ece0d7976ec00a414d5bcb9e5e7183aecd23b436762e2802e288703c21405553bb8ad7b486be7fb101811c68395ff72c5b1aff1dbc5ebb63d456ccfd03657b61098a9a43e30d66ce80d40940e6c38a90dafa9afd399b7965cd54"}, {0x68, 0x10c, 0x9, "7875b85f5691c4cd65f4fd4478a791bc7413cc4d31c0d3dfdeca933c515b1d54e01f4b251a3b04ad3cecdb2e2d458c39ea67423db3918872392d48d095ae7f0f3022b1087b66e6fabe0b5897eb33c43e24de41a4"}, {0x80, 0x88, 0x3ff, "97fe28384746c22cd387730dd30324a81e56f29a65eff678ab3e25aa4e11c673d5a332c080320bdb90e7c332f354bdeac8754ba9e54d552b5253672d3f58d34ac93100fe64219e518eefd2b4f0be5d85f9f041dcb3bc841ae6c41dfeee1637614d3af8549d74e6bd02f46efb581d"}], 0x318}, 0x0) (async)
recvmsg(r9, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x8, 0x0, 0x0, 0x100, 0x0, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000007c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000800)=[{0x4, 0x5, 0x5, 0x2}, {0x5, 0x1, 0x5, 0x4}, {0x2, 0x3, 0xd, 0xc}, {0x3, 0x4, 0x4, 0x8}, {0x1, 0x2, 0x4, 0x5}], 0x10, 0x8}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73", 0x2e}], 0x1}, 0x20048020)

5.433263424s ago: executing program 2 (id=5906):
syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/uts\x00')
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
r1 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0)
r2 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98)
setsockopt$sock_attach_bpf(r1, 0x0, 0x24, 0x0, 0x25)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffc}, 0x50) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x2, 0xfffffffc}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x11, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc)
syz_open_procfs$namespace(0x0, &(0x7f0000001640)='ns/uts\x00')

5.341258266s ago: executing program 1 (id=5907):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x1c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703800008000000b70400000000000085000000030000009500000000000000a9a2f7a04891ac1c680dfd6528a82aafd7d9f7ad75bbfd75f155b7af77f79c86111088a6f5a3981d19b2166f9c390a46ec4ff4d627036e6d7b44924525dfc6e902b423360f35a45e5faadb962991fcea31ef1d24671c2d6113"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000000)=""/40, 0x28, <r4=>0x0, 0x0}}, 0x10)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={0x0}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xa, 0x11, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback=0x1f, r3, 0x8, &(0x7f0000000780)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x10, 0x2, 0x9}, 0x10, r4, 0xffffffffffffffff, 0x6, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r5, r6, 0xffffffffffffffff, 0x1, r7], &(0x7f0000000c40)=[{0x2, 0x5, 0x3, 0x6}, {0x4, 0x2, 0x3, 0xa}, {0x1, 0x4, 0x3, 0x9}, {0x3, 0x3, 0x6, 0x4}, {0x0, 0x4, 0xd, 0x1}, {0x3, 0x5, 0x6, 0x8}], 0x10, 0x4}, 0x94)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x1}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r8, 0x84, 0x7, &(0x7f00000007c0), 0x4)
r9 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x13, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_freezer_state(r10, &(0x7f0000000140), 0x2, 0x0)
r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r12 = openat$cgroup_procs(r10, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r12, &(0x7f0000000300)=r11, 0x12)
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xe, 0x8, 0xd, 0x3, 0x0, 0x0, 0x80004, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0x6, 0x6}, 0x188a8, 0x2, 0x80, 0x7, 0x2, 0x4, 0x81, 0x0, 0x7, 0x0, 0x6d}, r11, 0xa, r9, 0x1)

5.340982596s ago: executing program 4 (id=5908):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xd2bc}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r2, r3, 0x5}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48)
perf_event_open(&(0x7f0000001000)={0x5, 0x80, 0x5, 0x2, 0x5, 0x61, 0x0, 0x7ff, 0x180, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xb, 0x1, @perf_config_ext={0x8001, 0x881}, 0x40, 0x80, 0x0, 0x8, 0x80000000, 0xe35, 0x7f, 0x0, 0xf2000000, 0x0, 0x56f6}, 0x0, 0x10, r0, 0x0)

5.193359599s ago: executing program 2 (id=5909):
perf_event_open(&(0x7f0000000380)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x10}, 0x0, 0xc8, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2942, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="e00000000000000015010000090000003b4e64be995839d4c1991da1b2b35a7f976e11e258a3a1d6a8960eb6fdae642a2a94b06576cbedb410014498f0ed3675d63b540cc13532d45221470de4215a2ff6c3aeff7903a840ec0261dfbb669eb0e00295757ecb7080fd2363e092d2144e996f24dbf47ae99cf6177f7dfb17fe9582f3cb3ab7954f76b073ff48466a299736b16a3f6d9592ea9d655ed94ebb73b8253f299f2b6cf00ff6d6eaa79cfb5b706c90e36de4a22ff49d08bf636f02ab4f3dd3d4c06a80c83a3308f546638994ddbf833cb51376ce1898000000000000000d01000001000000f176c4155bf7e8aa3cc857f43f394a4e155e16d22164a10b51edb0fe3afe46399109937fb2b4a39a206b3ce03b34c4cc2b54e1ad3ab8f47f80544ac3a21a7479464fcc3b43e83ee044b41adbc22517ca4056d80553aa4982e3305718445b1a2e0d326a7085757cc15d0b2821bf344d74ad40c66f8747de64be5d503735f9416782ad00004b00"/376], 0x178}, 0x4000004)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r5, 0x0, 0x600)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r6, 0x84, 0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r7}, 0x38)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup(r8, 0x0, 0x200002, 0x0)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, 0x0, 0x0)
close(0x3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r3, 0x0, 0xda, 0x6f, &(0x7f0000000500)="e1e5a4092592a5b237312dbe6d8c820955c08cbac474f8bc1463f16d45b7fe625ba17c18ccdc2868a51d048321e72931feb4fa13e76e38bd6b62cf49a1144f8cc1b1689caa75f7e48a289b57b4aadd9ec104735dc0b6fe89e21b0a7b7917e718318604efe8c4273c52e735dfb72f5484b60a1382282b9edd05a8088f0aadaf187d7f6b1ab46a0f66b33212057a4b4e42cba8c09aca62f71ef392e5ecc40a10cbba25c3d77f9a1fc48e1f05cd08150e8eefef39bd5d7f139329e44b34362325497591509ba59da765a869747da333908bf663f99f24c245d00a36", &(0x7f0000000600)=""/111, 0x2255, 0x0, 0xfa, 0xa3, &(0x7f0000000680)="6620200ee79abf3d77d5db14dfab7e63a91a0bd96d6443b12b4831832e8f220bd0d0a43ef913d99515027f7bff8b64b12068c11c28972849b6580a1a864abdad5a4851b3da3a2a5bcafcb2d7c3d8be44a0a1f72d9e323c183ff7f85baa8c5fc3c972c027591efe0a49394c85f56f8ee12225a2a3b77c2c5388bfab9293da7fb301af649a2043838e9e55f8652d039e4372c11d03f995faea29f297e9f8a532d3b43b9384229d627ee9baff1108be6fc79ab15bc1ef523db0bdeccb494fd3ebd533caeea1e4c488448f3c963e2df22c8a439af1b2afef77087c56208dc394c14df83c0b96a7cbcb52064f5f4d3d633f4de3c10888e09c7ee1790e", &(0x7f00000008c0)="0c314d27d8696599fdfb76e866eedded52900bfd3f0b954f3d2307a69eaea72940bf5563a755c99dc881dee24b1e64b26f6f7727db54a648f225895352b2876654378da38b503fb88973409e0930429f52053d4db1d139f2696b68c6d5fd3071117c60f2ec4b5b9c6dc11113360345bc6592263bd2179faf68f8dff0ed4372179a22c51350e40f303a868114147a6f068b969316f21daa511fa5df2f1b6dc442556b44", 0x0, 0x0, 0x9}, 0x50)
write$cgroup_devices(r1, 0x0, 0xffdd)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94)
r10 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

5.134004521s ago: executing program 4 (id=5910):
socket$kcm(0x2, 0x3, 0x106)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x2)
perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc9, 0x1}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffc6e8, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x53}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0xa, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x6de, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x32, 0x5}, 0x2019, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x2, 0x1, 0x84)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
socket$kcm(0x23, 0x2, 0x0)

4.833249997s ago: executing program 0 (id=5911):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x200000007ff}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRESDEC, @ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
mkdir(0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x82d7)
openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0)
socket$kcm(0x21, 0x2, 0x2)
socket$kcm(0x29, 0x0, 0x0)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x4, 0x0, 0x8}, 0x0, 0x7ffffffffffffc, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r4, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714"], 0x18}, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
setsockopt$sock_attach_bpf(r5, 0x29, 0x8, &(0x7f0000000100), 0x120)

1.844753291s ago: executing program 0 (id=5912):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1001a8, 0x0, 0x0, 0x4, 0x0, 0xffff0000, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x41, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000300)=0x900, &(0x7f0000000340)}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x2)
r4 = socket$kcm(0x11, 0x2, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000100)=0x800)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000500)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e88368002c0001000002000000000000080005007a010401a80016002000034004020000035c0461c9d67f4f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2fe547dc84e838d60d871355bc9aaaf02b6a24865233018053e44bdf0e1555b1fd796573deefe439c5e0c780a2580fab2d48a2eb84a0134f9c6953c734df45c1e7f8b41163118bcd6110e3580f47b959d5f2a2d4485d03c6765589e078e68722e43dfa90dd246f394e266763696a", 0xd8}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000880)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x1d, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
socket$kcm(0x29, 0x2, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000017c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r6, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x10, '\x00', r6, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0x9}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001100)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1.766962913s ago: executing program 2 (id=5913):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
r0 = socket$kcm(0x2, 0x1, 0x84)
r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x6, 0x9}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffec, 0x0, &(0x7f00000008c0)="89", 0x0, 0xf, 0x0, 0x2}, 0x32)
close(r4)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff00000000711071000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94)

1.633440626s ago: executing program 4 (id=5914):
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xdae9}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0xc000)
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33)

1.053985288s ago: executing program 4 (id=5915):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f0000", 0x17}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000000)="1c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8c0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x0, 0xb, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0xe}, 0x421, 0x0, 0x0, 0x4, 0x0, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000a500"/23, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000200)=ANY=[@ANYRES32=r2], &(0x7f0000000540)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x10}, 0x94)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$kcm(0xa, 0x1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0xd, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
gettid()

806.187393ms ago: executing program 2 (id=5916):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000800), &(0x7f00000006c0)=""/194}, 0x20)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4)
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%pK    \x00'}, 0x20)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x22, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @jmp={0x5, 0x1, 0x3, 0x6, 0x9, 0x6}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1a, r4, 0x8, &(0x7f0000000980)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x1, 0xf}, 0x10, 0x1ff5c, r2, 0x0, &(0x7f0000000b00)=[r5, r0, r0, r0, r0, 0x1, r0, r6], 0x0, 0x10, 0x9}, 0x94)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r3], 0xfe33)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r9)
socket$kcm(0x2b, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001840)="ad86a145498148c6d24a4b31a13ab223e49d32e20ea07f46ef06c9cfeaa442c41dfd76717df583363a6476a2d5ff653e7ac5bce54179dfda47afbe8cda4723db2504bbe33d417678405a7d2ca37f0b77a8c5962aa92f76d2d524debc4874e60bd1b13601450caded33e34d2d93d7f458febb4c4af17b6f4e34c866a41e86418e0f8b6f1f5e75aa4372dd44760e3c1e2508162e0f690c42", &(0x7f0000001900)="39ee1d0430207fcc52f59a93c35d94678d11249600b9f43509ae93aa19c81715675f7528489d448b564855b87c31eac37053c27ae338fb6f552e823f97cedf5c49258c449c1ac8824ec4314bd4f1c3a3cfab7ccc92824d79afd4dd458bfb3c8ad107dff970a942ad86f79a456d56baf2704de7d7823e6b6683ff85c62763", 0x1ff, r0, 0x4}, 0x38)
socket$kcm(0x29, 0x7, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8)
close(r11)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28)

397.274052ms ago: executing program 0 (id=5917):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x20}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080))

62.095419ms ago: executing program 4 (id=5918):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = gettid()
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x5c, 0x40, 0x8, 0x0, 0x5, 0x420, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f00000000c0), 0x7}, 0xb00, 0xfffffffffffffff8, 0x7, 0x5, 0x1, 0x3, 0xf4, 0x0, 0x6a, 0x0, 0x200}, r1, 0xc, r0, 0x8)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10800a, 0x6f5f, 0x8000, 0x0, 0x0, 0x1001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020039000b05d25a806f8c6394f90324fc602f00000008000100feff000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 0 (id=5919):
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000009500"/17, @ANYBLOB="a5db807f760481ed4bf97b79d606ca6d1493926bbe666c173eb0703ffa2e47a45fe7287da9ae9954a5e0886b6fedbf29a712ded1662af3ea3332527c0bc5cd235c8ace048ad64fb32ab27156c9f2d992a45e979dfee34a401d4fdf388598a8ad8b44599045185d633ed84eb1b35322f4982d21d3086748f724e34daccc8fe75baa742b8b249e98cfee011d14837f9289083cc4d8b084dd95034f0b7a0ab13fcdc92e1036a0a4fb8545a4fdb79c8f9fd64a7ed0e46e61ebe7163058454623d2040ef1677f460c013500b0d097ec7272bfb51f20410c6a0823323fdf", @ANYRESOCT=r0, @ANYBLOB="ac8bde28dfbfc97b83a56b05ac9103c7d77dfdbb63b7e4b5a4186410321dd0fa7fb94ee20775af9db6dc38a4c4250bcd07925c0a0a308d5723790e"], 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94)
sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)}], 0x1}, 0x24000000)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d525146add31b7bc77c26d8982be29d889d1e35355848794ca3f8b38aef1e114ab9fbebe9c6609e64b1", 0x7b}], 0x1}, 0x40840)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0xffffffff, r2}, 0x38)
r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x9}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x2, 0x200000000000003, 0x106)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

17903]  __se_sys_sendmsg+0x1c3/0x2b0
[  734.965647][T17903]  ? __x64_sys_sendmsg+0x80/0x80
[  734.970632][T17903]  ? lockdep_hardirqs_on+0x94/0x140
[  734.975844][T17903]  do_syscall_64+0x4c/0xa0
[  734.980287][T17903]  ? clear_bhb_loop+0x60/0xb0
[  734.984968][T17903]  ? clear_bhb_loop+0x60/0xb0
[  734.989654][T17903]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  734.995551][T17903] RIP: 0033:0x7f79b019de99
[  734.999977][T17903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  735.019591][T17903] RSP: 002b:00007f79b112d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  735.028013][T17903] RAX: ffffffffffffffda RBX: 00007f79b0425fa0 RCX: 00007f79b019de99
[  735.035988][T17903] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  735.043960][T17903] RBP: 00007f79b112d090 R08: 0000000000000000 R09: 0000000000000000
[  735.051933][T17903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  735.059903][T17903] R13: 00007f79b0426038 R14: 00007f79b0425fa0 R15: 00007ffdb86128e8
[  735.067917][T17903]  </TASK>
[  735.178962][T17911] netlink: 'syz.2.3712': attribute type 21 has an invalid length.
[  735.204879][T17911] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3712'.
[  735.287991][T17913] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3713'.
[  735.357062][T17911] netlink: 'syz.2.3712': attribute type 2 has an invalid length.
[  735.408900][T17911] netlink: 197536 bytes leftover after parsing attributes in process `syz.2.3712'.
[  737.644139][T17938] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3721'.
[  737.701717][T17938] bridge: RTM_NEWNEIGH with invalid state 0x1
[  737.718699][T17941] netlink: 'syz.4.3723': attribute type 2 has an invalid length.
[  737.809422][T17946] netlink: 'syz.3.3725': attribute type 2 has an invalid length.
[  737.827089][T17946] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3725'.
[  738.394171][T17977] netlink: 'syz.3.3734': attribute type 2 has an invalid length.
[  738.465226][T17981] netlink: 'syz.2.3735': attribute type 39 has an invalid length.
[  738.613468][T17994] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3739'.
[  738.637373][T17994] bridge: RTM_NEWNEIGH with invalid state 0x1
[  738.701263][T17992] bridge0: port 3(veth0_to_bond) entered blocking state
[  738.729683][T17999] FAULT_INJECTION: forcing a failure.
[  738.729683][T17999] name failslab, interval 1, probability 0, space 0, times 0
[  738.752355][T17992] bridge0: port 3(veth0_to_bond) entered disabled state
[  738.760337][T17999] CPU: 0 PID: 17999 Comm: syz.2.3741 Not tainted syzkaller #0
[  738.767834][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  738.777901][T17999] Call Trace:
[  738.781198][T17999]  <TASK>
[  738.784140][T17999]  dump_stack_lvl+0x188/0x24e
[  738.788841][T17999]  ? verify_lock_unused+0x140/0x140
[  738.793020][T17992] device veth0_to_bond entered promiscuous mode
[  738.794042][T17999]  ? show_regs_print_info+0x12/0x12
[  738.794087][T17999]  ? load_image+0x410/0x410
[  738.794119][T17999]  should_fail_ex+0x390/0x4c0
[  738.794148][T17999]  should_failslab+0x5/0x20
[  738.794170][T17999]  slab_pre_alloc_hook+0x59/0x300
[  738.794196][T17999]  kmem_cache_alloc+0x56/0x2f0
[  738.794213][T17999]  ? skb_clone+0x1e7/0x370
[  738.794241][T17999]  skb_clone+0x1e7/0x370
[  738.794266][T17999]  __netlink_deliver_tap+0x3e4/0x7e0
[  738.794301][T17999]  ? netlink_deliver_tap+0x2e/0x1b0
[  738.794325][T17999]  netlink_deliver_tap+0x19c/0x1b0
[  738.794348][T17999]  __netlink_sendskb+0x4b/0x90
[  738.794371][T17999]  netlink_dump+0x92e/0xcd0
[  738.794404][T17999]  ? netlink_lookup+0x200/0x200
[  738.794431][T17999]  ? memcpy+0x3c/0x60
[  738.794450][T17999]  ? genl_start+0x2d7/0x490
[  738.794479][T17999]  __netlink_dump_start+0x52c/0x6f0
[  738.794510][T17999]  genl_family_rcv_msg_dumpit+0x323/0x3c0
[  738.794538][T17999]  ? genl_rcv_msg+0x790/0x790
[  738.794558][T17999]  ? __lock_acquire+0x1465/0x7c40
[  738.794593][T17999]  ? genl_family_rcv_msg_doit+0x350/0x350
[  738.794616][T17999]  ? devlink_nl_cmd_rate_get_doit+0x1c0/0x1c0
[  738.794635][T17999]  ? genl_lock_done+0xd0/0xd0
[  738.794660][T17999]  ? memset+0x1e/0x40
[  738.819574][T17992] bridge0: port 3(veth0_to_bond) entered blocking state
[  738.819723][T17999]  ? genl_get_cmd+0x452/0x8b0
[  738.819758][T17999]  genl_rcv_msg+0x5c8/0x790
[  738.819793][T17999]  ? genl_bind+0x360/0x360
[  738.819814][T17999]  ? devlink_nl_cmd_port_set_doit+0x9f0/0x9f0
[  738.819836][T17999]  ? devlink_nl_cmd_rate_get_doit+0x1c0/0x1c0
[  738.819871][T17999]  netlink_rcv_skb+0x1ef/0x440
[  738.819894][T17999]  ? genl_bind+0x360/0x360
[  738.819918][T17999]  ? netlink_ack+0x1160/0x1160
[  738.819951][T17999]  ? down_read+0x1a8/0x2d0
[  738.819971][T17999]  genl_rcv+0x24/0x40
[  738.819992][T17999]  netlink_unicast+0x7ad/0x920
[  738.820025][T17999]  netlink_sendmsg+0x8ad/0xbd0
[  738.820056][T17999]  ? netlink_getsockopt+0x550/0x550
[  738.820081][T17999]  ? apparmor_socket_sendmsg+0x8a/0x330
[  738.820106][T17999]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  738.820124][T17999]  ? security_socket_sendmsg+0x7c/0xa0
[  738.820144][T17999]  ? netlink_getsockopt+0x550/0x550
[  738.820168][T17999]  ____sys_sendmsg+0x5ed/0x9a0
[  738.820200][T17999]  ? __sys_sendmsg_sock+0x30/0x30
[  738.820219][T17999]  ? __import_iovec+0x306/0x510
[  738.820250][T17999]  ? import_iovec+0x6f/0xa0
[  738.820276][T17999]  ___sys_sendmsg+0x2a2/0x360
[  738.820304][T17999]  ? __sys_sendmsg+0x2a0/0x2a0
[  738.820347][T17999]  ? __lock_acquire+0x7c40/0x7c40
[  738.820396][T17999]  __se_sys_sendmsg+0x1c3/0x2b0
[  738.820417][T17999]  ? ct_nmi_exit+0x145/0x1c0
[  738.825896][T17992] bridge0: port 3(veth0_to_bond) entered forwarding state
[  738.830177][T17999]  ? __x64_sys_sendmsg+0x80/0x80
[  738.830221][T17999]  ? lockdep_hardirqs_on+0x94/0x140
[  738.830241][T17999]  do_syscall_64+0x4c/0xa0
[  738.830260][T17999]  ? clear_bhb_loop+0x60/0xb0
[  738.830280][T17999]  ? clear_bhb_loop+0x60/0xb0
[  738.830302][T17999]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  738.830323][T17999] RIP: 0033:0x7f3f9039de99
[  738.830340][T17999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  738.855165][T18007] sctp: [Deprecated]: syz.3.3740 (pid 18007) Use of struct sctp_assoc_value in delayed_ack socket option.
[  738.855165][T18007] Use struct sctp_sack_info instead
[  738.859333][T17999] RSP: 002b:00007f3f912f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  738.859358][T17999] RAX: ffffffffffffffda RBX: 00007f3f90625fa0 RCX: 00007f3f9039de99
[  738.859371][T17999] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  738.859383][T17999] RBP: 00007f3f912f6090 R08: 0000000000000000 R09: 0000000000000000
[  738.859394][T17999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  738.859405][T17999] R13: 00007f3f90626038 R14: 00007f3f90625fa0 R15: 00007ffc5a012a78
[  738.961728][T18010] netlink: 'syz.0.3743': attribute type 4 has an invalid length.
[  738.964530][T17999]  </TASK>
[  739.198536][T18000] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3740'.
[  742.936540][T18062] FAULT_INJECTION: forcing a failure.
[  742.936540][T18062] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  742.958487][T18062] CPU: 1 PID: 18062 Comm: syz.0.3754 Not tainted syzkaller #0
[  742.966016][T18062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  742.976090][T18062] Call Trace:
[  742.979387][T18062]  <TASK>
[  742.982339][T18062]  dump_stack_lvl+0x188/0x24e
[  742.987136][T18062]  ? show_regs_print_info+0x12/0x12
[  742.992361][T18062]  ? load_image+0x410/0x410
[  742.996886][T18062]  ? __lock_acquire+0x7c40/0x7c40
[  743.001930][T18062]  ? snprintf+0xe5/0x140
[  743.006189][T18062]  should_fail_ex+0x390/0x4c0
[  743.010887][T18062]  _copy_to_user+0x2c/0x130
[  743.015412][T18062]  simple_read_from_buffer+0xe3/0x150
[  743.020804][T18062]  proc_fail_nth_read+0x1a6/0x220
[  743.025858][T18062]  ? proc_fault_inject_write+0x310/0x310
[  743.031507][T18062]  ? fsnotify_perm+0x248/0x550
[  743.036289][T18062]  ? proc_fault_inject_write+0x310/0x310
[  743.041947][T18062]  vfs_read+0x2db/0x960
[  743.046136][T18062]  ? kernel_read+0x1e0/0x1e0
[  743.050747][T18062]  ? __fget_files+0x28/0x460
[  743.055359][T18062]  ? __fget_files+0x3fc/0x460
[  743.060061][T18062]  ? __fdget_pos+0x2ae/0x360
[  743.064664][T18062]  ? ksys_read+0x70/0x260
[  743.069010][T18062]  ksys_read+0x14d/0x260
[  743.073289][T18062]  ? vfs_write+0x9a0/0x9a0
[  743.077824][T18062]  ? lockdep_hardirqs_on+0x94/0x140
[  743.083047][T18062]  do_syscall_64+0x4c/0xa0
[  743.087481][T18062]  ? clear_bhb_loop+0x60/0xb0
[  743.092172][T18062]  ? clear_bhb_loop+0x60/0xb0
[  743.096866][T18062]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  743.102771][T18062] RIP: 0033:0x7f79b015e6ce
[  743.107203][T18062] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  743.122948][T18066] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3756'.
[  743.126978][T18062] RSP: 002b:00007f79b112cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  743.144629][T18062] RAX: ffffffffffffffda RBX: 00007f79b112d6c0 RCX: 00007f79b015e6ce
[  743.152619][T18062] RDX: 000000000000000f RSI: 00007f79b112d0a0 RDI: 0000000000000004
[  743.160603][T18062] RBP: 00007f79b112d090 R08: 0000000000000000 R09: 0000000000000000
[  743.168593][T18062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  743.176572][T18062] R13: 00007f79b0426038 R14: 00007f79b0425fa0 R15: 00007ffdb86128e8
[  743.184570][T18062]  </TASK>
[  743.292002][T18060] netlink: 'syz.1.3755': attribute type 29 has an invalid length.
[  745.005601][T18060] netlink: 'syz.1.3755': attribute type 29 has an invalid length.
[  745.017079][T18071] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3758'.
[  745.036626][T18071] bridge: RTM_NEWNEIGH with invalid state 0x1
[  745.170035][T18082] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3760'.
[  745.237557][T18087] netlink: 'syz.3.3762': attribute type 21 has an invalid length.
[  745.242847][T18086] netlink: 'syz.2.3761': attribute type 3 has an invalid length.
[  745.260850][T18087] netlink: 'syz.3.3762': attribute type 4 has an invalid length.
[  745.272326][T18086] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3761'.
[  745.300357][T18088] netlink: 'syz.2.3761': attribute type 3 has an invalid length.
[  745.344429][T18088] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3761'.
[  745.371622][T18086] netlink: 'syz.2.3761': attribute type 3 has an invalid length.
[  745.379372][T18086] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3761'.
[  745.425666][T18088] netlink: 'syz.2.3761': attribute type 3 has an invalid length.
[  745.471000][T18088] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3761'.
[  747.029759][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  747.036136][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  747.853730][T18104] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3765'.
[  748.203623][T18117] netlink: 'syz.4.3770': attribute type 10 has an invalid length.
[  748.641576][T18117] 8021q: adding VLAN 0 to HW filter on device team0
[  748.659405][T18117] bond0: (slave team0): Enslaving as an active interface with an up link
[  748.669902][T18116] netlink: 'syz.0.3769': attribute type 33 has an invalid length.
[  748.682363][T18116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3769'.
[  748.704578][T18120] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3773'.
[  748.721566][T18120] bridge: RTM_NEWNEIGH with invalid state 0x1
[  748.728871][T18121] netlink: 'syz.4.3770': attribute type 10 has an invalid length.
[  748.748238][T18121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3770'.
[  748.759816][T18121] device team0 entered promiscuous mode
[  748.774451][T18121] device team_slave_0 entered promiscuous mode
[  748.784050][T18121] device team_slave_1 entered promiscuous mode
[  748.797249][T18121] bond0: (slave team0): Releasing backup interface
[  748.827994][T18121] bridge0: port 3(team0) entered blocking state
[  748.845889][T18121] bridge0: port 3(team0) entered disabled state
[  749.037481][T18131] device syzkaller0 entered promiscuous mode
[  751.904275][T18167] netlink: 'syz.0.3782': attribute type 10 has an invalid length.
[  751.931416][T18167] 8021q: adding VLAN 0 to HW filter on device team0
[  751.939685][T18167] bond0: (slave team0): Enslaving as an active interface with an up link
[  752.077195][T18180] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.3785'.
[  752.125433][T18180] openvswitch: netlink: Flow actions attr not present in new flow.
[  752.199139][T18188] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3787'.
[  752.219500][T18186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3788'.
[  752.251788][T18188] bridge: RTM_NEWNEIGH with invalid state 0x1
[  752.325810][T18192] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3790'.
[  752.909544][T18211] netlink: 'syz.1.3797': attribute type 3 has an invalid length.
[  752.934242][T18211] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3797'.
[  753.050477][T18208] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.3796'.
[  753.068679][T18208] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[  753.747690][T18226] netlink: 'syz.2.3802': attribute type 10 has an invalid length.
[  753.896680][T18226] device veth0_vlan left promiscuous mode
[  753.943484][T18226] device veth0_vlan entered promiscuous mode
[  753.974520][T18226] team0: Device veth0_vlan failed to register rx_handler
[  754.309879][T14705] Bluetooth: hci5: command 0x0406 tx timeout
[  754.447254][T18236] netlink: 'syz.4.3805': attribute type 2 has an invalid length.
[  754.467248][T18236] netlink: 'syz.4.3805': attribute type 5 has an invalid length.
[  754.546602][T18244] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3807'.
[  754.566846][T18244] bridge: RTM_NEWNEIGH with invalid state 0x1
[  755.274121][T18274] netlink: 'syz.2.3811': attribute type 1 has an invalid length.
[  755.310831][T18274] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3811'.
[  755.482352][T18274] netlink: 'syz.2.3811': attribute type 29 has an invalid length.
[  755.531483][T18274] netlink: 'syz.2.3811': attribute type 29 has an invalid length.
[  755.739837][T18279] netlink: 'syz.4.3816': attribute type 3 has an invalid length.
[  755.781118][T18279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3816'.
[  755.855286][T18279] netlink: 'syz.4.3816': attribute type 3 has an invalid length.
[  755.921068][T18279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3816'.
[  755.953869][T18279] netlink: 'syz.4.3816': attribute type 3 has an invalid length.
[  755.966964][T18278] netlink: 'syz.1.3815': attribute type 25 has an invalid length.
[  755.976404][T18278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3815'.
[  755.985692][T18279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3816'.
[  756.058115][T18279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3816'.
[  756.084517][T18286] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3818'.
[  756.124984][T18279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3816'.
[  756.179613][T18279] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3816'.
[  756.415106][T18303] bridge: RTM_NEWNEIGH with invalid state 0x1
[  759.087530][T18342] bridge: RTM_NEWNEIGH with invalid state 0x1
[  759.744698][T18371] ��
: port 1(veth0_to_team) entered blocking state
[  759.767880][T18371] ��
: port 1(veth0_to_team) entered disabled state
[  759.779573][T18371] device veth0_to_team entered promiscuous mode
[  759.895633][T18383] validate_nla: 32 callbacks suppressed
[  759.895651][T18383] netlink: 'syz.3.3849': attribute type 2 has an invalid length.
[  759.996562][T18385] netlink: 'syz.2.3851': attribute type 10 has an invalid length.
[  760.032143][T18385] __nla_validate_parse: 29 callbacks suppressed
[  760.032160][T18385] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3851'.
[  760.089408][T18385] device bond0 entered promiscuous mode
[  760.109070][T18385] device bond_slave_0 entered promiscuous mode
[  760.124785][T18385] device bond_slave_1 entered promiscuous mode
[  760.144608][T18385] bridge0: port 3(bond0) entered blocking state
[  760.170867][T18385] bridge0: port 3(bond0) entered disabled state
[  760.220683][T18385] bridge0: port 3(bond0) entered blocking state
[  760.227256][T18385] bridge0: port 3(bond0) entered forwarding state
[  760.277638][T18388] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3851'.
[  760.680654][T18402] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3854'.
[  760.693411][T18402] bridge: RTM_NEWNEIGH with invalid state 0x1
[  763.722276][T18422] netlink: 'syz.3.3862': attribute type 10 has an invalid length.
[  763.789811][T18422] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.828501][T18422] device bridge_slave_1 left promiscuous mode
[  763.851484][T18422] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.634161][T18435] device pim6reg1 entered promiscuous mode
[  766.769659][T18445] netlink: 'syz.2.3866': attribute type 2 has an invalid length.
[  767.338200][T18459] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3870'.
[  767.551669][T18466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3873'.
[  767.716158][T18466] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3873'.
[  767.751366][T18466] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  767.865016][T18478] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3873'.
[  767.914436][T18478] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  767.945499][T18478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  768.190695][T18498] netlink: 15179 bytes leftover after parsing attributes in process `syz.0.3881'.
[  768.459099][T18495] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3880'.
[  768.674466][T18516] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3885'.
[  768.707945][T18516] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  768.729024][T18516] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  768.766663][T18520] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3887'.
[  768.815249][T18520] bridge: RTM_NEWNEIGH with invalid state 0x1
[  768.894699][T18525] netlink: 'syz.0.3886': attribute type 2 has an invalid length.
[  770.126617][T18564] netlink: 'syz.2.3897': attribute type 1 has an invalid length.
[  770.137883][T18563] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3900'.
[  770.164155][T18563] bridge: RTM_NEWNEIGH with invalid state 0x1
[  770.180628][T18564] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3897'.
[  770.334110][T18570] netlink: 'syz.1.3902': attribute type 3 has an invalid length.
[  770.705241][T18579] netlink: 'syz.3.3903': attribute type 2 has an invalid length.
[  771.652202][T14705] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  771.897263][T18610] bridge: RTM_NEWNEIGH with invalid state 0x1
[  772.301483][T18633] netlink: 'syz.4.3919': attribute type 10 has an invalid length.
[  772.395900][T18642] __nla_validate_parse: 3 callbacks suppressed
[  772.395925][T18642] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3922'.
[  772.549456][T18646] netlink: 'syz.3.3920': attribute type 2 has an invalid length.
[  772.779663][T18649] netlink: 'syz.2.3923': attribute type 10 has an invalid length.
[  772.821008][T18649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3923'.
[  772.923682][T18649] netlink: 'syz.2.3923': attribute type 10 has an invalid length.
[  773.028311][T18649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3923'.
[  773.213842][T18657] netlink: 'syz.4.3925': attribute type 29 has an invalid length.
[  773.257238][T18657] netlink: 'syz.4.3925': attribute type 29 has an invalid length.
[  773.478384][T18662] netlink: 'syz.0.3926': attribute type 39 has an invalid length.
[  773.523792][T18668] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3929'.
[  773.728104][T18675] netlink: 'syz.4.3928': attribute type 25 has an invalid length.
[  773.739090][T18675] netlink: 'syz.4.3928': attribute type 29 has an invalid length.
[  773.749679][T18675] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3928'.
[  774.600571][T18694] netlink: 'syz.1.3936': attribute type 2 has an invalid length.
[  774.655544][T18694] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3936'.
[  774.681787][T14705] Bluetooth: hci0: command 0x0406 tx timeout
[  774.738357][T18693] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3935'.
[  775.406844][T18712] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3942'.
[  775.479629][T18712] bridge: RTM_NEWNEIGH with invalid state 0x1
[  776.138496][T18724] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3945'.
[  776.150364][T18724] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3945'.
[  776.570177][T18740] 8021q: adding VLAN 0 to HW filter on device team0
[  776.650483][T18740] device team0 entered promiscuous mode
[  776.670881][T18740] device team_slave_0 entered promiscuous mode
[  776.704973][T18740] device team_slave_1 entered promiscuous mode
[  776.739500][T18740] device virt_wifi0 entered promiscuous mode
[  776.812236][T18740] bond0: (slave team0): Enslaving as an active interface with an up link
[  776.972891][T18748] device syzkaller0 entered promiscuous mode
[  777.014804][T18760] bridge: RTM_NEWNEIGH with invalid state 0x1
[  779.807871][T18763] validate_nla: 10 callbacks suppressed
[  779.807884][T18763] netlink: 'syz.4.3958': attribute type 2 has an invalid length.
[  779.831055][T18773] netlink: 'syz.1.3961': attribute type 21 has an invalid length.
[  779.838954][T18773] __nla_validate_parse: 2 callbacks suppressed
[  779.838966][T18773] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.3961'.
[  780.114425][T18783] netlink: 'syz.4.3964': attribute type 1 has an invalid length.
[  780.151468][T18783] netlink: 4070 bytes leftover after parsing attributes in process `syz.4.3964'.
[  780.171590][T18780] netlink: 'syz.4.3964': attribute type 1 has an invalid length.
[  780.191248][T18780] netlink: 4070 bytes leftover after parsing attributes in process `syz.4.3964'.
[  780.319043][T18788] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3967'.
[  780.791561][T18799] sock: sock_set_timeout: `syz.4.3971' (pid 18799) tries to set negative timeout
[  780.946892][T18802] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3972'.
[  780.986781][T18802] bridge: RTM_NEWNEIGH with invalid state 0x1
[  781.392239][T18817] netlink: 'syz.3.3974': attribute type 2 has an invalid length.
[  781.410614][T18818] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3976'.
[  784.435262][T18853] netlink: 'syz.4.3984': attribute type 3 has an invalid length.
[  784.479302][T18853] netlink: 'syz.4.3984': attribute type 1 has an invalid length.
[  784.509902][T18857] netlink: 'syz.1.3985': attribute type 2 has an invalid length.
[  784.529632][T18853] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.3984'.
[  784.554912][T18857] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3985'.
[  784.712487][T18865] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3988'.
[  784.751236][T18865] bridge: RTM_NEWNEIGH with invalid state 0x1
[  784.828109][T18871] netlink: 'syz.1.3989': attribute type 10 has an invalid length.
[  785.583147][T18885] netlink: 'syz.3.3991': attribute type 2 has an invalid length.
[  785.611521][T18886] netlink: 'syz.4.3990': attribute type 1 has an invalid length.
[  785.649971][T18886] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3990'.
[  785.837507][T18886] netlink: 'syz.4.3990': attribute type 29 has an invalid length.
[  785.878329][T18886] netlink: 'syz.4.3990': attribute type 29 has an invalid length.
[  785.911527][T18889] netlink: 'syz.0.3992': attribute type 21 has an invalid length.
[  786.615520][T18920] netlink: 'syz.0.4000': attribute type 4 has an invalid length.
[  786.687419][T18914] device syzkaller0 entered promiscuous mode
[  786.697469][T18919] netlink: 'syz.0.4000': attribute type 4 has an invalid length.
[  786.701753][T18920] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4000'.
[  786.747387][T18919] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4000'.
[  789.635166][T18931] netlink: 184 bytes leftover after parsing attributes in process `syz.1.4003'.
[  789.645169][T18933] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4004'.
[  789.655292][T18933] bridge: RTM_NEWNEIGH with invalid state 0x1
[  789.661709][T18936] netlink: 'syz.1.4003': attribute type 10 has an invalid length.
[  789.669531][T18936] device netdevsim0 entered promiscuous mode
[  789.890450][T18955] netlink: 'syz.1.4007': attribute type 2 has an invalid length.
[  790.934596][T18989] bond0: (slave team0): Error: Slave device does not support XDP
[  791.043982][T18989] netlink: 'syz.2.4016': attribute type 10 has an invalid length.
[  791.074596][T18989] device netdevsim0 entered promiscuous mode
[  791.091697][T18989] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  791.129815][T19003] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4019'.
[  791.151546][T19003] bridge: RTM_NEWNEIGH with invalid state 0x1
[  791.312915][T19008] device syzkaller0 entered promiscuous mode
[  791.364103][T19008] netlink: 'syz.4.4020': attribute type 10 has an invalid length.
[  791.482745][T19008] team0: Device hsr_slave_0 failed to register rx_handler
[  791.589202][T19016] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4024'.
[  791.630013][T19016] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  791.712204][T19016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  791.824815][T19023] netlink: 'syz.3.4024': attribute type 25 has an invalid length.
[  791.847362][T19023] netlink: 'syz.3.4024': attribute type 29 has an invalid length.
[  791.914831][T19027] netlink: 'syz.1.4026': attribute type 2 has an invalid length.
[  791.937465][T19032] tap0: tun_chr_ioctl cmd 1074812118
[  792.388941][T19036] device wg2 entered promiscuous mode
[  792.820355][T19057] netlink: 'syz.1.4034': attribute type 11 has an invalid length.
[  792.853009][T19057] netlink: 'syz.1.4034': attribute type 11 has an invalid length.
[  792.875116][T19057] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4034'.
[  792.883494][T19061] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4035'.
[  792.921272][T19061] bridge: RTM_NEWNEIGH with invalid state 0x1
[  793.200511][T19072] netlink: 143932 bytes leftover after parsing attributes in process `syz.3.4038'.
[  793.233206][T19072] netlink: zone id is out of range
[  793.241598][T19072] netlink: zone id is out of range
[  793.249267][T19072] netlink: zone id is out of range
[  793.268883][T19072] netlink: zone id is out of range
[  793.290844][T19079] Q�6�`Ҙ: renamed from lo
[  793.294892][T19072] netlink: zone id is out of range
[  793.315112][T19072] netlink: zone id is out of range
[  793.335533][T19072] netlink: zone id is out of range
[  793.352236][T19072] netlink: zone id is out of range
[  793.372423][T19072] netlink: zone id is out of range
[  793.924068][T19090] netlink: 'syz.4.4044': attribute type 2 has an invalid length.
[  795.112001][T19114] netlink: 'syz.2.4053': attribute type 2 has an invalid length.
[  795.120117][T19114] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4053'.
[  795.160900][ T4281] Bluetooth: hci4: command 0x0406 tx timeout
[  795.163768][T19121] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4054'.
[  795.236020][T19121] bridge: RTM_NEWNEIGH with invalid state 0x1
[  795.544902][T19138] bond0: (slave team0): Error: Slave device does not support XDP
[  796.422678][T19156] netlink: 'syz.4.4061': attribute type 2 has an invalid length.
[  796.851289][T19167] netlink: 'syz.2.4064': attribute type 10 has an invalid length.
[  797.096109][T19167] device geneve1 entered promiscuous mode
[  797.132936][T19167] team0: Port device geneve1 added
[  797.258736][T19176] netlink: 'syz.4.4066': attribute type 21 has an invalid length.
[  797.276832][T19177] netlink: 'syz.4.4066': attribute type 21 has an invalid length.
[  797.320480][T19182] netlink: 'syz.1.4067': attribute type 29 has an invalid length.
[  797.387812][T19182] netlink: 'syz.1.4067': attribute type 29 has an invalid length.
[  797.506121][T19182] netlink: 'syz.1.4067': attribute type 29 has an invalid length.
[  797.527605][T19191] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4070'.
[  797.562254][T19191] bridge: RTM_NEWNEIGH with invalid state 0x1
[  797.814561][T19209] netlink: 'syz.0.4074': attribute type 28 has an invalid length.
[  797.827214][T19209] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4074'.
[  798.009700][T19221] netlink: 'syz.4.4076': attribute type 2 has an invalid length.
[  798.885941][T19234] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.4081'.
[  798.991581][T19234] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  799.051109][T19234] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  799.084831][T19234] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  799.235535][T19249] team0: Port device macvlan0 added
[  799.336653][T19245] delete_channel: no stack
[  799.347432][T19254] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4086'.
[  799.646225][T19270] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.4090'.
[  799.967197][T19284] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.4095'.
[  800.133985][T19268] delete_channel: no stack
[  800.905250][T19316] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4104'.
[  800.915595][T19316] bridge: RTM_NEWNEIGH with invalid state 0x1
[  801.018968][T19315] validate_nla: 4 callbacks suppressed
[  801.018984][T19315] netlink: 'syz.1.4103': attribute type 10 has an invalid length.
[  801.098940][T19315] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.130507][T19315] device bridge_slave_1 left promiscuous mode
[  801.134871][T19318] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4105'.
[  801.145550][T19315] bridge0: port 2(bridge_slave_1) entered disabled state
[  801.199011][T19320] netlink: 'syz.4.4106': attribute type 2 has an invalid length.
[  801.210419][T19320] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4106'.
[  801.232834][T19322] device sit0 entered promiscuous mode
[  801.311271][T19325] netlink: 'syz.0.4108': attribute type 46 has an invalid length.
[  801.746679][T19330] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4109'.
[  801.941209][T19341] netlink: 'syz.1.4111': attribute type 2 has an invalid length.
[  802.022096][T19333] delete_channel: no stack
[  803.155030][T19357] __nla_validate_parse: 1 callbacks suppressed
[  803.155055][T19357] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4116'.
[  803.215125][T19363] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4118'.
[  803.229673][T19363] bridge: RTM_NEWNEIGH with invalid state 0x1
[  803.376127][T19367] netlink: 'syz.4.4119': attribute type 10 has an invalid length.
[  803.388431][T19367] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4119'.
[  804.039715][T19398] netlink: 'syz.4.4128': attribute type 2 has an invalid length.
[  804.058889][T19396] netlink: 'syz.1.4126': attribute type 2 has an invalid length.
[  804.072174][T19396] netlink: 'syz.1.4126': attribute type 8 has an invalid length.
[  804.107634][T19396] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4126'.
[  804.174827][T19408] netlink: 'syz.3.4127': attribute type 2 has an invalid length.
[  804.927047][T19418] netlink: 'syz.1.4132': attribute type 21 has an invalid length.
[  804.960349][T19418] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4132'.
[  804.992680][T19418] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4132'.
[  805.473002][T19436] device 0 entered promiscuous mode
[  805.565665][T19443] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4139'.
[  806.094394][T19451] validate_nla: 3 callbacks suppressed
[  806.094434][T19451] netlink: 'syz.2.4141': attribute type 4 has an invalid length.
[  806.201322][T19451] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.4141'.
[  806.326668][T19461] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.4145'.
[  806.338044][T19468] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4147'.
[  806.442370][T19468] net_ratelimit: 3532 callbacks suppressed
[  806.442388][T19468] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  806.530982][T19471] netlink: 'syz.1.4143': attribute type 2 has an invalid length.
[  807.295645][T19489] netlink: zone id is out of range
[  807.309372][T19489] netlink: zone id is out of range
[  807.327495][T19489] netlink: zone id is out of range
[  807.340142][T19489] netlink: zone id is out of range
[  807.368195][T19489] netlink: zone id is out of range
[  807.389319][T19489] netlink: del zone limit has 4 unknown bytes
[  807.915260][T19501] bridge: RTM_NEWNEIGH with invalid state 0x1
[  807.977857][T18982] tipc: Subscription rejected, illegal request
[  808.182141][T19516] __nla_validate_parse: 2 callbacks suppressed
[  808.182152][T19516] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4160'.
[  808.454048][T19533] netlink: 'syz.0.4163': attribute type 10 has an invalid length.
[  808.466045][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  808.472426][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  808.631918][T19533] bond0: (slave team0): Releasing backup interface
[  808.706559][T19533] team0 (unregistering): Port device team_slave_0 removed
[  808.760445][T19533] team0 (unregistering): Port device team_slave_1 removed
[  808.838194][T19533] team0 (unregistering): Port device virt_wifi0 removed
[  808.979450][T19533] team0 (unregistering): Port device macvlan0 removed
[  809.019597][T19547] netlink: 'syz.4.4165': attribute type 2 has an invalid length.
[  809.582645][T19569] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4173'.
[  811.024490][T19610] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4181'.
[  811.185498][T19618] netlink: 'syz.4.4184': attribute type 2 has an invalid length.
[  811.231042][T19613] netlink: 'syz.1.4183': attribute type 5 has an invalid length.
[  811.820437][T19637] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4190'.
[  811.973521][T19638] netlink: 'syz.1.4189': attribute type 1 has an invalid length.
[  812.202203][T19647] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4194'.
[  812.229651][T19647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4194'.
[  813.088875][T19691] netlink: 'syz.0.4203': attribute type 2 has an invalid length.
[  813.622683][T19698] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4206'.
[  813.633029][T19699] netlink: 'syz.1.4205': attribute type 12 has an invalid length.
[  813.647943][T19699] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4205'.
[  814.049048][T19710] netlink: 'syz.2.4210': attribute type 41 has an invalid length.
[  814.828815][T19743] netlink: 'syz.4.4221': attribute type 2 has an invalid length.
[  814.909700][T19746] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4224'.
[  814.953950][T19749] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.4222'.
[  815.041688][ T4281] Bluetooth: hci2: ISO packet for unknown connection handle 10
[  817.742901][T19760] syzkaller1: tun_chr_ioctl cmd 2147767507
[  817.941313][T19764] delete_channel: no stack
[  818.186617][T19777] netlink: 'syz.3.4231': attribute type 21 has an invalid length.
[  818.255643][T19777] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4231'.
[  818.318396][T19777] netlink: 'syz.3.4231': attribute type 5 has an invalid length.
[  818.383427][T19777] netlink: 'syz.3.4231': attribute type 6 has an invalid length.
[  818.467251][T19777] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4231'.
[  818.499874][T19788] bridge0: port 3(bond0) entered disabled state
[  818.506353][T19788] bridge0: port 2(bridge_slave_1) entered disabled state
[  818.513954][T19788] bridge0: port 1(bridge_slave_0) entered disabled state
[  818.566896][T19801] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.4233'.
[  818.818281][T19809] netlink: 'syz.4.4236': attribute type 2 has an invalid length.
[  818.949115][T19811] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4238'.
[  819.048933][T19811] bridge: RTM_NEWNEIGH with invalid state 0x1
[  819.808577][T19827] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4242'.
[  820.201949][T19841] netlink: 'syz.3.4245': attribute type 15 has an invalid length.
[  820.230690][T19841] netlink: 'syz.3.4245': attribute type 7 has an invalid length.
[  820.254345][T19841] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4245'.
[  820.635454][T19853] netlink: 'syz.0.4250': attribute type 3 has an invalid length.
[  820.664679][T19853] netlink: 'syz.0.4250': attribute type 1 has an invalid length.
[  820.695269][T19853] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4250'.
[  821.003931][T19866] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4252'.
[  821.024357][T19866] bridge: RTM_NEWNEIGH with invalid state 0x1
[  821.482256][T19881] netlink: 'syz.1.4256': attribute type 2 has an invalid length.
[  821.759049][T19880] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4257'.
[  826.588778][T19921] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4268'.
[  827.968567][T19942] netlink: 'syz.3.4272': attribute type 39 has an invalid length.
[  828.259759][T19948] netlink: 'syz.0.4273': attribute type 2 has an invalid length.
[  828.722050][T19950] netlink: 'syz.1.4274': attribute type 1 has an invalid length.
[  828.730080][T19950] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.4274'.
[  828.786400][T19954] tipc: Started in network mode
[  828.817573][T19954] tipc: Node identity 9215a268, cluster identity 4711
[  828.871203][T19954] tipc: Node number set to 2450891368
[  828.992442][T19961] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.4279'.
[  829.104434][T19969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4280'.
[  829.316418][T19975] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4282'.
[  829.385746][T19975] bridge: RTM_NEWNEIGH with invalid state 0x1
[  829.410344][T19977] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4283'.
[  829.660322][T19990] netlink: 'syz.2.4287': attribute type 39 has an invalid length.
[  829.861744][T20005] netlink: 'syz.3.4289': attribute type 2 has an invalid length.
[  830.052538][T20009] netlink: 'syz.1.4292': attribute type 2 has an invalid length.
[  830.820814][T20029] netlink: 'syz.1.4298': attribute type 10 has an invalid length.
[  830.828898][T20029] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4298'.
[  831.018704][T20036] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4301'.
[  831.608597][T20054] netlink: 'syz.0.4306': attribute type 46 has an invalid length.
[  831.718684][T20058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4307'.
[  831.860092][T20060] device syzkaller0 entered promiscuous mode
[  832.080053][T20072] netlink: 125520 bytes leftover after parsing attributes in process `syz.4.4311'.
[  834.228119][T20078] netlink: 'syz.0.4312': attribute type 2 has an invalid length.
[  834.236326][T20087] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4315'.
[  834.538477][T20100] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4319'.
[  834.956793][T20119] netlink: 'syz.3.4324': attribute type 10 has an invalid length.
[  834.972923][T20119] netlink: 'syz.3.4324': attribute type 19 has an invalid length.
[  834.985396][T20119] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.4324'.
[  835.059780][T20122] device syzkaller0 entered promiscuous mode
[  835.215582][T20136] netlink: 4091 bytes leftover after parsing attributes in process `syz.0.4329'.
[  835.232028][T20138] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4330'.
[  835.243508][T20138] bridge: RTM_NEWNEIGH with invalid state 0x1
[  837.071117][T20141] netlink: 'syz.2.4327': attribute type 2 has an invalid length.
[  837.082604][T20143] netlink: 'syz.0.4329': attribute type 1 has an invalid length.
[  837.100922][T20143] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.4329'.
[  837.182447][T20147] netlink: 'syz.3.4331': attribute type 2 has an invalid length.
[  837.275898][T20147] device 0 entered promiscuous mode
[  837.537445][T20163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  837.649961][ T4281] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255
[  837.724277][T20170] netlink: 'syz.0.4339': attribute type 10 has an invalid length.
[  838.004785][T20186] netlink: 'syz.0.4342': attribute type 2 has an invalid length.
[  838.623784][T20193] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4345'.
[  839.121557][T20199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4347'.
[  839.398705][T20226] device syzkaller1 entered promiscuous mode
[  839.464189][T20226] syzkaller1: tun_chr_ioctl cmd 1074025677
[  839.513425][T20226] syzkaller1: Linktype set failed because interface is up
[  839.733253][T20239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4358'.
[  839.766248][T20239] netlink: 'syz.4.4358': attribute type 12 has an invalid length.
[  839.818191][T20239] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4358'.
[  839.994109][T20253] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4361'.
[  840.022093][T20253] bridge: RTM_NEWNEIGH with invalid state 0x1
[  840.041377][T20254] netlink: 'syz.3.4359': attribute type 2 has an invalid length.
[  840.454668][T20257] netlink: 'syz.2.4362': attribute type 21 has an invalid length.
[  840.511517][T20257] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4362'.
[  840.550274][T20257] netlink: 'syz.2.4362': attribute type 4 has an invalid length.
[  840.591716][T20257] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4362'.
[  840.836770][T20260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4363'.
[  840.899842][T20260] delete_channel: no stack
[  840.917523][T20260] delete_channel: no stack
[  841.077171][T20263] netlink: 'syz.4.4364': attribute type 7 has an invalid length.
[  841.449408][ T4281] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10
[  841.678281][T20295] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4374'.
[  841.723841][T20295] bridge: RTM_NEWNEIGH with invalid state 0x1
[  841.905125][T20302] netlink: 'syz.3.4376': attribute type 2 has an invalid length.
[  842.838713][T20333] netlink: 'syz.0.4385': attribute type 10 has an invalid length.
[  843.105217][T20337] netlink: 'syz.2.4387': attribute type 10 has an invalid length.
[  843.480973][T14705] Bluetooth: hci0: command 0x0409 tx timeout
[  843.487492][T20327] delete_channel: no stack
[  843.551838][T20337] device wg1 entered promiscuous mode
[  843.620901][T20337] team0: Device wg1 is of different type
[  843.764421][T20344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4390'.
[  843.778013][T20342] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4391'.
[  843.790580][T20342] bridge: RTM_NEWNEIGH with invalid state 0x1
[  843.801677][T20344] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4390'.
[  843.882783][T20344] netlink: 'syz.1.4390': attribute type 21 has an invalid length.
[  843.897553][T20344] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  844.152532][T20365] netlink: 'syz.0.4396': attribute type 11 has an invalid length.
[  844.493080][T20381] netlink: 'syz.0.4399': attribute type 2 has an invalid length.
[  845.049688][T20401] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4406'.
[  845.219257][T20403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4407'.
[  845.256540][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'.
[  845.266832][T20403] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4407'.
[  845.285525][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'.
[  845.317514][T20403] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4407'.
[  845.395279][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4407'.
[  845.498141][T20407] sctp: [Deprecated]: syz.3.4409 (pid 20407) Use of int in maxseg socket option.
[  845.498141][T20407] Use struct sctp_assoc_value instead
[  845.645579][T20417] netlink: 'syz.0.4410': attribute type 10 has an invalid length.
[  846.556684][T20436] tipc: Started in network mode
[  846.591721][T20436] tipc: Node identity 9215a268, cluster identity 4711
[  846.617644][T20436] tipc: Node number set to 2450891368
[  847.827642][T20464] netlink: 'syz.4.4430': attribute type 10 has an invalid length.
[  847.884153][T20464] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.962348][T20464] device bridge_slave_1 left promiscuous mode
[  847.978587][T20464] bridge0: port 2(bridge_slave_1) entered disabled state
[  848.238748][T20468] netlink: 'syz.1.4420': attribute type 2 has an invalid length.
[  848.259191][T20473] bridge: RTM_NEWNEIGH with invalid state 0x1
[  848.701243][T20486] netlink: 'syz.2.4425': attribute type 10 has an invalid length.
[  848.996212][T20486] bond0: (slave team0): Releasing backup interface
[  849.037130][T20486] device team0 left promiscuous mode
[  849.120896][T20486] device team_slave_0 left promiscuous mode
[  849.127087][T20486] device team_slave_1 left promiscuous mode
[  849.162321][T20486] device virt_wifi0 left promiscuous mode
[  849.267884][T20486] device geneve1 left promiscuous mode
[  849.392386][T20486] team0 (unregistering): Port device team_slave_0 removed
[  849.472174][T20486] team0 (unregistering): Port device team_slave_1 removed
[  849.549126][T20486] team0 (unregistering): Port device virt_wifi0 removed
[  849.574818][T20486] team0 (unregistering): Port device geneve1 removed
[  849.699001][T20504] netlink: 'syz.3.4432': attribute type 10 has an invalid length.
[  849.839626][T20508] __nla_validate_parse: 4 callbacks suppressed
[  849.839643][T20508] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4433'.
[  849.869145][T20508] bridge: RTM_NEWNEIGH with invalid state 0x1
[  850.300573][T20522] netlink: 'syz.0.4437': attribute type 2 has an invalid length.
[  850.435580][T20525] bond0: (slave netdevsim0): Error: Slave device does not support XDP
[  850.445466][T20526] netlink: 'syz.1.4438': attribute type 3 has an invalid length.
[  850.459684][T20526] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4438'.
[  850.535445][T20525] netlink: 'syz.2.4439': attribute type 10 has an invalid length.
[  851.312589][T20525] device bridge_slave_1 left promiscuous mode
[  851.321208][T20525] bridge0: port 2(bridge_slave_1) entered disabled state
[  851.399807][T20525] device bridge_slave_1 entered promiscuous mode
[  851.424816][T20525] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  851.464977][T20529] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4440'.
[  851.931387][T20549] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4448'.
[  851.992318][T20551] netlink: 'syz.4.4446': attribute type 10 has an invalid length.
[  852.049328][T20551] bridge0: port 3(team0) entered disabled state
[  852.064909][T20551] device team_slave_0 left promiscuous mode
[  852.077429][T20551] team0 (unregistering): Port device team_slave_0 removed
[  852.086424][T20551] device team_slave_1 left promiscuous mode
[  852.143570][T20551] team0 (unregistering): Port device team_slave_1 removed
[  852.208813][T20564] netlink: 'syz.0.4449': attribute type 10 has an invalid length.
[  852.597922][T20579] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4464'.
[  852.616253][T20581] netlink: 'syz.2.4454': attribute type 3 has an invalid length.
[  852.634758][T20582] netlink: 'syz.4.4453': attribute type 2 has an invalid length.
[  852.651454][T20581] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4454'.
[  853.088110][T20590] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4457'.
[  853.911354][T20601] netlink: 'syz.3.4461': attribute type 11 has an invalid length.
[  853.919235][T20601] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4461'.
[  855.906072][T20622] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4468'.
[  856.081528][T20632] netlink: 'syz.4.4469': attribute type 2 has an invalid length.
[  856.116078][T20634] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4471'.
[  859.302952][T20706] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4483'.
[  860.409482][T20727] netlink: 'syz.0.4487': attribute type 2 has an invalid length.
[  860.610020][T20734] netlink: 'syz.3.4492': attribute type 7 has an invalid length.
[  860.747076][T20731] device syzkaller0 entered promiscuous mode
[  860.771043][T20734] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.4492'.
[  860.785190][T20738] netlink: 'syz.4.4491': attribute type 6 has an invalid length.
[  860.943603][T20733] netlink: 'syz.4.4491': attribute type 21 has an invalid length.
[  860.972530][T20733] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4491'.
[  866.031409][T20751] netlink: 'syz.0.4505': attribute type 22 has an invalid length.
[  866.039691][T20751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4505'.
[  866.051151][T20752] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  866.060672][T20752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  866.062084][T20771] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4500'.
[  866.070553][T20752] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  866.381510][T20792] netlink: 'syz.1.4506': attribute type 1 has an invalid length.
[  866.389310][T20792] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.4506'.
[  866.436208][T20798] netlink: 'syz.3.4507': attribute type 2 has an invalid length.
[  866.496631][T20799] netlink: 'syz.2.4504': attribute type 2 has an invalid length.
[  867.037122][T20814] netlink: 'syz.3.4512': attribute type 3 has an invalid length.
[  867.070828][T20814] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4512'.
[  867.557581][T20830] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4516'.
[  867.581779][T20830] bridge: RTM_NEWNEIGH with invalid state 0x1
[  868.223364][T20848] netlink: 'syz.3.4520': attribute type 10 has an invalid length.
[  868.289373][T20848] team0: Device wg1 is of different type
[  868.696462][T20855] netlink: 'syz.3.4520': attribute type 10 has an invalid length.
[  868.734285][T20855] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4520'.
[  868.766985][T20855] device hsr0 entered promiscuous mode
[  868.806482][T20855] bridge0: port 2(hsr0) entered blocking state
[  868.831865][T20855] bridge0: port 2(hsr0) entered disabled state
[  868.862145][T20855] bridge0: port 2(hsr0) entered blocking state
[  868.868448][T20855] bridge0: port 2(hsr0) entered forwarding state
[  868.930600][T20870] netlink: 'syz.0.4525': attribute type 2 has an invalid length.
[  869.024767][T20875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4536'.
[  869.105884][T20875] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4536'.
[  869.883067][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  869.890637][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  870.605521][T20903] netlink: 'syz.0.4533': attribute type 3 has an invalid length.
[  870.619105][T20903] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4533'.
[  872.299540][T20904] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4532'.
[  872.506987][T20920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4539'.
[  872.604310][T20930] netlink: 'syz.0.4538': attribute type 2 has an invalid length.
[  872.677786][T20931] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4540'.
[  872.872482][T20939] netlink: 'syz.3.4544': attribute type 10 has an invalid length.
[  872.922364][T20941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4543'.
[  872.930509][T20939] 8021q: adding VLAN 0 to HW filter on device team0
[  872.973483][T20939] bond0: (slave team0): Enslaving as an active interface with an up link
[  873.134013][T20943] tap0: tun_chr_ioctl cmd 1074025677
[  873.139551][T20943] tap0: linktype set to 270
[  873.358038][T20958] netlink: 'syz.1.4549': attribute type 3 has an invalid length.
[  873.389596][T20959] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4548'.
[  873.422304][T20958] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4549'.
[  873.981304][T20976] netlink: 'syz.0.4553': attribute type 11 has an invalid length.
[  876.246592][T20989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4556'.
[  876.257078][T20989] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4556'.
[  876.310051][T20979] device syzkaller0 entered promiscuous mode
[  877.382723][T21025] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4566'.
[  877.500305][T21030] netlink: 'syz.3.4565': attribute type 3 has an invalid length.
[  877.517083][T21030] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4565'.
[  879.067544][T21010] netlink: 'syz.0.4560': attribute type 2 has an invalid length.
[  879.296678][T21040] netlink: 'syz.0.4570': attribute type 21 has an invalid length.
[  879.480690][T21046] netlink: 'syz.3.4573': attribute type 29 has an invalid length.
[  879.506122][T21046] netlink: 'syz.3.4573': attribute type 29 has an invalid length.
[  879.522300][T21046] netlink: 'syz.3.4573': attribute type 29 has an invalid length.
[  879.605876][T21052] netlink: 'syz.3.4573': attribute type 29 has an invalid length.
[  879.631670][T21052] netlink: 'syz.3.4573': attribute type 29 has an invalid length.
[  879.652733][T21052] netlink: 'syz.3.4573': attribute type 29 has an invalid length.
[  879.664470][T21046] can: request_module (can-proto-0) failed.
[  879.766615][T21059] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4576'.
[  879.776082][T21059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4576'.
[  880.365646][T21071] netlink: 'syz.1.4578': attribute type 10 has an invalid length.
[  880.585697][T21075] netlink: 'syz.0.4580': attribute type 2 has an invalid length.
[  881.483364][T21094] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4586'.
[  881.521471][T21093] delete_channel: no stack
[  881.526177][T21093] delete_channel: no stack
[  883.125119][T21140] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4600'.
[  883.170319][T21137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4601'.
[  883.233886][T21137] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4601'.
[  883.295127][T21137] device syzkaller0 entered promiscuous mode
[  884.567856][T21189] validate_nla: 7 callbacks suppressed
[  884.567872][T21189] netlink: 'syz.0.4615': attribute type 2 has an invalid length.
[  884.706723][T21194] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.4617'.
[  884.861508][T21204] syzkaller1: tun_chr_ioctl cmd 1074025677
[  884.872248][T21204] syzkaller1: linktype set to 825
[  885.208481][T21220] bridge0: port 2(batadv0) entered blocking state
[  885.253934][T21220] bridge0: port 2(batadv0) entered disabled state
[  885.299577][T21220] device batadv0 entered promiscuous mode
[  885.347275][T21224] netlink: 'syz.3.4625': attribute type 10 has an invalid length.
[  885.766083][T20685] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  885.775904][T20685] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  886.726294][T21243] netlink: 'syz.4.4631': attribute type 10 has an invalid length.
[  886.744934][T21243] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4631'.
[  886.771993][T21245] device veth1_macvtap left promiscuous mode
[  886.809078][T21247] device veth1_macvtap entered promiscuous mode
[  886.818782][T21247] device macsec0 entered promiscuous mode
[  887.119113][T21272] netlink: 'syz.0.4639': attribute type 10 has an invalid length.
[  887.165137][T21272] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.200508][T21272] device bridge_slave_1 left promiscuous mode
[  887.230350][T21272] bridge0: port 2(bridge_slave_1) entered disabled state
[  887.288696][T21272] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  887.340958][T21280] netlink: 'syz.1.4637': attribute type 2 has an invalid length.
[  888.052332][T21293] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4645'.
[  888.093904][T21293] device hsr_slave_0 left promiscuous mode
[  888.117775][T21293] device hsr_slave_1 left promiscuous mode
[  888.260496][T21293] bridge0: port 2(hsr0) entered disabled state
[  888.356323][T21293] bridge0: port 2(hsr0) entered disabled state
[  888.960467][T21325] syzkaller1: tun_chr_ioctl cmd 2147767506
[  888.990493][T21325] syzkaller1: tun_chr_ioctl cmd 1074812118
[  890.089739][T21348] netlink: 'syz.4.4661': attribute type 3 has an invalid length.
[  890.171717][T21355] netlink: 'syz.3.4659': attribute type 2 has an invalid length.
[  890.321092][T21357] netlink: 'syz.2.4662': attribute type 3 has an invalid length.
[  890.328910][T21357] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4662'.
[  893.895074][T21411] device syzkaller0 entered promiscuous mode
[  893.914562][T21413] netlink: 'syz.0.4675': attribute type 3 has an invalid length.
[  894.081129][T21422] netlink: 'syz.1.4677': attribute type 2 has an invalid length.
[  894.137054][T21424] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4679'.
[  894.812099][T21435] device syzkaller0 entered promiscuous mode
[  896.980000][T21465] netlink: 'syz.1.4691': attribute type 3 has an invalid length.
[  897.409502][T21481] netlink: 'syz.2.4695': attribute type 2 has an invalid length.
[  897.727790][T21485] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  898.793503][T21505] netlink: 'syz.4.4700': attribute type 41 has an invalid length.
[  898.839250][T21502] netlink: 'syz.2.4702': attribute type 3 has an invalid length.
[  898.909918][T21502] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4702'.
[  898.999640][T21494] delete_channel: no stack
[  899.051730][T21494] delete_channel: no stack
[  899.610931][T21525] netlink: 'syz.1.4707': attribute type 9 has an invalid length.
[  899.670933][T21525] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4707'.
[  899.716547][T21527] netlink: 'syz.1.4707': attribute type 9 has an invalid length.
[  899.761060][T21527] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4707'.
[  900.487110][T21553] netlink: 'syz.0.4712': attribute type 2 has an invalid length.
[  900.758997][T21565] netlink: 'syz.2.4714': attribute type 39 has an invalid length.
[  901.343531][T21572] netlink: 'syz.3.4717': attribute type 2 has an invalid length.
[  901.374436][T21572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4717'.
[  901.420050][T21575] netlink: 'syz.1.4720': attribute type 3 has an invalid length.
[  901.433911][T21575] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4720'.
[  903.089588][T21626] netlink: 'syz.1.4730': attribute type 2 has an invalid length.
[  903.875594][T21640] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4735'.
[  903.913507][T21641] delete_channel: no stack
[  903.929532][T21641] delete_channel: no stack
[  903.988347][T21643] sctp: [Deprecated]: syz.4.4736 (pid 21643) Use of struct sctp_assoc_value in delayed_ack socket option.
[  903.988347][T21643] Use struct sctp_sack_info instead
[  904.122702][T21649] netlink: 'syz.3.4738': attribute type 10 has an invalid length.
[  904.136170][T21649] team0: Device wg1 is of different type
[  904.191845][T21644] delete_channel: no stack
[  904.390178][T21651] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4740'.
[  904.450933][T21654] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.4741'.
[  904.974435][T21669] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4744'.
[  905.095530][T21669] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4744'.
[  905.197922][T21679] netlink: 'syz.1.4747': attribute type 2 has an invalid length.
[  906.366287][T21699] can: request_module (can-proto-0) failed.
[  907.297995][T21723] netlink: 'syz.3.4761': attribute type 29 has an invalid length.
[  907.485929][T21723] netlink: 'syz.3.4761': attribute type 29 has an invalid length.
[  907.529703][T21724] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4760'.
[  908.554403][T21752] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4768'.
[  908.956435][T21759] netlink: 'syz.3.4769': attribute type 3 has an invalid length.
[  908.983442][T21759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4769'.
[  911.942471][T21791] netlink: 'syz.1.4779': attribute type 39 has an invalid length.
[  912.052457][T21794] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4780'.
[  912.233624][T21794] netlink: 'syz.2.4780': attribute type 29 has an invalid length.
[  912.266608][T21794] netlink: 'syz.2.4780': attribute type 29 has an invalid length.
[  912.290000][T21807] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.4783'.
[  912.321447][T21807] netlink: zone id is out of range
[  912.328218][T21807] netlink: zone id is out of range
[  912.362267][T21807] netlink: zone id is out of range
[  912.367624][T21807] netlink: zone id is out of range
[  912.394665][T21807] netlink: zone id is out of range
[  912.440987][T21807] netlink: zone id is out of range
[  912.447042][T21807] netlink: zone id is out of range
[  912.471054][T21807] netlink: zone id is out of range
[  912.477333][T21807] netlink: zone id is out of range
[  912.511119][T21807] netlink: zone id is out of range
[  912.878347][T21813] netlink: 'syz.3.4785': attribute type 39 has an invalid length.
[  913.237700][T21822] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.4787'.
[  913.298938][T21824] netlink: 'syz.2.4789': attribute type 11 has an invalid length.
[  913.311181][T21824] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4789'.
[  913.335085][T21828] netlink: 'syz.0.4790': attribute type 10 has an invalid length.
[  913.345591][T21828] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4790'.
[  913.928499][T21823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  914.273510][T21840] device syzkaller0 entered promiscuous mode
[  914.319779][T21850] netlink: 'syz.3.4796': attribute type 10 has an invalid length.
[  914.810032][T21865] netlink: 'syz.2.4800': attribute type 29 has an invalid length.
[  915.213652][T21879] netlink: 'syz.1.4803': attribute type 4 has an invalid length.
[  915.231144][T21879] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4803'.
[  915.480405][T21883] netlink: 'syz.1.4804': attribute type 3 has an invalid length.
[  915.488443][T21883] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4804'.
[  916.638840][T21865] netlink: 'syz.2.4800': attribute type 29 has an invalid length.
[  917.050941][T21900] netlink: 'syz.0.4806': attribute type 2 has an invalid length.
[  917.956392][T21908] device syzkaller0 entered promiscuous mode
[  920.008217][T21931] netlink: 'syz.4.4815': attribute type 10 has an invalid length.
[  920.018281][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4815'.
[  920.031816][T21931] device dummy0 entered promiscuous mode
[  920.039083][T21931] bridge0: port 2(dummy0) entered blocking state
[  920.047787][T21931] bridge0: port 2(dummy0) entered disabled state
[  920.066425][T21931] bridge0: port 2(dummy0) entered blocking state
[  920.072896][T21931] bridge0: port 2(dummy0) entered forwarding state
[  920.087639][T21940] netlink: 'syz.1.4818': attribute type 21 has an invalid length.
[  920.100977][T21940] netlink: 'syz.1.4818': attribute type 6 has an invalid length.
[  920.114439][T21940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4818'.
[  920.539771][T21952] netlink: 'syz.0.4820': attribute type 10 has an invalid length.
[  920.776080][T21962] netlink: 'syz.3.4823': attribute type 2 has an invalid length.
[  921.078117][T21967] device syzkaller0 entered promiscuous mode
[  924.587165][T22010] netlink: 'syz.1.4837': attribute type 1 has an invalid length.
[  924.645834][T22010] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4837'.
[  924.750565][T22019] netlink: 'syz.0.4840': attribute type 3 has an invalid length.
[  924.776524][T22019] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4840'.
[  924.916990][T22033] netlink: 'syz.3.4841': attribute type 2 has an invalid length.
[  926.694041][T22072] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4851'.
[  927.163207][T22085] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.4856'.
[  927.198012][T22089] netlink: 'syz.3.4858': attribute type 10 has an invalid length.
[  927.211075][T22089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4858'.
[  927.266117][T22089] device ipvlan1 entered promiscuous mode
[  927.460076][T22089] bridge0: port 2(ipvlan1) entered blocking state
[  927.528819][T22089] bridge0: port 2(ipvlan1) entered disabled state
[  927.666083][T22089] net_ratelimit: 139 callbacks suppressed
[  927.666102][T22089] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  927.871339][T22099] netlink: 'syz.1.4857': attribute type 2 has an invalid length.
[  927.889925][T22097] netlink: 'syz.4.4860': attribute type 39 has an invalid length.
[  929.192154][T22118] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4866'.
[  929.269765][T22118] delete_channel: no stack
[  930.399421][T22140] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4871'.
[  930.598226][T22152] netlink: 'syz.2.4873': attribute type 2 has an invalid length.
[  931.268945][T22158] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4875'.
[  931.330789][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  931.337220][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  931.897360][T22173] netlink: 'syz.0.4881': attribute type 3 has an invalid length.
[  931.934391][T22173] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4881'.
[  932.053225][T22178] netlink: 'syz.4.4879': attribute type 10 has an invalid length.
[  932.383234][T22178] device geneve0 entered promiscuous mode
[  932.479618][T22178] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  932.611737][T22189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4884'.
[  932.637827][T22189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4884'.
[  932.659904][T22189] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4884'.
[  932.681958][T22189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4884'.
[  932.701009][T22189] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4884'.
[  932.728865][T22189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4884'.
[  932.759856][T22189] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4884'.
[  932.939613][T22203] netlink: 'syz.4.4887': attribute type 10 has an invalid length.
[  932.985766][T22203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4887'.
[  933.253641][T22214] netlink: 'syz.0.4890': attribute type 2 has an invalid length.
[  933.674998][T22216] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4892'.
[  933.767259][T22216] delete_channel: no stack
[  934.554048][T22236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  934.561589][T22236] IPv6: NLM_F_CREATE should be set when creating new route
[  934.569271][T22236] IPv6: NLM_F_CREATE should be set when creating new route
[  934.576806][T22236] IPv6: NLM_F_CREATE should be set when creating new route
[  935.009985][T22246] netlink: 'syz.0.4903': attribute type 3 has an invalid length.
[  935.176420][T22253] delete_channel: no stack
[  935.335531][T22257] netlink: 'syz.3.4906': attribute type 2 has an invalid length.
[  935.518280][T22265] delete_channel: no stack
[  936.360593][T22298] netlink: 'syz.2.4919': attribute type 1 has an invalid length.
[  937.258512][T22322] __nla_validate_parse: 6 callbacks suppressed
[  937.258544][T22322] netlink: 175 bytes leftover after parsing attributes in process `syz.1.4925'.
[  937.356063][T22324] tap0: tun_chr_ioctl cmd 1074025677
[  937.390686][T22324] tap0: linktype set to 823
[  937.582423][T22334] netlink: 'syz.3.4928': attribute type 2 has an invalid length.
[  937.669845][T22330] netlink: 'syz.4.4927': attribute type 3 has an invalid length.
[  937.674290][T22332] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.4929'.
[  937.679068][T22330] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4927'.
[  937.761031][T22332] openvswitch: netlink: Flow actions attr not present in new flow.
[  938.357570][T22339] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4931'.
[  938.511817][T22344] netlink: 'syz.2.4931': attribute type 10 has an invalid length.
[  938.614869][T22344] device bond0 left promiscuous mode
[  938.620286][T22344] device bond_slave_0 left promiscuous mode
[  938.629090][T22344] device bond_slave_1 left promiscuous mode
[  938.635380][T22344] device netdevsim0 left promiscuous mode
[  938.651369][T22344] device bridge_slave_1 left promiscuous mode
[  938.657880][T22344] bridge0: port 3(bond0) entered disabled state
[  938.879982][T22359] sock: sock_timestamping_bind_phc: sock not bind to device
[  938.940472][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4935'.
[  938.975748][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'.
[  938.990907][T22353] netlink: 33 bytes leftover after parsing attributes in process `syz.0.4935'.
[  939.031751][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'.
[  939.081006][T22353] netlink: 33 bytes leftover after parsing attributes in process `syz.0.4935'.
[  939.154657][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4935'.
[  939.244034][T22364] device syzkaller0 entered promiscuous mode
[  940.342232][T22386] netlink: 'syz.4.4944': attribute type 2 has an invalid length.
[  940.373084][T22387] netlink: 'syz.0.4941': attribute type 10 has an invalid length.
[  940.435816][T22391] netlink: 'syz.0.4941': attribute type 10 has an invalid length.
[  940.625083][T22391] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  941.085089][T22416] netlink: 'syz.3.4950': attribute type 2 has an invalid length.
[  942.479480][T22409] bridge0: port 3(veth0_to_bond) entered blocking state
[  942.491174][T22409] bridge0: port 3(veth0_to_bond) entered disabled state
[  942.503270][T22409] device veth0_to_bond entered promiscuous mode
[  942.539265][T22408] __nla_validate_parse: 2 callbacks suppressed
[  942.539284][T22408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4946'.
[  942.565499][T22408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4946'.
[  942.607273][T22408] netlink: 33 bytes leftover after parsing attributes in process `syz.1.4946'.
[  942.773029][T22437] netlink: 'syz.3.4957': attribute type 2 has an invalid length.
[  943.260195][T22451] netlink: 175 bytes leftover after parsing attributes in process `syz.2.4961'.
[  943.423140][T22454] netlink: 'syz.3.4962': attribute type 3 has an invalid length.
[  944.188982][T22488] netlink: 'syz.2.4972': attribute type 2 has an invalid length.
[  944.211259][T22478] device bridge_slave_0 left promiscuous mode
[  944.231172][T22478] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.778576][T22493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4971'.
[  944.802537][T22493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4971'.
[  944.817971][T22493] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4971'.
[  944.831305][T22503] netlink: 'syz.2.4974': attribute type 21 has an invalid length.
[  945.096454][T22511] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4976'.
[  946.536288][T22531] netlink: 'syz.1.4981': attribute type 2 has an invalid length.
[  946.551060][T22531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4981'.
[  946.744620][T22540] netlink: 'syz.3.4983': attribute type 10 has an invalid length.
[  946.998148][T22540] bond0: (slave team0): Releasing backup interface
[  947.578897][T22540] team0 (unregistering): Port device team_slave_0 removed
[  947.620670][T22540] team0 (unregistering): Port device team_slave_1 removed
[  948.397638][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'.
[  948.418916][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4989'.
[  948.429293][T22567] netlink: 33 bytes leftover after parsing attributes in process `syz.2.4989'.
[  949.140130][T22590] netlink: 'syz.4.4995': attribute type 3 has an invalid length.
[  949.181277][T22590] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4995'.
[  949.228152][T22593] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.4997'.
[  950.342019][T22594] netlink: 'syz.4.4995': attribute type 10 has an invalid length.
[  950.360131][T22594] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4995'.
[  950.438385][T22604] netlink: 'syz.4.4999': attribute type 1 has an invalid length.
[  950.446286][T22604] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4999'.
[  950.584193][T22612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5000'.
[  950.604868][T22608] netlink: 8183 bytes leftover after parsing attributes in process `syz.3.5001'.
[  950.617905][T22612] netlink: 'syz.2.5000': attribute type 12 has an invalid length.
[  950.658262][T22612] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5000'.
[  952.693841][T22652] netlink: 'syz.0.5015': attribute type 3 has an invalid length.
[  953.683350][T22664] device sit0 left promiscuous mode
[  954.122982][T22696] __nla_validate_parse: 1 callbacks suppressed
[  954.122997][T22696] netlink: 125520 bytes leftover after parsing attributes in process `syz.0.5022'.
[  954.523690][T22703] netlink: 'syz.4.5025': attribute type 29 has an invalid length.
[  954.560243][T22703] netlink: 'syz.4.5025': attribute type 29 has an invalid length.
[  954.899646][T22710] netlink: 'syz.1.5028': attribute type 21 has an invalid length.
[  954.959452][T22710] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  955.011153][T22719] netlink: 'syz.2.5029': attribute type 27 has an invalid length.
[  955.027884][T22719] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5029'.
[  955.540446][T22745] netlink: 'syz.4.5037': attribute type 29 has an invalid length.
[  955.572649][T22745] netlink: 'syz.4.5037': attribute type 29 has an invalid length.
[  955.765784][T22754] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5041'.
[  955.804413][T22755] netlink: 'syz.3.5042': attribute type 21 has an invalid length.
[  955.822495][T22755] netlink: 'syz.3.5042': attribute type 1 has an invalid length.
[  955.831025][T22755] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5042'.
[  955.953311][T22758] netlink: 'syz.0.5043': attribute type 11 has an invalid length.
[  956.017261][T22758] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5043'.
[  956.716861][T22769] netlink: 'syz.3.5047': attribute type 10 has an invalid length.
[  956.725228][T22769] netlink: 'syz.3.5047': attribute type 19 has an invalid length.
[  956.739744][T22769] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5047'.
[  956.757132][T22776] device sit0 entered promiscuous mode
[  957.025144][T22781] netlink: 'syz.1.5050': attribute type 33 has an invalid length.
[  957.040910][T22781] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5050'.
[  957.058717][T22781] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  957.101654][T22781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  957.181721][T22794] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5052'.
[  957.202263][T22795] netlink: 'syz.2.5053': attribute type 17 has an invalid length.
[  957.210266][T22795] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5053'.
[  957.539511][T22807] syzkaller1: tun_chr_ioctl cmd 2147767507
[  957.855605][T22824] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5060'.
[  958.547368][T22827] device hsr_slave_0 left promiscuous mode
[  958.569410][T22837] sock: sock_set_timeout: `syz.0.5064' (pid 22837) tries to set negative timeout
[  958.798451][T22827] device hsr_slave_1 left promiscuous mode
[  959.828740][T22841] netlink: 'syz.1.5062': attribute type 10 has an invalid length.
[  960.419099][T22884] __nla_validate_parse: 1 callbacks suppressed
[  960.419117][T22884] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.5078'.
[  960.698307][T22881] netlink: 'syz.1.5077': attribute type 9 has an invalid length.
[  960.731620][T22881] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.5077'.
[  961.649033][T22931] netlink: 'syz.3.5093': attribute type 12 has an invalid length.
[  961.680064][T22931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5093'.
[  961.713094][T22929] netlink: 'syz.2.5090': attribute type 3 has an invalid length.
[  961.738151][T22929] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.5090'.
[  962.059900][T22955] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.5099'.
[  962.281663][T22965] device syzkaller0 entered promiscuous mode
[  962.393721][T22970] netlink: 'syz.1.5104': attribute type 21 has an invalid length.
[  962.412169][T22974] netlink: 'syz.0.5105': attribute type 19 has an invalid length.
[  962.466429][T22974] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5105'.
[  965.759192][T22986] sock: sock_timestamping_bind_phc: sock not bind to device
[  966.620097][T22987] delete_channel: no stack
[  968.670030][T22974] netlink: 'syz.0.5105': attribute type 2 has an invalid length.
[  968.681058][T22974] netlink: 'syz.0.5105': attribute type 8 has an invalid length.
[  968.688822][T22974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5105'.
[  968.721477][T22976] netlink: 'syz.0.5105': attribute type 2 has an invalid length.
[  968.729229][T22976] netlink: 'syz.0.5105': attribute type 8 has an invalid length.
[  968.744021][T22976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5105'.
[  969.707744][T23032] netlink: 'syz.0.5122': attribute type 3 has an invalid length.
[  969.794569][T23032] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5122'.
[  970.933946][T23078] netlink: 'syz.0.5131': attribute type 3 has an invalid length.
[  971.022679][T23078] netlink: 'syz.0.5131': attribute type 1 has an invalid length.
[  971.087717][T23078] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.5131'.
[  971.364979][T23088] netlink: 'syz.4.5134': attribute type 10 has an invalid length.
[  971.396277][T23088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5134'.
[  971.409639][T23091] netlink: 'syz.0.5136': attribute type 12 has an invalid length.
[  971.422210][T23091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5136'.
[  971.476892][T23093] netlink: 'syz.0.5136': attribute type 29 has an invalid length.
[  972.502231][T23127] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5149'.
[  972.991571][T23154] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5155'.
[  973.424451][T23161] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  973.575587][T23163] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5157'.
[  973.613783][T23154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  973.658910][T23154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  973.706407][T23154] bond0 (unregistering): Released all slaves
[  973.740135][T23157] validate_nla: 4 callbacks suppressed
[  973.740242][T23157] netlink: 'syz.0.5156': attribute type 1 has an invalid length.
[  973.754736][T23157] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.5156'.
[  973.776733][ T4326] bridge0: port 3(veth0_to_bond) entered disabled state
[  974.146855][T23170] delete_channel: no stack
[  974.277915][T23201] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5165'.
[  974.311353][T23201] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  974.372914][T23201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  974.595223][T23215] netlink: 'syz.4.5168': attribute type 10 has an invalid length.
[  974.626623][T23219] netlink: 'syz.0.5171': attribute type 21 has an invalid length.
[  974.638596][T23219] netlink: 'syz.0.5171': attribute type 20 has an invalid length.
[  974.652253][T23221] netlink: 'syz.0.5171': attribute type 21 has an invalid length.
[  974.660083][T23221] netlink: 'syz.0.5171': attribute type 20 has an invalid length.
[  975.021597][T23236] netlink: 'syz.3.5173': attribute type 6 has an invalid length.
[  975.023614][T23232] netlink: 'syz.4.5175': attribute type 3 has an invalid length.
[  975.086812][T23232] netlink: 'syz.4.5175': attribute type 1 has an invalid length.
[  975.116397][T23232] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.5175'.
[  975.538916][T23264] netlink: 'syz.0.5185': attribute type 11 has an invalid length.
[  975.570942][T23264] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.5185'.
[  975.638756][T23271] IPv6: NLM_F_CREATE should be specified when creating new route
[  975.771111][T23271] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5181'.
[  978.551434][T23340] netlink: 'syz.4.5201': attribute type 1 has an invalid length.
[  978.577817][T23340] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.5201'.
[  980.788634][T23380] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5211'.
[  981.422456][T23387] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5213'.
[  981.456992][T23387] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  981.554590][T23399] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5215'.
[  982.407202][T14705] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  983.017987][T23454] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5228'.
[  983.034298][T23456] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.5229'.
[  983.367378][T23473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5232'.
[  983.394552][T23472] netlink: 'syz.3.5234': attribute type 7 has an invalid length.
[  984.069670][T23484] netlink: 'syz.0.5237': attribute type 10 has an invalid length.
[  984.095554][T23484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5237'.
[  984.124161][T23484] device veth0_vlan left promiscuous mode
[  984.130127][T23484] device veth0_vlan entered promiscuous mode
[  984.164414][T23486] netlink: 'syz.0.5237': attribute type 1 has an invalid length.
[  984.210031][T23486] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5237'.
[  984.286761][T23484] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  984.425045][T20694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  984.444795][T20694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  984.491418][T20694] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  984.638446][T23490] device syzkaller0 entered promiscuous mode
[  984.776555][T23497] netlink: 'syz.3.5241': attribute type 10 has an invalid length.
[  984.818776][T23497] device syz_tun entered promiscuous mode
[  984.880691][T23497] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  985.898178][T23527] netlink: 'syz.1.5246': attribute type 2 has an invalid length.
[  985.906744][T23529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5247'.
[  985.955749][T23527] netlink: 'syz.1.5246': attribute type 8 has an invalid length.
[  985.985006][T23527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5246'.
[  986.037727][T23529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5247'.
[  986.074082][T23539] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5250'.
[  986.089998][T23531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5247'.
[  986.148761][T23532] netlink: 'syz.1.5246': attribute type 2 has an invalid length.
[  986.197118][T23532] netlink: 'syz.1.5246': attribute type 8 has an invalid length.
[  986.240889][T23532] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5246'.
[  986.335686][T23545] device pim6reg1 entered promiscuous mode
[  987.522079][T23568] batadv_slave_0: mtu less than device minimum
[  988.255598][T23597] netlink: 'syz.4.5265': attribute type 3 has an invalid length.
[  988.290868][T23597] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5265'.
[  990.953032][T23695] netlink: 'syz.3.5295': attribute type 29 has an invalid length.
[  990.967277][T23695] netlink: 'syz.3.5295': attribute type 29 has an invalid length.
[  990.983346][T23695] netlink: 'syz.3.5295': attribute type 29 has an invalid length.
[  990.995177][T23695] netlink: 'syz.3.5295': attribute type 29 has an invalid length.
[  991.019213][T23695] netlink: 'syz.3.5295': attribute type 29 has an invalid length.
[  991.193655][T23704] netlink: 'syz.1.5299': attribute type 1 has an invalid length.
[  991.238419][T23704] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.5299'.
[  991.297735][T23706] netlink: 'syz.1.5299': attribute type 2 has an invalid length.
[  991.317435][T23706] netlink: 'syz.1.5299': attribute type 8 has an invalid length.
[  991.332240][T23706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5299'.
[  991.438329][T23711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5301'.
[  991.447912][T23711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5301'.
[  991.458178][T23710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5301'.
[  991.480941][T23711] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5301'.
[  991.510435][T23710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5301'.
[  991.585612][T14705] Bluetooth: hci5: ISO packet for unknown connection handle 0
[  992.763503][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[  992.769871][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[  992.909207][T23757] netlink: 'syz.3.5314': attribute type 7 has an invalid length.
[  993.016304][T23757] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5314'.
[  993.078996][T23773] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5316'.
[  993.213772][T23776] netlink: 'syz.4.5318': attribute type 15 has an invalid length.
[  993.300502][T23776] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5318'.
[  993.391162][T14705] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  995.400971][ T4281] Bluetooth: hci1: command 0x0409 tx timeout
[  996.709053][T23811] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5328'.
[  997.268883][T23825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5332'.
[  997.304116][T23825] validate_nla: 1 callbacks suppressed
[  997.304128][T23825] netlink: 'syz.1.5332': attribute type 2 has an invalid length.
[  997.350046][T23825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5332'.
[  997.360311][T23827] netlink: 'syz.4.5333': attribute type 39 has an invalid length.
[  997.510913][T23827] device hsr_slave_1 left promiscuous mode
[  998.046442][T23859] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  998.077338][T23865] device wlan1 entered promiscuous mode
[  998.096469][T23859] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4
[  998.221653][T23859] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s
[  998.953622][T23889] netlink: 'syz.0.5349': attribute type 10 has an invalid length.
[  999.014788][T23888] netlink: 'syz.3.5351': attribute type 10 has an invalid length.
[  999.358494][T23906] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.5356'.
[  999.474386][T23906] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  999.499771][T23906] netlink: 'syz.0.5356': attribute type 8 has an invalid length.
[  999.508149][T23906] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5356'.
[  999.531804][T23908] netlink: 'syz.2.5357': attribute type 25 has an invalid length.
[  999.539799][T23908] netlink: 'syz.2.5357': attribute type 29 has an invalid length.
[  999.551758][T23911] netlink: 'syz.3.5358': attribute type 11 has an invalid length.
[  999.561558][T23909] netlink: 'syz.0.5356': attribute type 2 has an invalid length.
[  999.571866][T23911] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5358'.
[  999.591857][T23909] netlink: 'syz.0.5356': attribute type 8 has an invalid length.
[  999.618440][T23909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5356'.
[  999.660930][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5357'.
[ 1000.878976][T23944] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5368'.
[ 1001.262179][T23957] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5372'.
[ 1002.052863][T23969] bond0: (slave geneve0): Error: Slave device does not support XDP
[ 1002.098534][T23974] netlink: 'syz.1.5377': attribute type 11 has an invalid length.
[ 1002.150993][T23974] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5377'.
[ 1002.165184][T23969] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[ 1002.203961][T23974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1003.576830][T24014] validate_nla: 3 callbacks suppressed
[ 1003.576863][T24014] netlink: 'syz.0.5387': attribute type 1 has an invalid length.
[ 1003.868822][T24017] device syzkaller0 entered promiscuous mode
[ 1003.955527][T24022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5390'.
[ 1006.420943][T24022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5390'.
[ 1006.430211][T24031] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.5392'.
[ 1006.459790][T24033] netlink: 'syz.0.5393': attribute type 17 has an invalid length.
[ 1006.470889][T24033] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5393'.
[ 1006.852201][T14705] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 1010.629645][T24096] netlink: 'syz.1.5408': attribute type 10 has an invalid length.
[ 1010.764625][T24096] team0: Port device wlan1 added
[ 1010.934617][T24109] device lo entered promiscuous mode
[ 1010.956218][T24109] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1011.229405][T24122] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.5415'.
[ 1011.237829][T24120] netlink: 'syz.3.5414': attribute type 25 has an invalid length.
[ 1011.260352][T24120] netlink: 'syz.3.5414': attribute type 29 has an invalid length.
[ 1011.391232][T24127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5417'.
[ 1011.400365][T24127] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5417'.
[ 1011.563478][T24132] netlink: 'syz.1.5416': attribute type 10 has an invalid length.
[ 1011.788681][T24142] netlink: 'syz.2.5419': attribute type 10 has an invalid length.
[ 1011.801453][T24142] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.5419'.
[ 1011.963293][T24147] delete_channel: no stack
[ 1011.979273][T24149] netlink: 103 bytes leftover after parsing attributes in process `syz.0.5423'.
[ 1012.109693][T24151] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.5424'.
[ 1012.259886][T24151] netlink: 'syz.3.5424': attribute type 2 has an invalid length.
[ 1012.273371][T24151] netlink: 'syz.3.5424': attribute type 8 has an invalid length.
[ 1012.283934][T24151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5424'.
[ 1012.300047][T24158] netlink: 'syz.0.5426': attribute type 21 has an invalid length.
[ 1012.319794][T24158] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5426'.
[ 1012.340395][T24156] netlink: 'syz.3.5424': attribute type 2 has an invalid length.
[ 1012.356473][T24156] netlink: 'syz.3.5424': attribute type 8 has an invalid length.
[ 1012.387537][T24156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5424'.
[ 1017.110309][T24284] validate_nla: 3 callbacks suppressed
[ 1017.110326][T24284] netlink: 'syz.3.5458': attribute type 4 has an invalid length.
[ 1017.178651][T24284] netlink: 'syz.3.5458': attribute type 7 has an invalid length.
[ 1017.228443][T24284] netlink: 194740 bytes leftover after parsing attributes in process `syz.3.5458'.
[ 1017.575869][T24294] netlink: 'syz.3.5460': attribute type 3 has an invalid length.
[ 1017.617387][T24294] netlink: 42732 bytes leftover after parsing attributes in process `syz.3.5460'.
[ 1017.915916][T24314] netlink: 'syz.2.5465': attribute type 3 has an invalid length.
[ 1017.943149][T24314] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5465'.
[ 1018.317710][T24332] netlink: 'syz.1.5470': attribute type 39 has an invalid length.
[ 1018.381411][T24332] device veth0_macvtap left promiscuous mode
[ 1019.675241][T24374] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5482'.
[ 1020.591647][T24400] netlink: 'syz.3.5491': attribute type 16 has an invalid length.
[ 1020.631778][T24400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5491'.
[ 1020.704267][T24405] netlink: 'syz.3.5491': attribute type 2 has an invalid length.
[ 1020.789017][T24405] netlink: 'syz.3.5491': attribute type 1 has an invalid length.
[ 1020.880944][T24405] netlink: 'syz.3.5491': attribute type 4 has an invalid length.
[ 1020.888777][T24405] netlink: 'syz.3.5491': attribute type 6 has an invalid length.
[ 1020.974597][T24405] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.5491'.
[ 1022.109956][T24457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5505'.
[ 1022.141650][T24457] tc_dump_action: action bad kind
[ 1022.547730][T24475] validate_nla: 2 callbacks suppressed
[ 1022.547748][T24475] netlink: 'syz.2.5509': attribute type 3 has an invalid length.
[ 1022.851410][T24475] netlink: 'syz.2.5509': attribute type 1 has an invalid length.
[ 1025.292935][T24501] netlink: 'syz.3.5517': attribute type 16 has an invalid length.
[ 1025.320986][T24501] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5517'.
[ 1025.343841][T24503] netlink: 'syz.4.5519': attribute type 29 has an invalid length.
[ 1025.409407][T24501] netlink: 'syz.3.5517': attribute type 2 has an invalid length.
[ 1025.442528][T24501] netlink: 'syz.3.5517': attribute type 1 has an invalid length.
[ 1025.451369][T24503] netlink: 'syz.4.5519': attribute type 29 has an invalid length.
[ 1025.487002][T24501] netlink: 'syz.3.5517': attribute type 4 has an invalid length.
[ 1025.536255][T24501] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.5517'.
[ 1025.565482][T24506] netlink: 'syz.4.5519': attribute type 29 has an invalid length.
[ 1025.648540][T24503] netlink: 'syz.4.5519': attribute type 29 has an invalid length.
[ 1025.758124][T24510] can: request_module (can-proto-0) failed.
[ 1025.802642][T24515] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5520'.
[ 1025.972082][T24515] netlink: 15990 bytes leftover after parsing attributes in process `syz.1.5520'.
[ 1026.485328][T24537] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.5527'.
[ 1026.986297][T24552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5529'.
[ 1027.290542][T24563] device syzkaller0 left promiscuous mode
[ 1027.315978][T24565] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.5534'.
[ 1027.409951][T24570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5536'.
[ 1028.567876][T24597] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5542'.
[ 1028.597808][T24592] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5542'.
[ 1028.762587][T24599] netlink: zone id is out of range
[ 1028.770134][T24599] netlink: zone id is out of range
[ 1028.777707][T24599] netlink: zone id is out of range
[ 1028.792599][T24599] netlink: zone id is out of range
[ 1028.801288][T24599] netlink: zone id is out of range
[ 1028.809862][T24599] netlink: zone id is out of range
[ 1028.829668][T24599] netlink: zone id is out of range
[ 1028.850377][T24599] netlink: zone id is out of range
[ 1028.864840][T24599] netlink: zone id is out of range
[ 1028.873916][T24599] netlink: zone id is out of range
[ 1029.831243][T24630] device syzkaller0 entered promiscuous mode
[ 1029.871920][T24641] validate_nla: 6 callbacks suppressed
[ 1029.871934][T24641] netlink: 'syz.0.5553': attribute type 17 has an invalid length.
[ 1031.550178][T24676] __nla_validate_parse: 2 callbacks suppressed
[ 1031.550214][T24676] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.5563'.
[ 1032.421546][T24676] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[ 1032.453105][T24676] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[ 1032.521289][T24676] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[ 1033.397561][T24706] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5570'.
[ 1033.469374][T24706] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[ 1033.521131][T24706] CPU: 1 PID: 24706 Comm: syz.4.5570 Not tainted syzkaller #0
[ 1033.528665][T24706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1033.538754][T24706] Call Trace:
[ 1033.542055][T24706]  <TASK>
[ 1033.544998][T24706]  dump_stack_lvl+0x188/0x24e
[ 1033.549698][T24706]  ? show_regs_print_info+0x12/0x12
[ 1033.554927][T24706]  ? load_image+0x410/0x410
[ 1033.559471][T24706]  sysfs_warn_dup+0x8a/0xa0
[ 1033.564018][T24706]  sysfs_do_create_link_sd+0xc0/0x110
[ 1033.569431][T24706]  device_add+0x83b/0x1050
[ 1033.573896][T24706]  wiphy_register+0x1d8b/0x2aa0
[ 1033.578797][T24706]  ? cfg80211_event_work+0x40/0x40
[ 1033.583935][T24706]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1033.590102][T24706]  ieee80211_register_hw+0x2d48/0x39f0
[ 1033.595576][T24706]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1033.601772][T24706]  ? ieee80211_register_hw+0xf61/0x39f0
[ 1033.605787][T24719] netlink: 'syz.1.5574': attribute type 3 has an invalid length.
[ 1033.607330][T24706]  ? ieee80211_register_hw+0xf61/0x39f0
[ 1033.616667][T24720] netlink: 'syz.1.5574': attribute type 3 has an invalid length.
[ 1033.620585][T24706]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1033.633961][T24706]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 1033.639895][T24706]  ? __debug_object_init+0xed/0x440
[ 1033.645125][T24706]  ? memset+0x1e/0x40
[ 1033.649111][T24706]  ? __hrtimer_init+0x189/0x270
[ 1033.653968][T24706]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[ 1033.659699][T24706]  ? memcpy+0x3c/0x60
[ 1033.663684][T24706]  hwsim_new_radio_nl+0xab7/0xc90
[ 1033.668719][T24706]  genl_family_rcv_msg_doit+0x22f/0x350
[ 1033.674270][T24706]  ? end_current_label_crit_section+0x170/0x170
[ 1033.680514][T24706]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[ 1033.686413][T24706]  ? bpf_lsm_capable+0x5/0x10
[ 1033.691096][T24706]  ? security_capable+0x85/0xb0
[ 1033.695955][T24706]  genl_rcv_msg+0x601/0x790
[ 1033.700467][T24706]  ? genl_bind+0x360/0x360
[ 1033.704885][T24706]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[ 1033.711222][T24706]  netlink_rcv_skb+0x1ef/0x440
[ 1033.715988][T24706]  ? genl_bind+0x360/0x360
[ 1033.720406][T24706]  ? netlink_ack+0x1160/0x1160
[ 1033.725179][T24706]  ? down_read+0x1a8/0x2d0
[ 1033.729591][T24706]  genl_rcv+0x24/0x40
[ 1033.733573][T24706]  netlink_unicast+0x7ad/0x920
[ 1033.738344][T24706]  netlink_sendmsg+0x8ad/0xbd0
[ 1033.743115][T24706]  ? netlink_getsockopt+0x550/0x550
[ 1033.748312][T24706]  ? apparmor_socket_sendmsg+0x8a/0x330
[ 1033.753860][T24706]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[ 1033.759141][T24706]  ? security_socket_sendmsg+0x7c/0xa0
[ 1033.764595][T24706]  ? netlink_getsockopt+0x550/0x550
[ 1033.769792][T24706]  ____sys_sendmsg+0x5ed/0x9a0
[ 1033.774561][T24706]  ? __sys_sendmsg_sock+0x30/0x30
[ 1033.779590][T24706]  ? __import_iovec+0x306/0x510
[ 1033.784449][T24706]  ? import_iovec+0x6f/0xa0
[ 1033.788952][T24706]  ___sys_sendmsg+0x2a2/0x360
[ 1033.793630][T24706]  ? __sys_sendmsg+0x2a0/0x2a0
[ 1033.798407][T24706]  ? ktime_get+0x7b/0x270
[ 1033.802754][T24706]  __se_sys_sendmsg+0x1c3/0x2b0
[ 1033.807600][T24706]  ? ct_nmi_exit+0x145/0x1c0
[ 1033.812189][T24706]  ? __x64_sys_sendmsg+0x80/0x80
[ 1033.817139][T24706]  ? lockdep_hardirqs_on+0x94/0x140
[ 1033.822337][T24706]  do_syscall_64+0x4c/0xa0
[ 1033.826750][T24706]  ? clear_bhb_loop+0x60/0xb0
[ 1033.831426][T24706]  ? clear_bhb_loop+0x60/0xb0
[ 1033.836101][T24706]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1033.841992][T24706] RIP: 0033:0x7fa34af9de99
[ 1033.846406][T24706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1033.866010][T24706] RSP: 002b:00007fa34be53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1033.874422][T24706] RAX: ffffffffffffffda RBX: 00007fa34b226090 RCX: 00007fa34af9de99
[ 1033.882392][T24706] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1033.890360][T24706] RBP: 00007fa34b033eaf R08: 0000000000000000 R09: 0000000000000000
[ 1033.898326][T24706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1033.906290][T24706] R13: 00007fa34b226128 R14: 00007fa34b226090 R15: 00007ffe0ad7bcc8
[ 1033.914281][T24706]  </TASK>
[ 1033.957414][T24719] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5574'.
[ 1033.969947][T24720] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.5574'.
[ 1034.067645][T24728] netlink: 'syz.0.5576': attribute type 3 has an invalid length.
[ 1034.096499][T24728] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5576'.
[ 1034.620264][T24746] netlink: 'syz.0.5582': attribute type 4 has an invalid length.
[ 1034.890427][T24753] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5585'.
[ 1034.903613][T24753] netlink: 'syz.3.5585': attribute type 10 has an invalid length.
[ 1035.128076][T24756] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.5586'.
[ 1035.793109][T24760] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5587'.
[ 1035.810915][T24760] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1035.835758][T24760] net_ratelimit: 82 callbacks suppressed
[ 1035.835774][T24760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1036.230285][T24774] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.5591'.
[ 1036.315148][T24774] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 1037.347371][T24801] netlink: 'syz.1.5597': attribute type 27 has an invalid length.
[ 1037.407513][T24806] netlink: 'syz.4.5600': attribute type 3 has an invalid length.
[ 1037.437499][T24806] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5600'.
[ 1038.535560][T24859] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.5616'.
[ 1038.616322][T24856] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5614'.
[ 1038.745192][T24863] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.5616'.
[ 1038.938940][T24865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5617'.
[ 1039.289878][T24876] netlink: 'syz.0.5620': attribute type 2 has an invalid length.
[ 1039.306172][T24877] netlink: 'syz.3.5621': attribute type 39 has an invalid length.
[ 1039.397246][T24876] device 0 entered promiscuous mode
[ 1039.423732][T14705] Bluetooth: hci5: unexpected event 0x01 length: 15 > 1
[ 1039.553698][T24884] device syzkaller0 entered promiscuous mode
[ 1039.613257][T24879] device syzkaller0 entered promiscuous mode
[ 1043.405829][T24926] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5634'.
[ 1043.429228][T24926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1043.894614][T24950] netlink: 'syz.3.5642': attribute type 3 has an invalid length.
[ 1043.910319][T24950] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5642'.
[ 1044.361702][T24966] netlink: 'syz.3.5646': attribute type 21 has an invalid length.
[ 1044.915507][T24979] netlink: 'syz.2.5650': attribute type 10 has an invalid length.
[ 1044.924562][T24979] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5650'.
[ 1045.568610][T24997] netlink: 'syz.2.5656': attribute type 25 has an invalid length.
[ 1045.636005][T24997] netlink: 'syz.2.5656': attribute type 29 has an invalid length.
[ 1045.724002][T25004] netlink: 'syz.1.5658': attribute type 14 has an invalid length.
[ 1045.773617][T25004] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.5658'.
[ 1046.055412][T25016] netlink: 'syz.1.5661': attribute type 29 has an invalid length.
[ 1046.108753][T25016] netlink: 'syz.1.5661': attribute type 29 has an invalid length.
[ 1046.126781][T25021] netlink: 'syz.1.5661': attribute type 29 has an invalid length.
[ 1046.146786][T25016] netlink: 'syz.1.5661': attribute type 29 has an invalid length.
[ 1046.198433][T25023] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5663'.
[ 1046.253277][T25025] netlink: 176 bytes leftover after parsing attributes in process `syz.0.5664'.
[ 1046.276475][T25025] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5664'.
[ 1046.383936][T25027] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5666'.
[ 1046.411311][T25027] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 1046.432247][T25027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1046.474355][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5665'.
[ 1046.674427][T24103] tipc: Subscription rejected, illegal request
[ 1047.153705][T25064] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.5671'.
[ 1048.594121][T25102] __nla_validate_parse: 3 callbacks suppressed
[ 1048.594138][T25102] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5687'.
[ 1048.733889][T25105] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.5684'.
[ 1048.766175][T14705] Bluetooth: hci0: ISO packet for unknown connection handle 6
[ 1048.772217][T25114] netlink: 17861 bytes leftover after parsing attributes in process `syz.4.5689'.
[ 1049.537325][T25136] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5693'.
[ 1049.641279][T25140] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.5695'.
[ 1049.915155][T25149] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.5698'.
[ 1051.760985][T25186] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5709'.
[ 1051.770030][T25186] openvswitch: netlink: Message has 6 unknown bytes.
[ 1051.814109][T25163] delete_channel: no stack
[ 1052.285674][T25193] validate_nla: 6 callbacks suppressed
[ 1052.285689][T25193] netlink: 'syz.4.5714': attribute type 2 has an invalid length.
[ 1052.320935][T25193] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5714'.
[ 1052.423616][T25194] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5711'.
[ 1052.706637][T25213] netlink: 'syz.0.5717': attribute type 1 has an invalid length.
[ 1052.739785][T25214] netlink: 'syz.0.5717': attribute type 21 has an invalid length.
[ 1052.775451][T25213] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.5717'.
[ 1053.434412][T25226] netlink: 'syz.4.5721': attribute type 28 has an invalid length.
[ 1053.548265][T25227] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1053.591737][T25227] syzkaller1: linktype set to 786
[ 1053.636208][T25227] device macsec0 entered promiscuous mode
[ 1054.172127][T25239] netlink: 'syz.2.5723': attribute type 39 has an invalid length.
[ 1054.203131][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.209493][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 1056.656393][T25275] netlink: 'syz.0.5731': attribute type 10 has an invalid length.
[ 1056.692198][T25275] __nla_validate_parse: 1 callbacks suppressed
[ 1056.692213][T25275] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5731'.
[ 1057.814462][T25298] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5738'.
[ 1057.840603][T25298] openvswitch: netlink: Message has 6 unknown bytes.
[ 1057.915352][T25301] netlink: 'syz.0.5741': attribute type 10 has an invalid length.
[ 1057.923837][T25301] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5741'.
[ 1057.934628][T25303] netlink: 'syz.0.5741': attribute type 10 has an invalid length.
[ 1057.961031][T25303] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5741'.
[ 1058.628503][T25332] netlink: 463 bytes leftover after parsing attributes in process `syz.3.5749'.
[ 1058.638085][T25328] netlink: 'syz.4.5747': attribute type 10 has an invalid length.
[ 1058.851575][T25339] netlink: 'syz.1.5751': attribute type 10 has an invalid length.
[ 1059.384050][T25331] netlink: 'syz.0.5748': attribute type 16 has an invalid length.
[ 1059.407876][T25331] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5748'.
[ 1059.408248][T25348] netlink: 'syz.1.5754': attribute type 29 has an invalid length.
[ 1059.465041][T25351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5754'.
[ 1059.481077][T25347] netlink: 'syz.1.5754': attribute type 1 has an invalid length.
[ 1059.489106][T25347] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.5754'.
[ 1059.585257][T25348] netlink: 'syz.1.5754': attribute type 29 has an invalid length.
[ 1059.627713][T25355] netlink: 'syz.4.5756': attribute type 1 has an invalid length.
[ 1059.665237][T25355] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.5756'.
[ 1059.680896][T25347] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5754'.
[ 1059.997113][T25364] bridge0: port 2(dummy0) entered disabled state
[ 1060.224341][T25364] device bridge_slave_0 left promiscuous mode
[ 1060.245672][T25364] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.970707][T25378] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1060.981213][T25378] syzkaller1: linktype set to 825
[ 1061.022293][T25384] netlink: 'syz.4.5765': attribute type 21 has an invalid length.
[ 1061.566209][T25411] openvswitch: netlink: Message has 6 unknown bytes.
[ 1063.429136][T25445] __nla_validate_parse: 6 callbacks suppressed
[ 1063.429154][T25445] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.5784'.
[ 1063.567871][T25445] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[ 1063.583277][T25443] can: request_module (can-proto-3) failed.
[ 1063.764791][T25460] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5788'.
[ 1063.800255][T25460] openvswitch: netlink: Message has 6 unknown bytes.
[ 1064.146220][T25480] validate_nla: 11 callbacks suppressed
[ 1064.146255][T25480] netlink: 'syz.0.5793': attribute type 2 has an invalid length.
[ 1064.556472][T25480] device 1 entered promiscuous mode
[ 1065.836419][T25526] netlink: 'syz.2.5808': attribute type 1 has an invalid length.
[ 1065.853533][T25527] netlink: 'syz.2.5808': attribute type 29 has an invalid length.
[ 1065.865961][T25526] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.5808'.
[ 1065.923063][T25527] netlink: 'syz.2.5808': attribute type 29 has an invalid length.
[ 1065.995749][T25526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5808'.
[ 1066.054724][T25526] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5808'.
[ 1066.238050][T25538] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.5812'.
[ 1066.252059][T25538] delete_channel: no stack
[ 1066.262128][T25540] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.5813'.
[ 1066.309901][T25537] device bridge_slave_0 left promiscuous mode
[ 1066.332707][T25537] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1066.609658][T25546] netlink: 'syz.0.5815': attribute type 10 has an invalid length.
[ 1066.744443][T25549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5816'.
[ 1066.776631][T24104] tipc: Subscription rejected, illegal request
[ 1066.837302][T25549] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5816'.
[ 1067.546037][T25582] netlink: 'syz.1.5822': attribute type 2 has an invalid length.
[ 1067.626149][T25582] netlink: 'syz.1.5822': attribute type 8 has an invalid length.
[ 1067.651278][T25582] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.5822'.
[ 1067.661024][T25581] bond0: (slave netdevsim0): Error: Slave device does not support XDP
[ 1067.712197][T25587] netlink: 'syz.3.5825': attribute type 10 has an invalid length.
[ 1067.745650][T25587] device wlan1 left promiscuous mode
[ 1067.765527][T25584] netlink: 'syz.3.5825': attribute type 11 has an invalid length.
[ 1067.823148][T25587] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1067.857459][T25583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1068.107858][T25596] device veth0_to_bond left promiscuous mode
[ 1068.150558][T25596] bridge0: port 3(veth0_to_bond) entered disabled state
[ 1068.232916][T25596] bridge0: port 2(batadv0) entered disabled state
[ 1068.324003][T25596] device bridge_slave_0 left promiscuous mode
[ 1068.343669][T25596] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1068.740309][T25640] netlink: 'syz.1.5839': attribute type 3 has an invalid length.
[ 1068.849415][T25640] __nla_validate_parse: 1 callbacks suppressed
[ 1068.849432][T25640] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5839'.
[ 1069.382075][T25655] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5841'.
[ 1070.954212][T25689] netlink: 'syz.3.5849': attribute type 10 has an invalid length.
[ 1070.962513][T25689] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5849'.
[ 1071.202514][T25704] netlink: 'syz.3.5855': attribute type 2 has an invalid length.
[ 1071.230958][T25704] netlink: 'syz.3.5855': attribute type 8 has an invalid length.
[ 1071.238780][T25704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5855'.
[ 1071.759911][T25731] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.5862'.
[ 1074.564728][T25731] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[ 1074.588446][T25735] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5862'.
[ 1074.622235][T25733] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5861'.
[ 1074.737394][T25741] netlink: 'syz.3.5863': attribute type 2 has an invalid length.
[ 1074.835290][T25740] cgroup: fork rejected by pids controller in /syz3
[ 1074.852292][T25745] netlink: 'syz.4.5865': attribute type 7 has an invalid length.
[ 1074.880919][T25745] netlink: 208404 bytes leftover after parsing attributes in process `syz.4.5865'.
[ 1074.920218][T25747] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.5864'.
[ 1075.225936][T25852] netlink: 'syz.4.5867': attribute type 6 has an invalid length.
[ 1075.407769][T16180] bond0: (slave syz_tun): Releasing backup interface
[ 1075.789638][T25871] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5875'.
[ 1075.814225][T25874] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.5876'.
[ 1075.819861][T25875] netlink: 'syz.4.5878': attribute type 3 has an invalid length.
[ 1075.851198][T25876] netlink: 'syz.4.5878': attribute type 10 has an invalid length.
[ 1075.870096][T25875] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5878'.
[ 1075.909034][T25881] delete_channel: no stack
[ 1075.936892][T25874] netlink: 'syz.1.5876': attribute type 2 has an invalid length.
[ 1075.975648][T25874] netlink: 'syz.1.5876': attribute type 8 has an invalid length.
[ 1076.014438][T25874] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5876'.
[ 1076.791520][T25890] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.5880'.
[ 1076.976328][T10797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.090274][T25899] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1077.100458][T25899] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1077.109346][T25899] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1077.125606][T10797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.150418][T25899] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1077.158118][T25899] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1077.166686][T25899] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1077.407530][T10797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1077.610339][T10797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1078.486603][T25915] netlink: 'syz.2.5887': attribute type 29 has an invalid length.
[ 1078.511056][T10797] device 0 left promiscuous mode
[ 1078.543884][T25915] netlink: 'syz.2.5887': attribute type 29 has an invalid length.
[ 1078.608134][T25915] netlink: 'syz.2.5887': attribute type 29 has an invalid length.
[ 1078.655575][T10797] tipc: Left network mode
[ 1078.680158][T25898] chnl_net:caif_netlink_parms(): no params data found
[ 1078.892872][T25936] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.5891'.
[ 1078.943114][T25939] delete_channel: no stack
[ 1079.052858][T25898] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.066505][T25898] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1079.098977][T25898] device bridge_slave_0 entered promiscuous mode
[ 1079.169041][T25898] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.188727][T25898] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1079.228879][T25898] device bridge_slave_1 entered promiscuous mode
[ 1079.240906][T14705] Bluetooth: hci0: command 0x0409 tx timeout
[ 1079.264547][T25945] netlink: 'syz.1.5893': attribute type 11 has an invalid length.
[ 1079.558055][T25898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1079.635351][T25898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1079.715453][T25965] __nla_validate_parse: 2 callbacks suppressed
[ 1079.715487][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1079.771129][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1079.820692][T25965] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1079.830406][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1079.865963][T25974] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.5898'.
[ 1079.928472][T25965] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1079.989588][T25965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1080.045642][T25965] netlink: 33 bytes leftover after parsing attributes in process `syz.4.5896'.
[ 1080.132403][T25978] netlink: 'syz.2.5898': attribute type 10 has an invalid length.
[ 1080.172231][T25898] team0: Port device team_slave_0 added
[ 1080.206323][T25898] team0: Port device team_slave_1 added
[ 1080.337324][T25997] netlink: 'syz.0.5901': attribute type 29 has an invalid length.
[ 1080.382416][T25898] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1080.398220][T25898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1080.440782][T25898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1080.453090][T26005] netlink: 'syz.0.5901': attribute type 2 has an invalid length.
[ 1080.469176][T25997] netlink: 'syz.0.5901': attribute type 29 has an invalid length.
[ 1080.475742][T26005] netlink: 'syz.0.5901': attribute type 1 has an invalid length.
[ 1080.485113][T26005] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.5901'.
[ 1080.515219][T25999] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5905'.
[ 1080.551715][T25898] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1080.558717][T25898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1080.628314][T25898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1080.686869][T25997] netlink: 'syz.0.5901': attribute type 29 has an invalid length.
[ 1081.062972][T26016] netlink: 'syz.2.5909': attribute type 11 has an invalid length.
[ 1081.349060][T14705] Bluetooth: hci0: command 0x041b tx timeout
[ 1083.411420][T25899] Bluetooth: hci0: command 0x040f tx timeout
[ 1083.872035][T25898] device hsr_slave_0 entered promiscuous mode
[ 1083.906390][T25898] device hsr_slave_1 entered promiscuous mode
[ 1083.943812][T25898] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1083.959226][T25898] Cannot create hsr debugfs directory
[ 1084.635222][T26045] netlink: 'syz.0.5912': attribute type 1 has an invalid length.
[ 1085.137680][T10797] bond0: (slave wlan1): Releasing backup interface
[ 1085.491712][T25899] Bluetooth: hci0: command 0x0419 tx timeout
[ 1086.092347][T10797] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1086.110278][T10797] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1086.150156][T10797] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1086.175062][T10797] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1086.257834][    C0] 
[ 1086.257842][    C0] ================================
[ 1086.257847][    C0] WARNING: inconsistent lock state
[ 1086.257867][    C0] syzkaller #0 Not tainted
[ 1086.257875][    C0] --------------------------------
[ 1086.257879][    C0] inconsistent {INITIAL USE} -> {IN-NMI} usage.
[ 1086.257886][    C0] syz.0.5919/26069 [HC1[1]:SC0[0]:HE0:SE1] takes:
[ 1086.257903][    C0] ffff888057e20218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0
[ 1086.258022][    C0] {INITIAL USE} state was registered at:
[ 1086.258028][    C0]   lock_acquire+0x1bb/0x4a0
[ 1086.258050][    C0]   _raw_spin_lock+0x2a/0x40
[ 1086.258065][    C0]   htab_lock_bucket+0x179/0x2f0
[ 1086.258081][    C0]   htab_map_update_elem+0x21f/0xb20
[ 1086.258097][    C0]   bpf_map_update_value+0x59d/0x670
[ 1086.258115][    C0]   generic_map_update_batch+0x52e/0x7f0
[ 1086.258132][    C0]   bpf_map_do_batch+0x475/0x5f0
[ 1086.258151][    C0]   __sys_bpf+0x6f7/0x780
[ 1086.258168][    C0]   __x64_sys_bpf+0x78/0x90
[ 1086.258185][    C0]   do_syscall_64+0x4c/0xa0
[ 1086.258205][    C0]   entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1086.258227][    C0] irq event stamp: 2904
[ 1086.258233][    C0] hardirqs last  enabled at (2903): [<ffffffff8a400d46>] asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 1086.258258][    C0] hardirqs last disabled at (2904): [<ffffffff8a301d9e>] exc_debug+0x6e/0x130
[ 1086.258281][    C0] softirqs last  enabled at (1492): [<ffffffff814f49cb>] __irq_exit_rcu+0x13b/0x230
[ 1086.258328][    C0] softirqs last disabled at (1337): [<ffffffff814f49cb>] __irq_exit_rcu+0x13b/0x230
[ 1086.258347][    C0] 
[ 1086.258347][    C0] other info that might help us debug this:
[ 1086.258352][    C0]  Possible unsafe locking scenario:
[ 1086.258352][    C0] 
[ 1086.258356][    C0]        CPU0
[ 1086.258360][    C0]        ----
[ 1086.258363][    C0]   lock(&htab->lockdep_key);
[ 1086.258373][    C0]   <Interrupt>
[ 1086.258376][    C0]     lock(&htab->lockdep_key);
[ 1086.258386][    C0] 
[ 1086.258386][    C0]  *** DEADLOCK ***
[ 1086.258386][    C0] 
[ 1086.258390][    C0] no locks held by syz.0.5919/26069.
[ 1086.258397][    C0] 
[ 1086.258397][    C0] stack backtrace:
[ 1086.258402][    C0] CPU: 0 PID: 26069 Comm: syz.0.5919 Not tainted syzkaller #0
[ 1086.258417][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1086.258427][    C0] Call Trace:
[ 1086.258440][    C0]  <#DB>
[ 1086.258447][    C0]  dump_stack_lvl+0x188/0x24e
[ 1086.258470][    C0]  ? show_regs_print_info+0x12/0x12
[ 1086.258497][    C0]  ? print_usage_bug+0x42a/0x690
[ 1086.258519][    C0]  ? verify_lock_unused+0x15/0x140
[ 1086.258541][    C0]  lock_acquire+0x2df/0x4a0
[ 1086.258564][    C0]  ? htab_lock_bucket+0x179/0x2f0
[ 1086.258582][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1086.258602][    C0]  ? look_up_lock_class+0x75/0x140
[ 1086.258620][    C0]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[ 1086.258646][    C0]  _raw_spin_lock+0x2a/0x40
[ 1086.258662][    C0]  ? htab_lock_bucket+0x179/0x2f0
[ 1086.258679][    C0]  htab_lock_bucket+0x179/0x2f0
[ 1086.258698][    C0]  ? htab_lru_map_delete_node+0x610/0x610
[ 1086.258717][    C0]  ? look_up_lock_class+0x75/0x140
[ 1086.258733][    C0]  ? verify_lock_unused+0x15/0x140
[ 1086.258754][    C0]  ? htab_map_hash+0x301/0x6d0
[ 1086.258773][    C0]  htab_map_delete_elem+0x197/0x5c0
[ 1086.258793][    C0]  ? htab_map_update_elem+0xb20/0xb20
[ 1086.258809][    C0]  ? perf_trace_buf_update+0xa8/0x230
[ 1086.258858][    C0]  ? perf_tp_event+0xc10/0xc10
[ 1086.258878][    C0]  ? perf_trace_lock+0x19c/0x390
[ 1086.258895][    C0]  ? perf_trace_buf_alloc+0x300/0x300
[ 1086.258915][    C0]  bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e
[ 1086.258936][    C0]  bpf_overflow_handler+0x50b/0x790
[ 1086.258961][    C0]  ? bpf_overflow_handler+0xd9/0x790
[ 1086.258978][    C0]  ? perf_swevent_overflow+0x230/0x230
[ 1086.258994][    C0]  ? rcu_is_watching+0x11/0xa0
[ 1086.259021][    C0]  ? lock_release+0xcf/0x920
[ 1086.259044][    C0]  ? __perf_event_account_interrupt+0x187/0x280
[ 1086.259068][    C0]  __perf_event_overflow+0x457/0x630
[ 1086.259093][    C0]  perf_swevent_overflow+0x19b/0x230
[ 1086.259114][    C0]  perf_swevent_event+0x458/0x570
[ 1086.259137][    C0]  ? perf_tp_event+0xc10/0xc10
[ 1086.259158][    C0]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[ 1086.259189][    C0]  perf_bp_event+0x311/0x3f0
[ 1086.259214][    C0]  ? perf_event_free_bpf_prog+0x120/0x120
[ 1086.259235][    C0]  ? perf_trace_lock+0xf8/0x390
[ 1086.259267][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1086.259315][    C0]  ? read_lock_is_recursive+0x10/0x10
[ 1086.259339][    C0]  hw_breakpoint_exceptions_notify+0x14d/0x470
[ 1086.259391][    C0]  atomic_notifier_call_chain+0x17a/0x2b0
[ 1086.259409][    C0]  ? atomic_notifier_call_chain+0x2c/0x2b0
[ 1086.259428][    C0]  notify_die+0x141/0x1a0
[ 1086.259454][    C0]  ? srcu_init_notifier_head+0x90/0x90
[ 1086.259479][    C0]  notify_debug+0x20/0x30
[ 1086.259525][    C0]  exc_debug+0xd9/0x130
[ 1086.259547][    C0]  asm_exc_debug+0x1a/0x40
[ 1086.259566][    C0] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40
[ 1086.259589][    C0] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 <f3> a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90
[ 1086.259603][    C0] RSP: 0018:ffffc90003da7d48 EFLAGS: 00050206
[ 1086.259616][    C0] RAX: ffffffff84154f01 RBX: 0000000000000090 RCX: 000000000000000c
[ 1086.259628][    C0] RDX: 0000000000000090 RSI: 0000200000000304 RDI: ffffc90003da7e44
[ 1086.259638][    C0] RBP: 0000000000000000 R08: ffffc90003da7e4f R09: 1ffff920007b4fc9
[ 1086.259649][    C0] R10: dffffc0000000000 R11: fffff520007b4fca R12: 00007fffffffef70
[ 1086.259661][    C0] R13: 0000000000000090 R14: ffffc90003da7dc0 R15: 0000200000000280
[ 1086.259676][    C0]  ? _copy_from_user+0x51/0x170
[ 1086.259697][    C0]  </#DB>
[ 1086.259701][    C0]  <TASK>
[ 1086.259706][    C0]  _copy_from_user+0xf4/0x170
[ 1086.259723][    C0]  __sys_bpf+0x2ea/0x780
[ 1086.259744][    C0]  ? bpf_link_show_fdinfo+0x380/0x380
[ 1086.259773][    C0]  ? lock_chain_count+0x20/0x20
[ 1086.259798][    C0]  __x64_sys_bpf+0x78/0x90
[ 1086.259819][    C0]  do_syscall_64+0x4c/0xa0
[ 1086.259838][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1086.259856][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1086.259876][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1086.259895][    C0] RIP: 0033:0x7f79b019de99
[ 1086.259907][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1086.259920][    C0] RSP: 002b:00007f79b112d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1086.259935][    C0] RAX: ffffffffffffffda RBX: 00007f79b0425fa0 RCX: 00007f79b019de99
[ 1086.259946][    C0] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005
[ 1086.259956][    C0] RBP: 00007f79b0233eaf R08: 0000000000000000 R09: 0000000000000000
[ 1086.259967][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1086.259976][    C0] R13: 00007f79b0426038 R14: 00007f79b0425fa0 R15: 00007ffdb86128e8
[ 1086.259996][    C0]  </TASK>
[ 1086.993262][T26070] __nla_validate_parse: 3 callbacks suppressed
[ 1086.993279][T26070] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.5918'.
[ 1087.413852][T10797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1087.453663][T10797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1087.638156][T10797] bond0 (unregistering): Released all slaves
[ 1087.810020][T25898] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1087.839948][T25898] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1087.849368][T25898] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1087.860319][T25898] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1087.933582][T25898] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1087.949500][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 1087.957403][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 1087.972961][T25898] 8021q: adding VLAN 0 to HW filter on device team0
[ 1087.994558][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 1088.011637][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 1088.022899][T20663] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1088.029988][T20663] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1088.037749][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 1088.046898][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 1088.057526][T20663] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1088.064650][T20663] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1088.075523][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 1088.092987][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 1088.115200][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 1088.128035][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 1088.137887][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 1088.149005][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 1088.158827][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 1088.167970][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 1088.176143][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 1088.185633][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 1088.196063][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 1088.204901][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 1088.216370][T25898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 1088.396105][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 1088.405768][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 1088.418835][T25898] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1088.438506][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 1088.448588][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 1088.469003][T25898] device veth0_vlan entered promiscuous mode
[ 1088.478261][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 1088.486945][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 1088.500157][T25898] device veth1_vlan entered promiscuous mode
[ 1088.508358][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 1088.519183][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 1088.527242][T18986] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 1088.546605][T18992] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 1088.561903][T18992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 1088.580996][T18992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 1088.590308][T25898] device veth0_macvtap entered promiscuous mode
[ 1088.601606][T25898] device veth1_macvtap entered promiscuous mode
[ 1088.616843][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1088.629909][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.641762][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1088.653280][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.664130][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1088.675795][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.686914][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1088.698113][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.710047][T25898] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1088.719818][T10797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 1088.729172][T10797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 1088.739524][T10797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 1088.750627][T10797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 1088.761159][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.772209][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.782553][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.793154][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.803179][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.814317][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.824182][T25898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1088.834785][T25898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1088.846193][T25898] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1088.854525][T10797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 1088.863907][T10797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 1088.874869][T25898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.884485][T25898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.894248][T25898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.904366][T25898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1088.935765][T25898] ieee80211 phy63: Selected rate control algorithm 'minstrel_ht'
[ 1088.962446][T20663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1088.966034][T25898] ieee80211 phy64: Selected rate control algorithm 'minstrel_ht'
[ 1088.973798][T20663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1088.991217][T18992] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 1089.010760][T10797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.018592][T10797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.043531][T20663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready