last executing test programs:

14m0.959874837s ago: executing program 0 (id=1924):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x9)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
sendmsg$kcm(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000a80)="e26248", 0x3}], 0x2}, 0x40050)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
r3 = socket$kcm(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x43}, 0x28)
syz_clone(0x18068011, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0)

13m59.957864541s ago: executing program 0 (id=1926):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x300, 0x808e}, 0x40000100)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc8<s,\xb023Z{\x9f\xc2\x94+e?\x87\x95\x8e\r\t\x0er\x92\xe2\t\xc4S\xd4\xd2\x87.&`\x95\'=0\r\xd2n\xf5\xcd\x9b\x15Oo\xd8Nj0\xe2\xe5A\xb2\xc3\xf7\xc8\xe7 \"+\xd6\x9e\x18\xec\xb7H\xf9\vd\xebE\x9dtI\xe5\xb5\x8e3\x19<\xdeS\xf4\xe6\xba\x0er\xfc]\xcbd@\xe8R#(u\xe1\x9b\xb7\xd5\x82\xab;\xdb\xa2\x9e\xe8W;\x86\x89\x99\xa1\x99\x1b\xbd\xaf\x11\xcf\x1d\xb5n\xe3&\x1b Z|\x18\n/\xe4\x83\xb5\xdd\xed\xd8\xba\xe8\x8d{@\xd1\x00'/432)
r2 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x11, 0x0, 0x0)
r3 = perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000240), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x3, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r5, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x5, &(0x7f0000000c40)=ANY=[@ANYBLOB="180000000effd00100000000040007000701000008"], &(0x7f0000000c80)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x17, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e70574c5747b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095f6c04244ab9967aebec924152abc7d2198f347840882a7b10e5122c1841d81e57b16474bd760d63541fd2d0e743d779cdb8703c383a7f33686db7486e72105e1e0be8c8f1b70f2e113f1acde71d84740d7166713a15523006b4e35a145020f41cd09b3a20d9bc8d1dd6637f5aed17cd2d81760939781788dd6cc991353777562b5f09c19e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r7]}}], 0x18, 0x20048814}, 0x40000d0)
close(0x3)
recvmsg$unix(r8, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)}, 0x40002100)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r9)
syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/ipc\x00')
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x4}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff)

13m59.262729047s ago: executing program 0 (id=1928):
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0)

13m58.973871524s ago: executing program 0 (id=1930):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000f2717ca8bfa400000000000007040000f8ffffffb705000000000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x29, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0)
mkdir(&(0x7f0000000700)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000740)='cpu.idle\x00', 0x2, 0x0)
close(r4)
r6 = socket$kcm(0x2b, 0x1, 0x0)
close(r6)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup=r5, 0xffffffffffffffff, 0x15, 0x12}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x4, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0xb7}]}, &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r7, &(0x7f00000007c0)={&(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca)
setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000880), 0x2cb)
close(r6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f00000005c0)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000640)={r8, &(0x7f0000000680)}, 0x20)
syz_clone(0x160480, 0x0, 0x0, 0x0, 0x0, 0x0)

13m57.530951571s ago: executing program 0 (id=1939):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000840)={'veth0_virt_wifi\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(r1, 0x0, 0x280)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000001110400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000c80), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x8, 0x43, 0x7f, 0x1, 0x1, 0x3b}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

13m56.741991451s ago: executing program 0 (id=1945):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="05000000000000a0030000020000000000000000dfc28050221e96021cf083242f57ce85a7a8c92a366d00ef0a7751879006db3ac50ac918b770ad8aa0f165cf2b01151bd614c0941a50a667d63f2e1daddd13001a50244c0618895f01bbebca436c4662e05ba0998636918d5254144ee650ce6d70de645d5b3296fadd275f7d2b50a5bdb31c2188af2de29fd2a9c256620936ae8c528ef8a989da8c2732df6d84cbe3465e345847aed22dd55319a799c498e43d8e423037604c880aa69d684d", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000d00)=ANY=[], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r2 = perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000f40)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000000240)=ANY=[], 0x0}, 0x94)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x43}, 0x28)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
close(r3)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/101, 0x65}], 0x1}, 0x100)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x60000000, 0xfddf, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x2, 0x11)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001100), 0x174)
syz_clone(0xc0042600, 0x0, 0x0, 0x0, 0x0, 0x0)

13m41.529915947s ago: executing program 32 (id=1945):
r0 = socket$kcm(0x10, 0x3, 0x10)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="05000000000000a0030000020000000000000000dfc28050221e96021cf083242f57ce85a7a8c92a366d00ef0a7751879006db3ac50ac918b770ad8aa0f165cf2b01151bd614c0941a50a667d63f2e1daddd13001a50244c0618895f01bbebca436c4662e05ba0998636918d5254144ee650ce6d70de645d5b3296fadd275f7d2b50a5bdb31c2188af2de29fd2a9c256620936ae8c528ef8a989da8c2732df6d84cbe3465e345847aed22dd55319a799c498e43d8e423037604c880aa69d684d", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0x2000000000000216, &(0x7f0000000d00)=ANY=[], 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x0, 0xc, &(0x7f0000000e40)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94)
r2 = perf_event_open(&(0x7f0000000ec0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
perf_event_open(&(0x7f0000000f40)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000000240)=ANY=[], 0x0}, 0x94)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x43}, 0x28)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$kcm(0x2b, 0x1, 0x0)
close(r3)
r4 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca)
recvmsg$kcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/101, 0x65}], 0x1}, 0x100)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x60000000, 0xfddf, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0xa, 0x2, 0x11)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x8, 0xfffffffffffffffe, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001100), 0x174)
syz_clone(0xc0042600, 0x0, 0x0, 0x0, 0x0, 0x0)

29.340681693s ago: executing program 1 (id=7263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007e000000850000007100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r1, 0x0, 0x28, 0xe80, &(0x7f0000000600)="0000ffffffffa000", &(0x7f0000000640)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)

6.850823215s ago: executing program 2 (id=7360):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000840)={'veth0_virt_wifi\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(r1, 0x0, 0x280)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000110400000020000001000000000000000d01000000050000000000000c020000000a0000000004000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000c80), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x8, 0x43, 0x7f, 0x1, 0x1, 0x3b}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.538674573s ago: executing program 2 (id=7363):
r0 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x0, 0x5, 0x0, 0x0) (async)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r2=>r0}) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000440)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0x65, &(0x7f0000000740)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x28, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8c00, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x37, 0x0, 0x3ff, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup, r1, 0x2c, 0x18, 0x0, @void, @value=r4, @void, @void, r7}, 0x20) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r3, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10) (async)
r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c00)=@o_path={&(0x7f0000000bc0)='./file0\x00', 0x0, 0x2000, r2}, 0x18)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000c80)=@generic={&(0x7f0000000c40)='./file0\x00', 0x0, 0x18}, 0x18) (async)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x7fff, '\x00', r5, r2, 0x2, 0x4, 0x1}, 0x50)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000400000000000000dd04000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000faffffff850000000600000018190000", @ANYRES32=r3, @ANYBLOB='\x00'/14], &(0x7f0000000a40)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x6, '\x00', r8, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000b80)={0x3, 0x6, 0x5}, 0x10, r6, r4, 0x0, &(0x7f0000000dc0)=[r3, r9, r10, r11, r3, r3, r12, r3], 0x0, 0x10, 0x73e6fae1}, 0x94)
r13 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33)

5.88377141s ago: executing program 2 (id=7366):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000f00)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x3, 0x10, &(0x7f0000001100)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000008500000c010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000001180)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.651241766s ago: executing program 2 (id=7369):
r0 = socket$kcm(0xa, 0x5, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3d, 0x3d, 0x9, [@datasec={0x1, 0x3, 0x0, 0xf, 0x1, [{0x4, 0x7, 0x2}, {0x5, 0x51d, 0x9}, {0x1, 0x6, 0x9}], "dd"}, @ptr={0xc, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x5f, 0x30, 0x61, 0x61, 0x2e, 0x0, 0x61]}}, 0x0, 0x61}, 0x28)
r1 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1})
r2 = socket$kcm(0x2b, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) (async)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000a00feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0)
close(r2) (async)
r5 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1})

5.379186282s ago: executing program 4 (id=7371):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x1fffffff}, 0x200000, 0x10, &(0x7f0000001880), 0x143}, 0x48)

5.192317787s ago: executing program 2 (id=7372):
r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000840)={'veth0_virt_wifi\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @link_local})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_subtree(r1, 0x0, 0x280)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1], 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000110400000020000001000000000000000d01000000050000000000000c020000000a000000000a000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xe07e872420dfefca)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000c80), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x8, 0x43, 0x7f, 0x1, 0x1, 0x3b}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.865516906s ago: executing program 2 (id=7373):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000004000000070000000600000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005e6915a7126dc0cf5965e93c3a0f10f5044d65c6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
mkdir(0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x40800)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = getpid()
perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x7f, 0xc2, 0x8, 0x3, 0x0, 0xc5d, 0x8004, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xa}, 0x18201, 0x9, 0x6, 0x5, 0x7fffffffffffffff, 0x80000000, 0x4, 0x0, 0x4, 0x0, 0x8d}, r3, 0x2, r0, 0x1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080))
r4 = socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000300)={&(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x40, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000020}, 0x20000000)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

4.780731428s ago: executing program 1 (id=7265):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x18428, 0x60e9, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)

4.371909819s ago: executing program 4 (id=7376):
perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x9c00, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x626}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800ffffffd0007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.370454699s ago: executing program 1 (id=7377):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1000, 0x0, 0x0, 0x2, 0x9, 0x15c, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="d8000000180081054e81f783db4cb9040a1db00006007c09e8fc55a10a0015000600142603600e1208000600000004010c00040008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290557f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000005, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x5, 0x7, 0x8, 0x0, 0x7ff, 0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x805, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4000, 0x2, 0x4, 0x0, 0x6, 0x7fffffff, 0x8, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xe, 0xffffffffffffffff, 0x8)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x94040000}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="1400000032000bacd32000000000000001fff92e", 0x14}], 0x1}, 0x0)
close(0x3)

3.896428031s ago: executing program 4 (id=7378):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='io.stat\x00', 0x26e1, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000016c0), 0x8901, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23003f)
perf_event_open(&(0x7f0000002940)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_devices(r2, &(0x7f00000029c0)=ANY=[@ANYBLOB="80"], 0xa)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)}, 0x4000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000400000000e0e2501be0e4fe2892df43d10000000000000085000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10003, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0xffbffffffffffffd, 0xffffffffffffffff, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYBLOB="37130c625cfdeeef845d9846b974960a56433cfc44b83650afb83d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7)
perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f00000015c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x3e}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r8, 0x0, 0x1}, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000016c0)=ANY=[], 0xfdef)
close(r5)
recvmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000001740), 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc)
r9 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r9, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001800)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r9, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/4102, 0x1006}], 0x1}, 0x2002)
r10 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r10, &(0x7f0000002900)=ANY=[@ANYBLOB="13100000120091"], 0xfe33)

3.892610961s ago: executing program 3 (id=7379):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$kcm(0x29, 0xb, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000000650000000000000018000000000001800000000000000000950000000000000044030000040000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.730105715s ago: executing program 1 (id=7380):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000002300)={'wlan1\x00', @random="0100ffffffff"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0xb, &(0x7f0000001bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@map_fd={0x18, 0x7, 0x1, 0x0, 0x1}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @ringbuf_query]}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001cc0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001d00)={0x5, 0x3, 0x4, 0x2ed}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002380)}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001300)='memory.events\x00', 0x26e1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x40086602, 0x110e22fff2)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x29, 0x38, 0x0, 0x1300)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={0x1}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{}, 0x0, &(0x7f0000001500)}, 0x20)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x3, 0x10, &(0x7f0000001800)=ANY=[@ANYBLOB, @ANYRES32=r4], &(0x7f0000001880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.net/syz0\x00', 0x1ff)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001b00)=ANY=[@ANYBLOB="62202a3a3409776d0a89"], 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x3, 0x8, &(0x7f0000001980)=ANY=[], &(0x7f00000019c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1f, 0x2, &(0x7f0000001100)=ANY=[@ANYBLOB], &(0x7f0000001140)='syzkaller\x00', 0xfffffffd, 0xf6, &(0x7f0000001180)=""/246, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000012c0)={0x5, 0x9, 0x1730, 0x6f}, 0x10, 0x0, r0, 0x7, &(0x7f0000001ac0)=[r2, 0xffffffffffffffff], &(0x7f0000001d40)=[{0x3, 0x3, 0x0, 0x5}, {0x4, 0x1, 0x4, 0x5}, {0x3, 0x5, 0x2, 0x9}, {0x5, 0x3, 0x0, 0x9}, {0x3, 0x3, 0x20007, 0x1}, {0x1, 0x2, 0x10000009, 0x1}, {0x2, 0x1, 0x8, 0x3}], 0x10, 0x7}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x422001, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b700000081130000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104300000000001d300500000000004704000001ed00000f030000000000001d44020000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102"], &(0x7f0000000fc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x0, 0x1010000}, 0x0, 0x10, &(0x7f0000001040), 0xfffffffffffffd00}, 0x48)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$inet(r5, 0x0, 0x0)

3.454871202s ago: executing program 3 (id=7381):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4520b551c9b5dde7, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=<r3=>0x0, 0x22, 0x1, 0x69a, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200), <r4=>0x0}, 0x40)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x6, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x0, 0x1, 0x9, 0x1, 0xfffffffffffffff4, 0xfffffffffffffff0}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xea, &(0x7f0000000300)=""/234, 0x41100, 0x0, '\x00', r3, 0x25, r2, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x0, 0x5, 0x401}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r1, r2, r1], &(0x7f00000004c0)=[{0x5, 0x4, 0x6}, {0x1, 0x4, 0x5, 0x7}, {0x3, 0x2, 0x4, 0x2}, {0x0, 0x5, 0x4, 0x8}, {0x2, 0x4, 0x47e, 0x9}], 0x10, 0xfffffff1}, 0x94)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0xa}, @exit]}, &(0x7f0000000640)='GPL\x00', 0xeb, 0x0, &(0x7f0000000680), 0x41000, 0x30, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x0, 0x400, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000740)=[r1, r2, r1], &(0x7f0000000780)=[{0x2, 0x2, 0x0, 0x7}, {0x4, 0x2, 0x5, 0x8}], 0x10, 0x384}, 0x94)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@arena={0x21, 0x0, 0x0, 0xb, 0x40800, r2, 0x3f, '\x00', r3, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000940)={0x7fff, <r8=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880)={@map=r7, r5, 0x4, 0x302c, r6, @void, @void, @value=r8}, 0x20)
r9 = perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0xc3, 0xc2, 0x1, 0x0, 0x51fa, 0x40d00, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x7fffffff, 0x9}, 0x0, 0x7, 0x9, 0x3, 0x2b0, 0x101, 0x0, 0x0, 0x2b93, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000a00)='GPL\x00')
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x4, 0x0, r7, 0x3, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000ac0)={@fallback=r9, r5, 0x2e, 0x4, 0x0, @void, @value=r6, @void, @void, r4}, 0x20)
ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000b00)=0x101)
ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r6)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000e40)={&(0x7f0000000b40)="389a8684e95f6f0be8a44bb73df47d640ac81b13b02496e10c14ff3bb781a2c86d7652eebea70b24c5f5db91ebe176ad8cb71d6d900527ba15c5e80cb8d86089fa7d109c039e3e585aef15e418220ee44a90ebe5fdb1de914dc223397709aea48483c4ead6de5d41f26cba89293d3199dc3adf359c5165220f5bd1cfba8f91bd0abe44d8e62127c4b0e28090e45af6fc4487da1bbeaf08f895af33c010d2cc05a4db6f0a7e58ae0a23f9ff7eb5be5d420a04ec693831083e364b787679af8f5c6a870d4c11326e40c8b5", &(0x7f0000000c40)=""/73, &(0x7f0000000cc0)="c32d445e72df27726ac5b57c7d35e0ce3e8f92f966c428feef5bc365893046d2032186d051e1cf7e6915132a70c7af7a7c301ab2f3c6bb13346611123789650b5d040c9d047081911eed8a2111903de5a3a4c5f59a0898c130ee68501ac35bf335cb2adfbca34674eecbaa7ba5d43cef8908d0c7dde67f5419c2a79b26498c1e8f7912cc972b8dc47baa1dbaeb8bd96f328b17d4fd7046c88f3b2c40f1aae89fa40dbccd4040", &(0x7f0000000d80)="0c6eac1293116854992f921b4f0afc722ecd89872284559d375f604ca10f95d68f3430dfd3b762425c261ca76f99b192f7f9a3dd1b11e9e303935d8c9268d535e693173f76587c1530fc5229bbb9f50e170211d2ff53fdfa6ced1b652757ad3e406bf66efde6a5cdc7db61447829d8f03cc6c238a05cd0b843efd4fa236c04f4e86c85bda37d4eb3f661d26bea56a06a4e934180e00b14a8614f860b9ce012d0", 0x9f0, r1}, 0x38)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000f80), 0x2, 0x0)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001240)={0x6, 0x1c, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x13}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x0, 0x0, 0xa, 0x0, 0x20, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000010c0)='GPL\x00', 0x10, 0x93, &(0x7f0000001100)=""/147, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000011c0)={0x5, 0x4, 0xcd, 0x1ff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001200)=[r2, r7, r2, r10, 0xffffffffffffffff, r1, r2, r10, r7], 0x0, 0x10, 0x2}, 0x94)
r14 = getpid()
sendmsg$unix(r11, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000ec0)="ffdc0b5250c67225a96f8814c4b915fdfc2b07377669c7615baf69f0e4374d9ec8f9945153dd8f77e3c194725616f7fb7b754c656b277b9d598e89409d1f7207c098420a20c15b3b8562e7ab7fd3add363ff8bfa6a85ec734c52edb802f22d4123ce8600e673b53070ac8cbf966d", 0x6e}], 0x1, &(0x7f0000001300)=[@rights={{0x18, 0x1, 0x1, [r1, r2]}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r0, 0xffffffffffffffff, r10, r12, r10, r7, r13, r1]}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee00, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x88, 0x8000}, 0x4000)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002540)={&(0x7f0000001400)="5bcacabda21c4351dd528cca99838620aa977f3da3bc6dfea6abeef1482b7492a9f82bfd497888ce47f65b6c4f02a800c70507eb4db6c24d8bb074d19ff315d46a3b4aaf38e5b95b31acf02f06a9caa08eed947913f015eff9675e96081265e9e3b3bf50f6e2a572c603b83d76fe56c9c81093382bd2fad4e6672d1f9983b7b68eec415b9ea5eb7b0f4e", &(0x7f00000014c0)=""/4, &(0x7f0000001500)="9003fad6d5a61fc4f2ce4c", &(0x7f0000001540)="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", 0x8, r10}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000026c0)={r1, &(0x7f0000002580)="6543c322bfa0cc5938cb5dd8177e211265fae759ccae44068fdd7169852ac5f683c5666a0a05ae7567b2cb94205cf87ea28f1da41a63de295fbe14cb9da503d04428e977ba602681a108fbfe430c888cb89842f67596bbbcd791a9507be430377e19021b3bc6c9af18982e8630fabce76fe14f1f4f58cfc97d5845f2887109fd6988338fb088fb45f25263c35b54cb6730352bc9a956a9827b1019d33f94e9a3c4da752ad3aae6624cef49", &(0x7f0000002640)=""/70, 0x4}, 0x20)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002700)={0x200}, 0x8)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000029c0)={&(0x7f0000002740)="6f10fc516d8257a804f478253efa0847f78e23cc5fbe34883c3ea1c71f6f841f5c3863040c804d9660dd13516737d0a107186041bec3e5289e65e9d9237c4ffb0d08a6fab38a1e0a7e228c190bd839fd23db8fac2c7c794bb6478153f6dc8c6c1e085cc6d8ce44cb4a04cc2cc94e4bfbdb0348efa4ff90acc241a98c9d88548d5f7d526aae109c1d8fbadf47cff2c18e23e129a8a373965e", &(0x7f0000002800)=""/167, &(0x7f00000028c0)="42573c01e675ac0693d63bd3c5cc2bdbdd6e9d6b0703e1c9fb4862e92e9bf4630c01", &(0x7f0000002900)="38ab7cf1d8a5c0ca56a3d0fafa36b61f54cb3cb29f737b42524b43f38f44b300b3f3d4b28afe783d81d948c5e408d841364b0343a84784363fa323c9afd37f107efa2d5fbff0e0838893816f52b66ba3ab915e90de2fe8335b0cd3f3342d70bd674ff6005c91557291e54da76b59eff3e3e4874506439f88ee114657d52e919ec5c54c106063e8963a971145b7dcec40e9afd5b23e548abbed1221e42b20201470a1b8ab2e55b8c773368b01125c9475c2982956", 0x6, r2, 0x4}, 0x38)
r15 = bpf$ITER_CREATE(0x21, &(0x7f0000002a00), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000002a40)=@arena={0x21, 0x0, 0x0, 0x28, 0x400, r10, 0xfffffff9, '\x00', r3, r15, 0x5, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003140)={0x11, 0x37, &(0x7f0000002ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002c80)='syzkaller\x00', 0x6, 0x58, &(0x7f0000002cc0)=""/88, 0x0, 0x48, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f0000003040)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000003080)={0x2, 0xe, 0x0, 0x7fffffff}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000030c0)=[r10], &(0x7f0000003100)=[{0x4, 0x3, 0xe, 0x6}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94)

3.000054553s ago: executing program 4 (id=7382):
perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000000c0)=[{}, {}, {0x280000, 0x4, 0x10009, 0xc}], 0x10, 0xfffffff6}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0xd18c9b35, &(0x7f0000000140)=[{&(0x7f0000000180)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x7fffffff, 0x0, 0x7, 0x1, 0x7df}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='!=[\\\\}#\x00')
bpf$MAP_CREATE(0x100000000000018, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x101, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000005c0)={'virt_wifi0\x00', @remote})
r5 = socket$kcm(0x2b, 0x1, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x4, 0x5, &(0x7f0000000b80)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}], {0x95, 0x0, 0x1200}}, &(0x7f0000000bc0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000c00)=""/195}, 0x94)
perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0xd, 0x6, 0x7, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000d80), 0x8)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r6, 0x2b, 0x1, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r7, r1, 0x2a, 0x2008, 0x0, @value=r7, @void, @void, @void, r8}, 0x20)
recvmsg(r7, &(0x7f0000001040)={&(0x7f0000001080)=@generic, 0x80, 0x0, 0x0, &(0x7f0000001100)=""/246, 0xf6}, 0x102)
sendmsg$kcm(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a12900150006001426036018120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4eccb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9eedee5de6ccd40dd6e4ed12e749d21e100f323c4c716d15", 0xd8}], 0x1}, 0x0)

2.999781153s ago: executing program 3 (id=7383):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xc, 0x40, 0x3, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a80)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)="e03f03003f000b05d25a806c8c6f94f903c137153e000000", 0x18}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000ac0)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd0, 0x4ba4}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000003b80)={r0, &(0x7f0000001b80), &(0x7f0000002b80)=""/4096}, 0x20)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@volatile={0x10, 0x0, 0x0, 0x9, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x3}, @enum64={0xf, 0x3, 0x0, 0x13, 0x0, 0x3, [{0x4, 0x9, 0x8}, {0x4, 0x6, 0x2}, {0x5, 0x40, 0x4}]}, @const={0x6, 0x0, 0x0, 0xa, 0x9}, @float={0xf, 0x0, 0x0, 0x10, 0xc}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x30, 0x0, 0x0, 0x30, 0x5f]}}, &(0x7f00000009c0)=""/62, 0x8b, 0x3e, 0x0, 0x3f5a1b21}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x17, &(0x7f0000000780)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0x9, 0x5, 0x6, 0x9, 0xfffffffb}], &(0x7f0000000840)='syzkaller\x00', 0x3, 0x46, &(0x7f0000000880)=""/70, 0x0, 0xa, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r2, r0, r0, r0], 0x0, 0x10, 0x9}, 0x94)

2.424244068s ago: executing program 3 (id=7384):
socket$kcm(0x11, 0x200000000000002, 0x300)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x48)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x187, 0x0, r1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r2, 0x20, &(0x7f0000000300)={&(0x7f0000000340)=""/199, 0xc7, <r5=>0x0, &(0x7f0000000500)=""/75, 0x4b}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0xe, &(0x7f0000000840)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x10}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xa}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000008c0)='GPL\x00', 0x9, 0xb2, &(0x7f0000000900)=""/178, 0x41000, 0x44, '\x00', r4, @cgroup_skb=0x1, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x800, 0xe, 0x5, 0x5b}, 0x10, r5, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000a00)=[{0x5, 0x5, 0xb}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x1}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@ifindex=r4, 0x2, 0x1, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0]}, 0x40)

2.307231241s ago: executing program 1 (id=7385):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x18428, 0x60e9, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)

1.597544629s ago: executing program 3 (id=7386):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000312d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

1.443943663s ago: executing program 3 (id=7387):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1000, 0x0, 0x0, 0x2, 0x9, 0x15c, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="d8000000180081054e81f783db4cb9040a1db00006007c09e8fc55a10a0015000600142603600e1208000600000004010c00040008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290557f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
r3 = socket$kcm(0x2, 0x1000000000000005, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x4, 0x5, 0x7, 0x8, 0x0, 0x7ff, 0x20, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x805, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x4000, 0x2, 0x4, 0x0, 0x6, 0x7fffffff, 0x8, 0x0, 0x8, 0x0, 0x200}, 0x0, 0xe, 0xffffffffffffffff, 0x8)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x94040000}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)}], 0x1, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x7ffff, {0x0, @multicast2, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0xc, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x84, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11, 0x16010000}}], 0x98}, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="1400000032000bacd32000000000000001fff92e", 0x14}], 0x1}, 0x0)
close(0x3)

1.428558854s ago: executing program 1 (id=7394):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0xd87, 0x9e4, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 32)
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) (rerun: 32)
sendmsg$kcm(r0, 0x0, 0x20040000) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffff44)
r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x400008, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x40, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000500)="2e0000002e008f866b29924a6f130000005e140608000000000022727f0000a31802dd00003b1fcc7336507fb18f", 0x2e}], 0x1}, 0x0) (async)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='.\x00'}, 0x18) (async)
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60}, 0x94) (async)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000640)={0x7, &(0x7f0000000880)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x420008}]})
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000a000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) (async)
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000b00)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000b40))
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000b80))
perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x16, &(0x7f0000000d80)=ANY=[@ANYBLOB="20000000040000000000000000000000b7080000057b01000000eeffffb6080000590000007b8af0ff00000000bfa10080000000000701000000feffffbfa40000000000000707374420feffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000c50000007759e0fffcffffffda920000040000001842000001000000000000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000e40)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x20003}, 0x94) (async, rerun: 32)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000e80)={0x1, &(0x7f0000000ec0)=[{0x7c, 0x0, 0x6}]}) (async, rerun: 32)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="62202a3a340977770a89"], 0xa) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000164b0000184000000200000000000000000000009500"/40], &(0x7f0000000040)='syzkaller\x00', 0x1a2, 0x6c, &(0x7f0000000080)=""/108, 0x41000, 0xf, '\x00', 0x0, @fallback=0x1a, r1, 0x8, &(0x7f00000007c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x5, 0x5, 0x2}, 0x10, 0x0, r4, 0x7, &(0x7f00000013c0)=[r3, r3, r6, r6, r6, r6], &(0x7f0000001400)=[{0x4, 0x5, 0x1, 0x9}, {0x2, 0x5, 0xe, 0xc}, {0x5, 0x2, 0x0, 0xc}, {0x4, 0x5, 0xf, 0x4}, {0x1, 0x1, 0x9, 0xc}, {0x2, 0x3, 0x1, 0x1}, {0x2, 0x3, 0x10, 0x8}], 0x10, 0x40}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f40)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000001000)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000001040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
perf_event_open(&(0x7f0000001080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0xfffffffffffffffa, 0x20, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2fb}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000001100)) (async)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x301100, 0x0)

1.366174875s ago: executing program 4 (id=7388):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000022000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001840)={0x20000000}, 0x200000, 0x10, &(0x7f0000001880), 0x143}, 0x48)

0s ago: executing program 4 (id=7389):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
socket$kcm(0x29, 0xb, 0x0)
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="1803000000000000000000000000000085100000060000001800000000000000000000000000000065000000000000001800000000000180000000000000000095000000000000004403000004000000950000000000ffff"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

de+0x125/0x370
[  908.613490][T23009]  kmalloc_node_trace+0x26/0xe0
[  908.618428][T23009]  __get_vm_area_node+0x125/0x370
[  908.623531][T23009]  __vmalloc_node_range+0x36f/0x1320
[  908.628885][T23009]  ? netlink_sendmsg+0x602/0xbf0
[  908.633900][T23009]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  908.641179][T23009]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  908.647407][T23009]  ? free_vm_area+0x50/0x50
[  908.651989][T23009]  ? netlink_sendmsg+0x602/0xbf0
[  908.656984][T23009]  vmalloc+0x79/0x90
[  908.660986][T23009]  ? netlink_sendmsg+0x602/0xbf0
[  908.665985][T23009]  netlink_sendmsg+0x602/0xbf0
[  908.670823][T23009]  ? netlink_getsockopt+0x590/0x590
[  908.676084][T23009]  ? apparmor_socket_sendmsg+0x8e/0x330
[  908.681696][T23009]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  908.687126][T23009]  ? security_socket_sendmsg+0x80/0xa0
[  908.692648][T23009]  ? netlink_getsockopt+0x590/0x590
[  908.697911][T23009]  ____sys_sendmsg+0x61b/0x980
[  908.702741][T23009]  ? __asan_memset+0x22/0x40
[  908.707391][T23009]  ? __sys_sendmsg_sock+0x30/0x30
[  908.712466][T23009]  ? __import_iovec+0x5f2/0x850
[  908.717380][T23009]  ? import_iovec+0x73/0xa0
[  908.721949][T23009]  ___sys_sendmsg+0x2a6/0x360
[  908.726689][T23009]  ? __sys_sendmsg+0x2b0/0x2b0
[  908.731528][T23009]  ? __lock_acquire+0x7eb0/0x7eb0
[  908.736629][T23009]  __se_sys_sendmsg+0x1d0/0x2c0
[  908.741541][T23009]  ? __x64_sys_sendmsg+0x80/0x80
[  908.746551][T23009]  ? syscall_enter_from_user_mode+0x2e/0x80
[  908.752501][T23009]  do_syscall_64+0x55/0xb0
[  908.756978][T23009]  ? clear_bhb_loop+0x40/0x90
[  908.761716][T23009]  ? clear_bhb_loop+0x40/0x90
[  908.766455][T23009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  908.772417][T23009] RIP: 0033:0x7ff41579f559
[  908.776896][T23009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  908.796572][T23009] RSP: 002b:00007ff41663f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  908.805051][T23009] RAX: ffffffffffffffda RBX: 00007ff415a25fa0 RCX: 00007ff41579f559
[  908.813081][T23009] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  908.821103][T23009] RBP: 00007ff41663f090 R08: 0000000000000000 R09: 0000000000000000
[  908.829122][T23009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  908.837147][T23009] R13: 00007ff415a26038 R14: 00007ff415a25fa0 R15: 00007fff1a7398f8
[  908.845194][T23009]  </TASK>
[  908.872225][T23009] syz.2.5547: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  908.902774][T23009] CPU: 1 PID: 23009 Comm: syz.2.5547 Not tainted syzkaller #0
[  908.910325][T23009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  908.920441][T23009] Call Trace:
[  908.923766][T23009]  <TASK>
[  908.926744][T23009]  dump_stack_lvl+0x18c/0x250
[  908.931490][T23009]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  908.937726][T23009]  ? show_regs_print_info+0x20/0x20
[  908.942996][T23009]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  908.949308][T23009]  ? dump_stack+0x9/0x20
[  908.953670][T23009]  warn_alloc+0x246/0x340
[  908.958091][T23009]  ? __get_vm_area_node+0x125/0x370
[  908.963375][T23009]  ? zone_watermark_ok_safe+0x230/0x230
[  908.969000][T23009]  ? rcu_is_watching+0x15/0xb0
[  908.973928][T23009]  ? __get_vm_area_node+0x356/0x370
[  908.979182][T23009]  __vmalloc_node_range+0x394/0x1320
[  908.984533][T23009]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  908.991800][T23009]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  908.997992][T23009]  ? free_vm_area+0x50/0x50
[  909.002558][T23009]  ? netlink_sendmsg+0x602/0xbf0
[  909.007520][T23009]  vmalloc+0x79/0x90
[  909.011449][T23009]  ? netlink_sendmsg+0x602/0xbf0
[  909.016422][T23009]  netlink_sendmsg+0x602/0xbf0
[  909.021237][T23009]  ? netlink_getsockopt+0x590/0x590
[  909.026459][T23009]  ? apparmor_socket_sendmsg+0x8e/0x330
[  909.032065][T23009]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  909.037416][T23009]  ? security_socket_sendmsg+0x80/0xa0
[  909.042931][T23009]  ? netlink_getsockopt+0x590/0x590
[  909.048170][T23009]  ____sys_sendmsg+0x61b/0x980
[  909.052991][T23009]  ? __asan_memset+0x22/0x40
[  909.057603][T23009]  ? __sys_sendmsg_sock+0x30/0x30
[  909.062645][T23009]  ? __import_iovec+0x5f2/0x850
[  909.067545][T23009]  ? import_iovec+0x73/0xa0
[  909.072109][T23009]  ___sys_sendmsg+0x2a6/0x360
[  909.076870][T23009]  ? __sys_sendmsg+0x2b0/0x2b0
[  909.081722][T23009]  ? __lock_acquire+0x7eb0/0x7eb0
[  909.086832][T23009]  __se_sys_sendmsg+0x1d0/0x2c0
[  909.091749][T23009]  ? __x64_sys_sendmsg+0x80/0x80
[  909.096773][T23009]  ? syscall_enter_from_user_mode+0x2e/0x80
[  909.102740][T23009]  do_syscall_64+0x55/0xb0
[  909.107224][T23009]  ? clear_bhb_loop+0x40/0x90
[  909.111983][T23009]  ? clear_bhb_loop+0x40/0x90
[  909.116726][T23009]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  909.122680][T23009] RIP: 0033:0x7ff41579f559
[  909.127782][T23009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  909.147532][T23009] RSP: 002b:00007ff41663f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  909.156012][T23009] RAX: ffffffffffffffda RBX: 00007ff415a25fa0 RCX: 00007ff41579f559
[  909.164037][T23009] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  909.172060][T23009] RBP: 00007ff41663f090 R08: 0000000000000000 R09: 0000000000000000
[  909.180085][T23009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  909.188110][T23009] R13: 00007ff415a26038 R14: 00007ff415a25fa0 R15: 00007fff1a7398f8
[  909.196156][T23009]  </TASK>
[  909.216909][T23009] Mem-Info:
[  909.220631][T23009] active_anon:10259 inactive_anon:0 isolated_anon:0
[  909.220631][T23009]  active_file:18863 inactive_file:40300 isolated_file:0
[  909.220631][T23009]  unevictable:768 dirty:183 writeback:0
[  909.220631][T23009]  slab_reclaimable:10929 slab_unreclaimable:101067
[  909.220631][T23009]  mapped:26484 shmem:1376 pagetables:620
[  909.220631][T23009]  sec_pagetables:0 bounce:0
[  909.220631][T23009]  kernel_misc_reclaimable:0
[  909.220631][T23009]  free:1328307 free_pcp:8328 free_cma:0
[  909.299439][T23009] Node 0 active_anon:41044kB inactive_anon:0kB active_file:75452kB inactive_file:161000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106132kB dirty:732kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11316kB pagetables:2528kB sec_pagetables:0kB all_unreclaimable? no
[  909.359572][T23009] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  909.423592][T23009] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  909.453407][T23009] lowmem_reserve[]: 0 2505 2506 2506 2506
[  909.468329][T23009] Node 0 DMA32 free:1396552kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:41032kB inactive_anon:0kB active_file:75452kB inactive_file:159932kB unevictable:1536kB writepending:744kB present:3129332kB managed:2570004kB mlocked:0kB bounce:0kB free_pcp:12224kB local_pcp:4904kB free_cma:0kB
[  909.499730][T23009] lowmem_reserve[]: 0 0 1 1 1
[  909.504620][T23009] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1068kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[  909.533132][T23009] lowmem_reserve[]: 0 0 0 0 0
[  909.538039][T23009] Node 1 Normal free:3901052kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21804kB local_pcp:9952kB free_cma:0kB
[  909.587826][T23009] lowmem_reserve[]: 0 0 0 0 0
[  909.593179][T23009] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  909.606671][T23009] Node 0 DMA32: 910*4kB (UME) 1388*8kB (UME) 1209*16kB (ME) 867*32kB (UME) 1189*64kB (UME) 843*128kB (UME) 183*256kB (UME) 78*512kB (UME) 33*1024kB (UME) 11*2048kB (UM) 246*4096kB (UM) = 1396552kB
[  909.626921][T23009] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  909.644183][T23009] Node 1 Normal: 163*4kB (UME) 22*8kB (UME) 40*16kB (UME) 66*32kB (UME) 20*64kB (UME) 9*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 950*4096kB (UM) = 3901052kB
[  909.663061][T23009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  909.673654][T23009] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  909.688948][T23009] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  909.700286][T23009] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  909.710452][T23009] 60539 total pagecache pages
[  909.715284][T23009] 0 pages in swap cache
[  909.719978][T23009] Free swap  = 124996kB
[  909.724614][T23009] Total swap = 124996kB
[  909.728957][T23009] 2097051 pages RAM
[  909.733500][T23009] 0 pages HighMem/MovableOnly
[  909.751754][T23009] 421100 pages reserved
[  909.756482][T23009] 0 pages cma reserved
[  909.844878][T23016] delete_channel: no stack
[  911.517795][T23004] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5545'.
[  911.529553][T23018] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5549'.
[  911.767988][T23031] syzkaller0: entered promiscuous mode
[  911.773665][T23031] syzkaller0: entered allmulticast mode
[  911.858525][T23037] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.5555'.
[  911.872855][T23037] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5555'.
[  912.088865][T23037] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.5555'.
[  914.265645][T23051] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5559'.
[  914.363728][T23055] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5560'.
[  914.469161][T23059] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5562'.
[  914.642067][T23059] validate_nla: 2 callbacks suppressed
[  914.642088][T23059] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  914.699685][T23059] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  914.749742][T23059] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  914.779455][T23059] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  914.799452][T23059] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  914.829645][T23059] netlink: 'syz.1.5562': attribute type 10 has an invalid length.
[  914.949371][T23069] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  915.062538][T23059] team0 (unregistering): Port device team_slave_0 removed
[  915.101021][T23059] team0 (unregistering): Port device team_slave_1 removed
[  915.167774][T23069] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  915.223558][T23071] netlink: 'syz.1.5562': attribute type 29 has an invalid length.
[  915.462290][T23072] syzkaller0: entered promiscuous mode
[  915.484816][T23072] syzkaller0: entered allmulticast mode
[  917.717859][T23084] netlink: 'syz.2.5569': attribute type 2 has an invalid length.
[  917.725990][T23084] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5569'.
[  917.874950][T23089] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.5571'.
[  918.007847][T23091] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5572'.
[  918.025284][T23095] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5574'.
[  918.738069][T23107] rxe_eth0 speed is unknown, defaulting to 1000
[  919.356312][T23133] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5583'.
[  919.656443][T23144] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5585'.
[  920.230571][T23156] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5586'.
[  920.943176][T23174] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5595'.
[  921.577256][T23187] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.5596'.
[  922.940194][T23217] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5605'.
[  923.126411][T23221] rxe_eth0 speed is unknown, defaulting to 1000
[  925.355024][T23249] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5618'.
[  925.699624][T23260] mac80211_hwsim hwsim35 wlan1: entered promiscuous mode
[  925.723276][T23260] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode
[  925.958423][T23270] rxe_eth0 speed is unknown, defaulting to 1000
[  926.207093][T23282] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5629'.
[  927.460537][T23316] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5640'.
[  928.171502][T23337] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  928.179065][T23337] IPv6: NLM_F_CREATE should be set when creating new route
[  928.186768][T23337] IPv6: NLM_F_CREATE should be set when creating new route
[  928.194380][T23337] IPv6: NLM_F_CREATE should be set when creating new route
[  928.295812][T23337] validate_nla: 3 callbacks suppressed
[  928.295849][T23337] netlink: 'syz.2.5646': attribute type 9 has an invalid length.
[  928.325812][T23337] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.5646'.
[  929.048976][T23359] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5653'.
[  929.547546][T23375] netlink: 'syz.4.5659': attribute type 64 has an invalid length.
[  930.477233][T23391] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5664'.
[  931.667166][T23431] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5676'.
[  931.959843][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  931.966240][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  932.582400][T23442] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode
[  932.640879][T23442] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode
[  932.852643][T23448] netlink: 'syz.3.5681': attribute type 1 has an invalid length.
[  932.884478][T23448] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.5681'.
[  932.910243][T23448] netlink: 'syz.3.5681': attribute type 10 has an invalid length.
[  933.234067][T23467] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5686'.
[  933.682446][T23478] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.5690'.
[  933.692389][T23478] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  934.030133][T15664] Bluetooth: hci4: command 0x0406 tx timeout
[  934.426199][T23493] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode
[  934.575310][T23493] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[  934.956291][T23500] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5696'.
[  935.055160][T23502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  935.199067][T23511] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5699'.
[  935.236189][T23510] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.5701'.
[  935.268544][T22450] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  935.268607][T22450] Bluetooth: hci2: unexpected event for opcode 0x0000
[  935.290898][T22450] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  935.290945][T22450] Bluetooth: hci2: unexpected event for opcode 0x0000
[  935.378757][T23515] netlink: 'syz.3.5700': attribute type 10 has an invalid length.
[  935.413657][T23515] geneve0: entered promiscuous mode
[  935.500355][T23515] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  936.387450][T23539] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5708'.
[  938.150716][T23560] netlink: 'syz.1.5717': attribute type 1 has an invalid length.
[  938.505982][T23549] rxe_eth0 speed is unknown, defaulting to 1000
[  938.606228][T23575] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5719'.
[  938.898086][T23581] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5728'.
[  939.081200][T23579] netlink: 'syz.2.5721': attribute type 10 has an invalid length.
[  939.102485][T23579] geneve0: entered promiscuous mode
[  939.279091][T23579] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  939.864119][T23604] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5727'.
[  939.889944][T23606] netlink: 'syz.2.5730': attribute type 10 has an invalid length.
[  940.077602][T23608] netlink: 'syz.2.5730': attribute type 10 has an invalid length.
[  940.147408][T23611] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5731'.
[  940.488529][T23621] netlink: 'syz.1.5734': attribute type 10 has an invalid length.
[  940.513709][T23621] geneve0: entered promiscuous mode
[  940.612518][T23621] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  940.865368][T23634] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5739'.
[  941.246154][T23650] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5744'.
[  941.367750][T23654] netlink: 'syz.3.5746': attribute type 1 has an invalid length.
[  941.382437][T23654] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5746'.
[  941.469019][T23657] netlink: 'syz.4.5747': attribute type 1 has an invalid length.
[  941.489518][T23657] netlink: 'syz.4.5747': attribute type 3 has an invalid length.
[  941.497625][T23657] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5747'.
[  942.387728][T23670] netlink: 'syz.1.5752': attribute type 21 has an invalid length.
[  942.413922][T23670] netlink: 'syz.1.5752': attribute type 6 has an invalid length.
[  942.480741][T23670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5752'.
[  942.563467][T23679] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5755'.
[  943.581063][T23712] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5765'.
[  944.513699][T23748] __nla_validate_parse: 1 callbacks suppressed
[  944.513738][T23748] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5776'.
[  944.843836][T23755] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.5786'.
[  945.682891][T23770] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5781'.
[  946.075831][T23783] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.5789'.
[  946.276795][T23788] netlink: 'syz.2.5791': attribute type 10 has an invalid length.
[  946.299199][T23793] netlink: 'syz.1.5793': attribute type 2 has an invalid length.
[  946.314664][T23793] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5793'.
[  946.324883][T23788] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  946.419550][T23788] IPv6: pim6reg1: Disabled Multicast RS
[  946.599516][T23802] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5797'.
[  948.092650][T23820] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5801'.
[  948.197760][T23828] netlink: set zone limit has 8 unknown bytes
[  948.266193][T23826] netlink: 'syz.4.5804': attribute type 10 has an invalid length.
[  948.549196][T23832] netlink: 134768 bytes leftover after parsing attributes in process `syz.3.5805'.
[  948.605345][T23837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5807'.
[  948.908541][T23848] netlink: 'syz.1.5812': attribute type 10 has an invalid length.
[  948.936165][T23848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5812'.
[  948.952703][T23848] dummy0: entered promiscuous mode
[  948.966152][T23848] dummy0: entered allmulticast mode
[  948.982634][T23848] bridge0: port 2(dummy0) entered blocking state
[  949.024803][T23848] bridge0: port 2(dummy0) entered disabled state
[  949.063718][T23848] bridge0: port 2(dummy0) entered blocking state
[  949.070323][T23848] bridge0: port 2(dummy0) entered forwarding state
[  950.219927][T23875] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5819'.
[  950.560432][T23869] can: request_module (can-proto-4) failed.
[  951.133804][T23881] netlink: 'syz.2.5821': attribute type 27 has an invalid length.
[  951.873942][T23889] netlink: 'syz.3.5822': attribute type 10 has an invalid length.
[  952.009388][T23882] delete_channel: no stack
[  953.158445][T23913] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5830'.
[  953.545956][T23920] netlink: 147068 bytes leftover after parsing attributes in process `syz.4.5833'.
[  954.035068][T23940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5842'.
[  954.403888][T23947] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5845'.
[  954.595741][T23950] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.5846'.
[  955.123789][T23965] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5853'.
[  955.138440][T23960] netlink: 147068 bytes leftover after parsing attributes in process `syz.3.5850'.
[  955.188263][T23960] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[  955.887483][T23974] rxe_eth0 speed is unknown, defaulting to 1000
[  956.252118][T23988] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5865'.
[  956.520049][T23999] netlink: 'syz.3.5867': attribute type 21 has an invalid length.
[  956.528364][T23999] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5867'.
[  956.916761][T24008] netlink: 'syz.3.5870': attribute type 2 has an invalid length.
[  956.933832][T24008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5870'.
[  957.214511][T24014] netlink: 'syz.2.5872': attribute type 29 has an invalid length.
[  957.295918][T24014] netlink: 'syz.2.5872': attribute type 29 has an invalid length.
[  957.389075][T24019] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5875'.
[  957.980357][T24034] netlink: 'syz.1.5882': attribute type 10 has an invalid length.
[  957.988837][T24034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5882'.
[  958.026690][T24034] ipvlan1: entered promiscuous mode
[  958.041029][T24034] ipvlan1: entered allmulticast mode
[  958.046554][T24034] veth0_vlan: entered allmulticast mode
[  958.058206][T24034] bridge0: port 3(ipvlan1) entered blocking state
[  958.066225][T24034] bridge0: port 3(ipvlan1) entered disabled state
[  958.099065][T24034] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  958.554066][T24050] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5888'.
[  958.781264][T24056] netlink: set zone limit has 8 unknown bytes
[  959.460381][T24079] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5900'.
[  959.604288][T24082] netlink: 'syz.4.5901': attribute type 29 has an invalid length.
[  959.624140][T24082] netlink: 'syz.4.5901': attribute type 29 has an invalid length.
[  959.655134][T24082] netlink: 'syz.4.5901': attribute type 29 has an invalid length.
[  959.690515][T24086] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5903'.
[  959.717754][T24086] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5903'.
[  959.739916][T24087] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.5903'.
[  960.798440][T24115] ªªªªª»: renamed from virt_wifi0
[  960.882319][T24117] mac80211_hwsim hwsim43 wlan1: left promiscuous mode
[  960.890128][T24117] mac80211_hwsim hwsim43 wlan1: left allmulticast mode
[  960.920924][T24117] openvswitch: netlink: Key type 29 is not supported
[  961.421779][T24138] __nla_validate_parse: 3 callbacks suppressed
[  961.421798][T24138] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5922'.
[  961.937967][T24152] netlink: 'syz.4.5927': attribute type 12 has an invalid length.
[  961.948730][T24152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5927'.
[  962.193177][T24161] netlink: 'syz.3.5929': attribute type 8 has an invalid length.
[  962.223926][T24161] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.5929'.
[  962.302946][T24166] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5933'.
[  963.112388][T24190] syzkaller0: entered promiscuous mode
[  963.125610][T24190] syzkaller0: entered allmulticast mode
[  965.743108][T24205] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5948'.
[  965.956942][T24223] netlink: 'syz.4.5952': attribute type 21 has an invalid length.
[  965.978770][T24223] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5952'.
[  966.882193][T24242] netlink: 'syz.2.5963': attribute type 2 has an invalid length.
[  966.908055][T24242] netlink: 'syz.2.5963': attribute type 8 has an invalid length.
[  966.918709][T24242] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5963'.
[  966.941746][T24251] netlink: 'syz.3.5965': attribute type 1 has an invalid length.
[  968.276643][T24270] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.5971'.
[  968.822898][T24294] netlink: 'syz.4.5980': attribute type 3 has an invalid length.
[  968.834653][T24294] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5980'.
[  968.931056][T24301] netlink: 'syz.4.5980': attribute type 3 has an invalid length.
[  968.938974][T24301] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5980'.
[  969.933907][T24328] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode
[  969.954501][T24328] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode
[  970.134212][T24336] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5992'.
[  970.195353][T24337] syzkaller0: entered promiscuous mode
[  970.202880][T24337] syzkaller0: entered allmulticast mode
[  970.948271][T24351] netlink: 26 bytes leftover after parsing attributes in process `syz.4.5997'.
[  971.222052][T24355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5998'.
[  972.809114][T24354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5998'.
[  972.818478][T24355] Ù: renamed from bond_slave_1 (while UP)
[  973.152965][T24366] netlink: 'syz.1.6003': attribute type 10 has an invalid length.
[  973.206036][T24380] netlink: zone id is out of range
[  973.212076][T24380] netlink: set zone limit has 8 unknown bytes
[  973.224248][T24366] mac80211_hwsim hwsim41 wlan1: left promiscuous mode
[  973.249365][T24366] mac80211_hwsim hwsim41 wlan1: left allmulticast mode
[  973.346005][T24371] rxe_eth0 speed is unknown, defaulting to 1000
[  975.492559][T24411] netlink: 'syz.2.6014': attribute type 1 has an invalid length.
[  975.846686][T24421] rxe_eth0 speed is unknown, defaulting to 1000
[  980.417637][T24507] syzkaller0: entered promiscuous mode
[  980.430641][T24507] syzkaller0: entered allmulticast mode
[  983.872456][T24525] Ÿë
: port 1(veth0_to_team) entered blocking state
[  983.893444][T24525] Ÿë
: port 1(veth0_to_team) entered disabled state
[  983.904824][T24525] veth0_to_team: entered allmulticast mode
[  983.941429][T24525] veth0_to_team: entered promiscuous mode
[  984.289792][T24556] netlink: 'syz.3.6055': attribute type 3 has an invalid length.
[  984.297893][T24556] netlink: 'syz.3.6055': attribute type 5 has an invalid length.
[  984.338760][T24556] netlink: 'syz.3.6055': attribute type 6 has an invalid length.
[  984.363022][T24556] netlink: 198296 bytes leftover after parsing attributes in process `syz.3.6055'.
[  984.936324][T24584] netlink: 'syz.2.6067': attribute type 3 has an invalid length.
[  984.959345][T24584] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6067'.
[  987.419888][T24677] netlink: 'syz.2.6080': attribute type 27 has an invalid length.
[  987.428032][T24677] netlink: 'syz.2.6080': attribute type 25 has an invalid length.
[  987.596911][T24681] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6082'.
[  987.619138][T24681] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6082'.
[  987.626715][T24683] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.6083'.
[  987.638111][T24681] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6082'.
[  987.664967][T24681] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6082'.
[  987.689671][T24683] openvswitch: netlink: Key type 4112 is out of range max 32
[  988.184214][T24698] netlink: 'syz.1.6087': attribute type 3 has an invalid length.
[  988.216283][T24698] netlink: 'syz.1.6087': attribute type 5 has an invalid length.
[  988.234579][T24698] netlink: 'syz.1.6087': attribute type 6 has an invalid length.
[  988.261711][T24698] netlink: 198296 bytes leftover after parsing attributes in process `syz.1.6087'.
[  989.697426][T24731] netlink: 'syz.2.6097': attribute type 3 has an invalid length.
[  989.708971][T24731] netlink: 'syz.2.6097': attribute type 5 has an invalid length.
[  989.731958][T24731] netlink: 'syz.2.6097': attribute type 6 has an invalid length.
[  989.756949][T24731] netlink: 198296 bytes leftover after parsing attributes in process `syz.2.6097'.
[  991.504154][T24764] netlink: 'syz.4.6110': attribute type 3 has an invalid length.
[  991.512205][T24764] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6110'.
[  992.956769][T24793] netlink: 'syz.3.6121': attribute type 3 has an invalid length.
[  992.964686][T24793] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6121'.
[  993.175184][T24797] netlink: 'syz.2.6123': attribute type 10 has an invalid length.
[  993.354365][T24806] netlink: 'syz.1.6125': attribute type 6 has an invalid length.
[  993.402398][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  993.408941][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  995.167802][T24825] netlink: 'syz.4.6131': attribute type 153 has an invalid length.
[  995.176174][T24825] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.6131'.
[  996.563426][T24819] netlink: 'syz.2.6129': attribute type 10 has an invalid length.
[  997.193873][T24846] netlink: 'syz.3.6138': attribute type 10 has an invalid length.
[  997.223829][T24846] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6138'.
[  997.250122][T24846] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  997.642127][T24853] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6141'.
[  997.656424][T24853] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6141'.
[ 1002.744939][T24896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6154'.
[ 1002.772044][T24896] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6154'.
[ 1003.002441][T24905] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6158'.
[ 1003.232279][T24915] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.6160'.
[ 1003.256480][T24913] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.6159'.
[ 1003.271503][T24915] netlink: 22856 bytes leftover after parsing attributes in process `syz.4.6160'.
[ 1004.004300][T24932] netlink: 'syz.2.6165': attribute type 3 has an invalid length.
[ 1004.359058][T24939] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6168'.
[ 1004.388212][T24936] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6167'.
[ 1004.398467][T24936] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6167'.
[ 1010.312918][T24957] rxe_eth0 speed is unknown, defaulting to 1000
[ 1010.418889][T24960] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.6174'.
[ 1010.593211][T24964] netlink: 'syz.1.6176': attribute type 3 has an invalid length.
[ 1012.462106][T25000] netlink: 'syz.3.6186': attribute type 3 has an invalid length.
[ 1014.646924][T25044] netlink: 'syz.3.6200': attribute type 3 has an invalid length.
[ 1014.765918][T25041] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode
[ 1014.778461][T25041] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode
[ 1015.690027][T25066] netlink: 'syz.2.6211': attribute type 28 has an invalid length.
[ 1016.123146][T25090] netlink: 166900 bytes leftover after parsing attributes in process `syz.3.6218'.
[ 1016.837850][T25122] netlink: 'syz.3.6230': attribute type 3 has an invalid length.
[ 1017.616917][T25150] netlink: 'syz.4.6245': attribute type 3 has an invalid length.
[ 1017.644525][T25150] netlink: 'syz.4.6245': attribute type 5 has an invalid length.
[ 1017.664599][T25150] netlink: 'syz.4.6245': attribute type 6 has an invalid length.
[ 1017.688790][T25150] netlink: 198296 bytes leftover after parsing attributes in process `syz.4.6245'.
[ 1017.813711][T25157] netlink: 'syz.3.6248': attribute type 3 has an invalid length.
[ 1017.825230][T25157] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6248'.
[ 1018.313828][T25165] rxe_eth0 speed is unknown, defaulting to 1000
[ 1019.001628][T25187] netlink: 'syz.2.6257': attribute type 3 has an invalid length.
[ 1019.020876][T25187] netlink: 'syz.2.6257': attribute type 5 has an invalid length.
[ 1019.029177][T25187] netlink: 'syz.2.6257': attribute type 6 has an invalid length.
[ 1019.059724][T25187] netlink: 198296 bytes leftover after parsing attributes in process `syz.2.6257'.
[ 1019.148160][T25191] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6259'.
[ 1019.204705][T25189] netlink: 'syz.3.6258': attribute type 29 has an invalid length.
[ 1019.541988][T25195] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6260'.
[ 1019.851591][T25202] syzkaller0: entered promiscuous mode
[ 1019.869604][T25202] syzkaller0: entered allmulticast mode
[ 1021.380350][T25233] validate_nla: 5 callbacks suppressed
[ 1021.380372][T25233] netlink: 'syz.3.6268': attribute type 3 has an invalid length.
[ 1021.394583][T25233] netlink: 'syz.3.6268': attribute type 5 has an invalid length.
[ 1021.402537][T25233] netlink: 'syz.3.6268': attribute type 6 has an invalid length.
[ 1021.424354][T25233] netlink: 198296 bytes leftover after parsing attributes in process `syz.3.6268'.
[ 1023.406086][T25244] netlink: 'syz.4.6272': attribute type 3 has an invalid length.
[ 1023.424245][T25244] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6272'.
[ 1023.728454][T25257] netlink: 'syz.2.6277': attribute type 3 has an invalid length.
[ 1023.749386][T25257] netlink: 'syz.2.6277': attribute type 5 has an invalid length.
[ 1023.771013][T25257] netlink: 'syz.2.6277': attribute type 6 has an invalid length.
[ 1023.795086][T25257] netlink: 198296 bytes leftover after parsing attributes in process `syz.2.6277'.
[ 1024.504497][T25271] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6282'.
[ 1024.714701][T25277] netlink: 'syz.1.6279': attribute type 10 has an invalid length.
[ 1024.828721][T25282] netlink: 'syz.3.6285': attribute type 3 has an invalid length.
[ 1024.965007][T25286] netlink: 'syz.1.6288': attribute type 3 has an invalid length.
[ 1025.019476][T25286] netlink: 198296 bytes leftover after parsing attributes in process `syz.1.6288'.
[ 1026.490035][T25319] validate_nla: 2 callbacks suppressed
[ 1026.490055][T25319] netlink: 'syz.1.6298': attribute type 3 has an invalid length.
[ 1026.844498][T25328] netlink: 'syz.1.6301': attribute type 3 has an invalid length.
[ 1026.872174][T25328] netlink: 'syz.1.6301': attribute type 5 has an invalid length.
[ 1026.899475][T25328] netlink: 'syz.1.6301': attribute type 6 has an invalid length.
[ 1026.925067][T25328] netlink: 198296 bytes leftover after parsing attributes in process `syz.1.6301'.
[ 1027.852494][T25343] netlink: 'syz.3.6309': attribute type 3 has an invalid length.
[ 1028.054932][T25347] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.6311'.
[ 1028.657182][T25356] netlink: 'syz.1.6314': attribute type 10 has an invalid length.
[ 1029.375560][T25370] netlink: 'syz.2.6319': attribute type 3 has an invalid length.
[ 1029.394139][T25372] netlink: 'syz.1.6320': attribute type 3 has an invalid length.
[ 1029.404538][T25372] netlink: 'syz.1.6320': attribute type 5 has an invalid length.
[ 1029.430101][T25372] netlink: 'syz.1.6320': attribute type 6 has an invalid length.
[ 1029.443756][T25372] netlink: 198296 bytes leftover after parsing attributes in process `syz.1.6320'.
[ 1029.734424][T25384] netlink: 198296 bytes leftover after parsing attributes in process `syz.4.6331'.
[ 1031.249071][T25416] netlink: 197976 bytes leftover after parsing attributes in process `syz.1.6335'.
[ 1031.887248][T25430] validate_nla: 5 callbacks suppressed
[ 1031.887269][T25430] netlink: 'syz.4.6340': attribute type 3 has an invalid length.
[ 1031.925706][T25431] netlink: 3 bytes leftover after parsing attributes in process `syz.1.6341'.
[ 1031.989513][T25433] netlink: 6 bytes leftover after parsing attributes in process `syz.3.6342'.
[ 1032.036145][T25433] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1032.184203][T25435] netlink: 'syz.4.6343': attribute type 3 has an invalid length.
[ 1032.188426][T25441] netlink: 'syz.1.6345': attribute type 3 has an invalid length.
[ 1032.230558][T25441] netlink: 197976 bytes leftover after parsing attributes in process `syz.1.6345'.
[ 1032.860700][T25464] rxe_eth0 speed is unknown, defaulting to 1000
[ 1033.282413][T25473] netlink: 'syz.1.6355': attribute type 3 has an invalid length.
[ 1033.309793][T25473] netlink: 197976 bytes leftover after parsing attributes in process `syz.1.6355'.
[ 1033.610926][T25475] netlink: 'syz.1.6356': attribute type 3 has an invalid length.
[ 1033.819304][T25462] rxe_eth0 speed is unknown, defaulting to 1000
[ 1034.149749][T25483] netlink: 'syz.2.6359': attribute type 9 has an invalid length.
[ 1034.211198][T25483] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6359'.
[ 1034.545761][T25483] netlink: 'syz.2.6359': attribute type 9 has an invalid length.
[ 1034.575167][T25483] netlink: 152732 bytes leftover after parsing attributes in process `syz.2.6359'.
[ 1034.986374][T25495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6363'.
[ 1035.010144][T25493] netlink: 'syz.1.6362': attribute type 10 has an invalid length.
[ 1035.042193][T25493] macvlan0: entered promiscuous mode
[ 1035.064591][T25493] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1035.368315][T25505] netlink: 'syz.2.6364': attribute type 3 has an invalid length.
[ 1035.388995][T25505] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6364'.
[ 1035.468835][T25504] netlink: 'syz.1.6366': attribute type 3 has an invalid length.
[ 1035.827324][T25507] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6367'.
[ 1036.744786][T25526] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6372'.
[ 1036.793248][T25526] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8
[ 1037.206274][T25533] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6374'.
[ 1037.234079][T25533] openvswitch: netlink: Key type 29 is not supported
[ 1037.527468][T25530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6373'.
[ 1037.722334][T25538] validate_nla: 2 callbacks suppressed
[ 1037.722356][T25538] netlink: 'syz.2.6375': attribute type 3 has an invalid length.
[ 1037.991946][T25541] netlink: 'syz.1.6376': attribute type 3 has an invalid length.
[ 1038.002943][T25541] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6376'.
[ 1039.940438][T25566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6384'.
[ 1040.348034][T25575] netlink: 'syz.4.6386': attribute type 3 has an invalid length.
[ 1040.399459][T25575] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6386'.
[ 1040.567523][T25581] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.6388'.
[ 1040.577354][T25581] openvswitch: netlink: IP tunnel dst address not specified
[ 1040.630741][T25582] netlink: 'syz.1.6387': attribute type 3 has an invalid length.
[ 1040.650940][T25582] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6387'.
[ 1041.489776][T25591] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6392'.
[ 1041.960418][T25600] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6394'.
[ 1042.866731][T25616] netlink: 'syz.2.6399': attribute type 9 has an invalid length.
[ 1042.901884][T25616] netlink: 164340 bytes leftover after parsing attributes in process `syz.2.6399'.
[ 1043.102914][T25619] netlink: 'syz.1.6400': attribute type 3 has an invalid length.
[ 1043.116198][T25619] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6400'.
[ 1043.216044][T25622] netlink: 'syz.3.6401': attribute type 3 has an invalid length.
[ 1043.281134][T25622] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6401'.
[ 1044.060459][T25633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6405'.
[ 1044.491322][T25639] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6407'.
[ 1044.595369][T25651] netlink: 'syz.1.6411': attribute type 3 has an invalid length.
[ 1044.618707][T25651] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6411'.
[ 1044.859882][T25653] netlink: 'syz.3.6413': attribute type 9 has an invalid length.
[ 1044.880214][T25653] netlink: 164340 bytes leftover after parsing attributes in process `syz.3.6413'.
[ 1044.914918][T25656] netlink: 'syz.4.6414': attribute type 3 has an invalid length.
[ 1045.031157][T25656] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6414'.
[ 1045.725447][T25661] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.6416'.
[ 1045.754833][T25661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6416'.
[ 1046.364077][T25682] netlink: 'syz.1.6423': attribute type 3 has an invalid length.
[ 1046.604841][T25693] netlink: 'syz.1.6427': attribute type 3 has an invalid length.
[ 1047.251999][T25710] netlink: 'syz.1.6434': attribute type 1 has an invalid length.
[ 1047.401335][T25710] netlink: 'syz.1.6434': attribute type 21 has an invalid length.
[ 1048.310535][T25732] validate_nla: 4 callbacks suppressed
[ 1048.310575][T25732] netlink: 'syz.1.6442': attribute type 10 has an invalid length.
[ 1048.565934][T25732] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1048.598556][T25738] __nla_validate_parse: 9 callbacks suppressed
[ 1048.598578][T25738] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6443'.
[ 1048.949747][T25745] netlink: 'syz.2.6452': attribute type 17 has an invalid length.
[ 1048.978797][T25745] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[ 1051.348043][T25756] netlink: 'syz.4.6446': attribute type 3 has an invalid length.
[ 1051.393667][T25756] netlink: 'syz.4.6446': attribute type 5 has an invalid length.
[ 1051.419462][T25756] netlink: 'syz.4.6446': attribute type 6 has an invalid length.
[ 1051.448920][T25756] netlink: 198296 bytes leftover after parsing attributes in process `syz.4.6446'.
[ 1051.566620][T25764] netlink: 'syz.3.6450': attribute type 3 has an invalid length.
[ 1051.593810][T25764] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6450'.
[ 1052.373176][T25780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6454'.
[ 1052.648413][T25785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6456'.
[ 1053.383008][T25797] netlink: 'syz.2.6460': attribute type 3 has an invalid length.
[ 1053.391360][T25797] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6460'.
[ 1053.957047][T25810] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6466'.
[ 1054.103396][T25816] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6467'.
[ 1054.119087][T25814] netlink: 'syz.2.6468': attribute type 3 has an invalid length.
[ 1054.272536][T25821] netlink: 'syz.3.6471': attribute type 3 has an invalid length.
[ 1054.299368][T25821] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6471'.
[ 1054.420486][T25829] netlink: 'syz.4.6482': attribute type 3 has an invalid length.
[ 1054.430708][T25829] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6482'.
[ 1054.625836][T25831] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode
[ 1054.649034][T25831] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode
[ 1054.670058][T25835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6478'.
[ 1054.836367][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.843055][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.654690][T25858] netlink: 'syz.2.6486': attribute type 3 has an invalid length.
[ 1055.664277][T25858] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6486'.
[ 1055.753975][T25862] netlink: 'syz.4.6495': attribute type 3 has an invalid length.
[ 1055.761943][T25862] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6495'.
[ 1055.847317][T25865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6490'.
[ 1055.996618][T25877] netlink: 'syz.3.6489': attribute type 2 has an invalid length.
[ 1056.019021][T25877] netlink: 'syz.3.6489': attribute type 1 has an invalid length.
[ 1056.039247][T25877] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.6489'.
[ 1056.593119][T25886] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6496'.
[ 1056.992282][T25894] netlink: 'syz.4.6499': attribute type 3 has an invalid length.
[ 1057.960721][T25932] netlink: 'syz.3.6513': attribute type 3 has an invalid length.
[ 1059.254078][T25952] __nla_validate_parse: 4 callbacks suppressed
[ 1059.254099][T25952] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6523'.
[ 1059.333430][T25952] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6523'.
[ 1059.853306][T25979] netlink: 'syz.4.6528': attribute type 3 has an invalid length.
[ 1059.861348][T25979] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6528'.
[ 1060.163947][T25982] netlink: 'syz.3.6532': attribute type 1 has an invalid length.
[ 1060.355341][T25986] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6532'.
[ 1060.460888][T25990] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6534'.
[ 1060.667926][T25986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1060.800314][T25986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1060.841660][T25986] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1060.866144][T25986] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1060.886467][T25998] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6535'.
[ 1060.898149][T25986] bond0 (unregistering): (slave wlan1): Releasing backup interface
[ 1060.925675][T25986] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 1060.950333][T25986] bond0 (unregistering): Released all slaves
[ 1061.049392][T25993] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6535'.
[ 1061.542219][T26028] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6547'.
[ 1061.559879][T26028] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1061.582021][T26029] netlink: 'syz.4.6543': attribute type 3 has an invalid length.
[ 1061.600178][T26029] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6543'.
[ 1062.068614][T26039] netlink: 'syz.2.6552': attribute type 29 has an invalid length.
[ 1062.089837][T26039] netlink: 'syz.2.6552': attribute type 29 has an invalid length.
[ 1062.102891][T26040] netlink: 'syz.2.6552': attribute type 29 has an invalid length.
[ 1062.119932][T26041] netlink: 'syz.2.6552': attribute type 29 has an invalid length.
[ 1062.136498][T26040] netlink: 'syz.2.6552': attribute type 29 has an invalid length.
[ 1062.154192][T26041] netlink: 'syz.2.6552': attribute type 29 has an invalid length.
[ 1062.173102][T26040] netlink: 'syz.2.6552': attribute type 29 has an invalid length.
[ 1062.289149][T26047] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6554'.
[ 1064.016051][T26097] C: renamed from team_slave_0
[ 1065.426634][T26125] validate_nla: 19 callbacks suppressed
[ 1065.426648][T26125] netlink: 'syz.2.6580': attribute type 3 has an invalid length.
[ 1065.449419][T26125] __nla_validate_parse: 5 callbacks suppressed
[ 1065.449435][T26125] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6580'.
[ 1067.474390][T26134] delete_channel: no stack
[ 1067.556930][T26139] macvlan1: entered allmulticast mode
[ 1067.600609][T26139] veth1_vlan: entered allmulticast mode
[ 1067.606343][T26139] macvlan1: entered promiscuous mode
[ 1067.830793][T26145] sit0: entered allmulticast mode
[ 1067.960818][T26145] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6589'.
[ 1068.066182][T26145] sit0: entered promiscuous mode
[ 1068.563405][T26158] netlink: 'syz.3.6592': attribute type 3 has an invalid length.
[ 1068.589566][T26158] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6592'.
[ 1068.634994][T26161] netlink: 'syz.1.6593': attribute type 3 has an invalid length.
[ 1068.658767][T26161] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6593'.
[ 1069.776579][T26196] sit0: entered allmulticast mode
[ 1069.844856][T26191] netlink: 763 bytes leftover after parsing attributes in process `syz.4.6603'.
[ 1069.869524][T26198] netlink: 'syz.3.6605': attribute type 21 has an invalid length.
[ 1069.899349][T26198] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6605'.
[ 1069.958858][T26191] sit0: entered promiscuous mode
[ 1070.895621][T26212] netlink: 'syz.2.6607': attribute type 3 has an invalid length.
[ 1070.949313][T26212] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6607'.
[ 1071.445682][T26222] netlink: 'syz.1.6612': attribute type 3 has an invalid length.
[ 1071.468144][T26222] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6612'.
[ 1071.577349][T26227] macvlan1: entered allmulticast mode
[ 1071.607102][T26227] veth1_vlan: entered allmulticast mode
[ 1071.619443][T26227] macvlan1: entered promiscuous mode
[ 1071.782169][T26233] netlink: 'syz.4.6621': attribute type 3 has an invalid length.
[ 1071.792220][T26233] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6621'.
[ 1071.792573][T26231] sit0: entered allmulticast mode
[ 1071.891274][T26234] netlink: 763 bytes leftover after parsing attributes in process `syz.3.6615'.
[ 1071.905854][T26237] sit0: entered promiscuous mode
[ 1071.953023][T26238] netlink: 'syz.2.6616': attribute type 21 has an invalid length.
[ 1072.533188][T26248] netlink: 'syz.1.6620': attribute type 1 has an invalid length.
[ 1072.570103][T26248] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.6620'.
[ 1072.806123][T26254] netlink: 'syz.1.6624': attribute type 10 has an invalid length.
[ 1072.931501][T26254] netlink: 'syz.1.6624': attribute type 10 has an invalid length.
[ 1072.945634][T26254] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1073.298132][T26272] netlink: 'syz.2.6628': attribute type 3 has an invalid length.
[ 1073.306366][T26272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6628'.
[ 1073.431065][T26265] sit0: entered allmulticast mode
[ 1073.497786][T26273] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6627'.
[ 1073.571514][T26265] sit0: entered promiscuous mode
[ 1073.634684][T26283] netlink: 'syz.4.6630': attribute type 3 has an invalid length.
[ 1073.648880][T26283] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6630'.
[ 1074.985613][T26315] netlink: 'syz.4.6645': attribute type 3 has an invalid length.
[ 1075.006173][T26315] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6645'.
[ 1075.248101][T26323] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6647'.
[ 1075.974345][T26327] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6649'.
[ 1076.002816][T26327] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6649'.
[ 1076.433405][T26347] validate_nla: 1 callbacks suppressed
[ 1076.433423][T26347] netlink: 'syz.1.6656': attribute type 3 has an invalid length.
[ 1076.451679][T26347] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6656'.
[ 1076.693850][T26352] netlink: 'syz.2.6658': attribute type 3 has an invalid length.
[ 1076.704215][T26352] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6658'.
[ 1080.549425][T26380] netlink: 'syz.4.6668': attribute type 3 has an invalid length.
[ 1080.557408][T26380] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6668'.
[ 1080.891039][T26389] netlink: 'syz.2.6670': attribute type 3 has an invalid length.
[ 1080.922058][T26389] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6670'.
[ 1082.360175][T26416] netlink: 'syz.3.6682': attribute type 3 has an invalid length.
[ 1082.385491][T26416] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6682'.
[ 1082.467135][T26419] netlink: 'syz.1.6684': attribute type 10 has an invalid length.
[ 1082.482617][T26419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6684'.
[ 1082.497709][T26419] netlink: 'syz.1.6684': attribute type 10 has an invalid length.
[ 1082.512308][T26419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6684'.
[ 1082.634390][T26424] netlink: 'syz.4.6683': attribute type 3 has an invalid length.
[ 1082.649051][T26424] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6683'.
[ 1083.699994][T26451] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6695'.
[ 1083.745183][T26451] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[ 1083.760217][T26451] CPU: 0 PID: 26451 Comm: syz.3.6695 Not tainted syzkaller #0
[ 1083.767778][T26451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1083.777888][T26451] Call Trace:
[ 1083.781220][T26451]  <TASK>
[ 1083.784199][T26451]  dump_stack_lvl+0x18c/0x250
[ 1083.788976][T26451]  ? show_regs_print_info+0x20/0x20
[ 1083.794268][T26451]  ? load_image+0x420/0x420
[ 1083.799112][T26451]  sysfs_warn_dup+0x8e/0xa0
[ 1083.803682][T26451]  sysfs_do_create_link_sd+0xc0/0x110
[ 1083.809171][T26451]  device_add_class_symlinks+0x1cf/0x240
[ 1083.814877][T26451]  device_add+0x4f9/0xc40
[ 1083.819278][T26451]  wiphy_register+0x1f24/0x2c70
[ 1083.824225][T26451]  ? cfg80211_event_work+0x40/0x40
[ 1083.829390][T26451]  ? minstrel_ht_alloc+0x88a/0x990
[ 1083.834547][T26451]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[ 1083.840918][T26451]  ieee80211_register_hw+0x2f3d/0x3cb0
[ 1083.846427][T26451]  ? ieee80211_register_hw+0xf01/0x3cb0
[ 1083.852053][T26451]  ? ieee80211_tasklet_handler+0x20/0x20
[ 1083.857723][T26451]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[ 1083.863655][T26451]  ? __debug_object_init+0xec/0x450
[ 1083.868894][T26451]  ? __asan_memset+0x22/0x40
[ 1083.873527][T26451]  ? __hrtimer_init+0x189/0x270
[ 1083.878422][T26451]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[ 1083.884188][T26451]  ? mac80211_hwsim_free+0x220/0x220
[ 1083.889498][T26451]  ? rcu_is_watching+0x15/0xb0
[ 1083.894299][T26451]  ? kstrndup+0xbd/0x140
[ 1083.898605][T26451]  hwsim_new_radio_nl+0xdad/0x1a70
[ 1083.903767][T26451]  ? __nla_validate+0x50/0x50
[ 1083.908667][T26451]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1083.915060][T26451]  ? __nla_parse+0x40/0x50
[ 1083.919876][T26451]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[ 1083.926253][T26451]  genl_family_rcv_msg_doit+0x21a/0x310
[ 1083.931860][T26451]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[ 1083.937803][T26451]  ? bpf_lsm_capable+0x9/0x10
[ 1083.942633][T26451]  ? security_capable+0x89/0xb0
[ 1083.947887][T26451]  genl_rcv_msg+0x611/0x7a0
[ 1083.952455][T26451]  ? genl_bind+0x360/0x360
[ 1083.956924][T26451]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[ 1083.963288][T26451]  ? lockdep_hardirqs_on+0x98/0x150
[ 1083.968522][T26451]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1083.974735][T26451]  netlink_rcv_skb+0x235/0x4c0
[ 1083.979547][T26451]  ? genl_bind+0x360/0x360
[ 1083.984002][T26451]  ? netlink_ack+0x1160/0x1160
[ 1083.988806][T26451]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1083.993879][T26451]  ? down_read+0x1ac/0x2e0
[ 1083.998940][T26451]  genl_rcv+0x28/0x40
[ 1084.003006][T26451]  netlink_unicast+0x7b1/0x930
[ 1084.007834][T26451]  netlink_sendmsg+0x8d0/0xbf0
[ 1084.012654][T26451]  ? netlink_getsockopt+0x590/0x590
[ 1084.017919][T26451]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1084.023524][T26451]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1084.028849][T26451]  ? security_socket_sendmsg+0x80/0xa0
[ 1084.034351][T26451]  ? netlink_getsockopt+0x590/0x590
[ 1084.039618][T26451]  ____sys_sendmsg+0x61b/0x980
[ 1084.044425][T26451]  ? __asan_memset+0x22/0x40
[ 1084.049051][T26451]  ? __sys_sendmsg_sock+0x30/0x30
[ 1084.054110][T26451]  ? __import_iovec+0x5f2/0x850
[ 1084.059008][T26451]  ? import_iovec+0x73/0xa0
[ 1084.063580][T26451]  ___sys_sendmsg+0x2a6/0x360
[ 1084.068403][T26451]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1084.073256][T26451]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1084.078158][T26451]  ? __x64_sys_sendmsg+0x80/0x80
[ 1084.083152][T26451]  ? syscall_enter_from_user_mode+0x2e/0x80
[ 1084.089094][T26451]  do_syscall_64+0x55/0xb0
[ 1084.093550][T26451]  ? clear_bhb_loop+0x40/0x90
[ 1084.098261][T26451]  ? clear_bhb_loop+0x40/0x90
[ 1084.102980][T26451]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1084.108911][T26451] RIP: 0033:0x7f947619f559
[ 1084.113357][T26451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1084.133005][T26451] RSP: 002b:00007f9476fe7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1084.141547][T26451] RAX: ffffffffffffffda RBX: 00007f9476425fa0 RCX: 00007f947619f559
[ 1084.149549][T26451] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[ 1084.157553][T26451] RBP: 00007f9476236b20 R08: 0000000000000000 R09: 0000000000000000
[ 1084.165555][T26451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1084.173553][T26451] R13: 00007f9476426038 R14: 00007f9476425fa0 R15: 00007ffe90ff9168
[ 1084.181575][T26451]  </TASK>
[ 1084.397785][T26461] netlink: 'syz.2.6699': attribute type 29 has an invalid length.
[ 1084.410270][T26461] netlink: 'syz.2.6699': attribute type 29 has an invalid length.
[ 1084.629518][T26467] netlink: 'syz.2.6699': attribute type 29 has an invalid length.
[ 1084.646242][T26467] netlink: 'syz.2.6699': attribute type 29 has an invalid length.
[ 1084.717084][T26475] netlink: 'syz.3.6701': attribute type 3 has an invalid length.
[ 1084.742171][T26475] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6701'.
[ 1084.920796][T26479] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6704'.
[ 1084.944012][T26479] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6704'.
[ 1084.963784][T26479] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6704'.
[ 1084.986349][T26479] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.6704'.
[ 1086.957404][T26539] netlink: 'syz.3.6717': attribute type 3 has an invalid length.
[ 1088.082654][T15664] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1088.094687][T15664] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1088.105938][T24660] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1088.122549][T15664] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1088.140445][T15664] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1088.148993][T15664] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1088.156785][T15664] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1088.238876][T26556] rxe_eth0 speed is unknown, defaulting to 1000
[ 1088.415510][T24660] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1088.471970][T26562] __nla_validate_parse: 63 callbacks suppressed
[ 1088.471991][T26562] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6730'.
[ 1088.555320][T24660] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1088.718245][T26568] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6732'.
[ 1089.018520][T24660] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1089.078985][T26568] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 1089.673053][T26556] chnl_net:caif_netlink_parms(): no params data found
[ 1089.773824][T26583] netlink: 'syz.1.6735': attribute type 3 has an invalid length.
[ 1089.784229][T26583] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6735'.
[ 1089.956425][T26587] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6737'.
[ 1090.190813][T22450] Bluetooth: hci0: command tx timeout
[ 1090.264077][T26556] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.287695][T26556] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.307397][T26556] bridge_slave_0: entered allmulticast mode
[ 1090.330781][T26556] bridge_slave_0: entered promiscuous mode
[ 1090.372970][T26556] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.389620][T26556] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.396952][T26556] bridge_slave_1: entered allmulticast mode
[ 1090.415875][T26556] bridge_slave_1: entered promiscuous mode
[ 1090.880150][T26556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1091.028063][T26556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.117831][T26616] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6744'.
[ 1091.435192][T26556] team0: Port device team_slave_0 added
[ 1091.538774][T26616] debugfs: Directory '!!ô!' with parent 'ieee80211' already present!
[ 1091.720054][T26556] team0: Port device team_slave_1 added
[ 1092.122445][T26630] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6749'.
[ 1092.162277][T26556] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1092.179535][T26556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1092.240801][T26630] netlink: 'syz.3.6749': attribute type 29 has an invalid length.
[ 1092.249572][T26556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1092.271969][T26556] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1092.279336][T22450] Bluetooth: hci0: command tx timeout
[ 1092.309378][T26556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1092.420350][T26556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1092.496013][T26630] netlink: 'syz.3.6749': attribute type 29 has an invalid length.
[ 1092.597007][T26631] netlink: 'syz.3.6749': attribute type 29 has an invalid length.
[ 1092.986713][T26556] hsr_slave_0: entered promiscuous mode
[ 1093.014152][T26556] hsr_slave_1: entered promiscuous mode
[ 1093.039110][T26556] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1093.088451][T26556] Cannot create hsr debugfs directory
[ 1094.350106][T22450] Bluetooth: hci0: command tx timeout
[ 1094.481979][T26684] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.6765'.
[ 1095.981311][T24660] hsr_slave_0: left promiscuous mode
[ 1096.020114][T24660] hsr_slave_1: left promiscuous mode
[ 1096.039570][T24660] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1096.067790][T24660] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1096.118885][T24660] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1096.139144][T24660] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1096.431013][T22450] Bluetooth: hci0: command tx timeout
[ 1096.439874][T24660] bridge_slave_0: left allmulticast mode
[ 1096.489322][T24660] bridge_slave_0: left promiscuous mode
[ 1096.495237][T24660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1097.297030][T24660] veth1_macvtap: left promiscuous mode
[ 1097.303706][T24660] veth0_macvtap: left promiscuous mode
[ 1097.319531][T24660] veth1_vlan: left allmulticast mode
[ 1097.325322][T24660] veth1_vlan: left promiscuous mode
[ 1097.349547][T24660] veth0_vlan: left promiscuous mode
[ 1099.192079][T24660] bond0 (unregistering): (slave 
c
1Ù): Releasing backup interface
[ 1099.248799][T24660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1099.604275][T24660] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1099.613459][T24660] bond0 (unregistering): Released all slaves
[ 1099.927314][T26556] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1099.963883][T26556] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1100.015860][T26556] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1100.047557][T26556] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1100.455528][T26556] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1100.526303][T26556] 8021q: adding VLAN 0 to HW filter on device team0
[ 1100.565347][T24660] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1100.572670][T24660] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1100.638445][T24660] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1100.645848][T24660] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1100.662791][T26763] netlink: 'syz.3.6786': attribute type 29 has an invalid length.
[ 1100.702259][T26763] netlink: 'syz.3.6786': attribute type 29 has an invalid length.
[ 1100.749905][T26768] netlink: 'syz.3.6786': attribute type 29 has an invalid length.
[ 1100.795347][T26763] netlink: 'syz.3.6786': attribute type 29 has an invalid length.
[ 1100.846732][T26763] netlink: 'syz.3.6786': attribute type 10 has an invalid length.
[ 1100.882902][T26763] netlink: 'syz.3.6786': attribute type 29 has an invalid length.
[ 1101.365955][T26556] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1102.278454][T26556] veth0_vlan: entered promiscuous mode
[ 1102.322013][T26556] veth1_vlan: entered promiscuous mode
[ 1102.483755][T26827] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6801'.
[ 1102.523512][T26556] veth0_macvtap: entered promiscuous mode
[ 1102.558867][T26556] veth1_macvtap: entered promiscuous mode
[ 1102.658152][T26556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1102.691632][T26556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.716448][T26556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1102.738565][T26556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.761948][T26556] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1102.807830][T26556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.849266][T26556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.881513][T26556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1102.908217][T26556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1102.932662][T26556] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1102.993465][T26556] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.014939][T26556] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.046513][T26556] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.076300][T26556] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1103.289990][T24655] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1103.315827][T24655] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1103.414279][T24655] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1103.431353][T24655] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1104.170264][T26876] netlink: 'syz.3.6813': attribute type 10 has an invalid length.
[ 1106.284219][T26965] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6839'.
[ 1109.298684][T27048] FAULT_INJECTION: forcing a failure.
[ 1109.298684][T27048] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1109.312372][T27048] CPU: 0 PID: 27048 Comm: syz.4.6868 Not tainted syzkaller #0
[ 1109.319908][T27048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1109.330108][T27048] Call Trace:
[ 1109.333428][T27048]  <TASK>
[ 1109.336377][T27048]  dump_stack_lvl+0x18c/0x250
[ 1109.341190][T27048]  ? show_regs_print_info+0x20/0x20
[ 1109.346455][T27048]  ? load_image+0x420/0x420
[ 1109.351027][T27048]  ? __might_fault+0xaa/0x120
[ 1109.355764][T27048]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1109.360865][T27048]  should_fail_ex+0x394/0x4c0
[ 1109.365616][T27048]  _copy_from_user+0x2f/0xe0
[ 1109.370261][T27048]  __sys_bpf+0x23e/0x890
[ 1109.374527][T27048]  ? bpf_link_show_fdinfo+0x560/0x560
[ 1109.379949][T27048]  ? lock_chain_count+0x20/0x20
[ 1109.384868][T27048]  __x64_sys_bpf+0x7c/0x90
[ 1109.389363][T27048]  do_syscall_64+0x55/0xb0
[ 1109.393844][T27048]  ? clear_bhb_loop+0x40/0x90
[ 1109.399118][T27048]  ? clear_bhb_loop+0x40/0x90
[ 1109.403875][T27048]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1109.409842][T27048] RIP: 0033:0x7f94adf9f559
[ 1109.414309][T27048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1109.434013][T27048] RSP: 002b:00007f94aed90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1109.442478][T27048] RAX: ffffffffffffffda RBX: 00007f94ae225fa0 RCX: 00007f94adf9f559
[ 1109.450484][T27048] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000
[ 1109.458498][T27048] RBP: 00007f94aed90090 R08: 0000000000000000 R09: 0000000000000000
[ 1109.466636][T27048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1109.475189][T27048] R13: 00007f94ae226038 R14: 00007f94ae225fa0 R15: 00007ffe2276bf38
[ 1109.483221][T27048]  </TASK>
[ 1111.363693][T27081] FAULT_INJECTION: forcing a failure.
[ 1111.363693][T27081] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1111.387644][T27081] CPU: 0 PID: 27081 Comm: syz.2.6879 Not tainted syzkaller #0
[ 1111.395321][T27081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1111.405446][T27081] Call Trace:
[ 1111.408792][T27081]  <TASK>
[ 1111.411782][T27081]  dump_stack_lvl+0x18c/0x250
[ 1111.416540][T27081]  ? show_regs_print_info+0x20/0x20
[ 1111.421820][T27081]  ? load_image+0x420/0x420
[ 1111.426410][T27081]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1111.431517][T27081]  ? snprintf+0xe9/0x140
[ 1111.435836][T27081]  should_fail_ex+0x394/0x4c0
[ 1111.440588][T27081]  _copy_to_user+0x2f/0xa0
[ 1111.445157][T27081]  simple_read_from_buffer+0xe7/0x150
[ 1111.450678][T27081]  proc_fail_nth_read+0x1e8/0x260
[ 1111.455803][T27081]  ? proc_fault_inject_write+0x360/0x360
[ 1111.461513][T27081]  ? fsnotify_perm+0x271/0x5e0
[ 1111.466349][T27081]  ? proc_fault_inject_write+0x360/0x360
[ 1111.472046][T27081]  vfs_read+0x298/0x990
[ 1111.476270][T27081]  ? kernel_read+0x1e0/0x1e0
[ 1111.481005][T27081]  ? __fget_files+0x28/0x460
[ 1111.485655][T27081]  ? __fget_files+0x3fc/0x460
[ 1111.490441][T27081]  ? __fdget_pos+0x2a3/0x330
[ 1111.495187][T27081]  ? ksys_read+0x74/0x260
[ 1111.499591][T27081]  ksys_read+0x151/0x260
[ 1111.503922][T27081]  ? vfs_write+0x9a0/0x9a0
[ 1111.508488][T27081]  ? lockdep_hardirqs_on+0x98/0x150
[ 1111.513768][T27081]  do_syscall_64+0x55/0xb0
[ 1111.518247][T27081]  ? clear_bhb_loop+0x40/0x90
[ 1111.522988][T27081]  ? clear_bhb_loop+0x40/0x90
[ 1111.527733][T27081]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1111.533778][T27081] RIP: 0033:0x7ff41575fd8e
[ 1111.538236][T27081] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1111.558147][T27081] RSP: 002b:00007ff41663efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1111.566599][T27081] RAX: ffffffffffffffda RBX: 00007ff41663f6c0 RCX: 00007ff41575fd8e
[ 1111.574597][T27081] RDX: 000000000000000f RSI: 00007ff41663f0a0 RDI: 0000000000000008
[ 1111.582597][T27081] RBP: 00007ff41663f090 R08: 0000000000000000 R09: 0000000000000000
[ 1111.590609][T27081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1111.598620][T27081] R13: 00007ff415a26038 R14: 00007ff415a25fa0 R15: 00007fff1a7398f8
[ 1111.606638][T27081]  </TASK>
[ 1111.706588][T27089] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.6880'.
[ 1113.315546][T27126] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6895'.
[ 1113.342668][T27126] netlink: del zone limit has 4 unknown bytes
[ 1113.828166][T27140] netlink: 'syz.2.6901': attribute type 2 has an invalid length.
[ 1113.847632][T27140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6901'.
[ 1115.697302][T27179] sit0: entered allmulticast mode
[ 1115.775004][T27178] sit0: entered promiscuous mode
[ 1116.276270][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.285147][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.437785][T27198] netlink: 'syz.4.6919': attribute type 9 has an invalid length.
[ 1116.461988][T27198] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6919'.
[ 1116.637016][T27197] netlink: 'syz.4.6919': attribute type 9 has an invalid length.
[ 1116.659437][T27197] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.6919'.
[ 1117.182794][T27213] rxe_eth0 speed is unknown, defaulting to 1000
[ 1117.890955][T27234] netlink: 'syz.2.6927': attribute type 3 has an invalid length.
[ 1117.928705][T27234] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6927'.
[ 1119.253500][T27242] netlink: 'syz.4.6936': attribute type 6 has an invalid length.
[ 1119.269282][T27242] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6936'.
[ 1119.405061][T27238] sit0: left promiscuous mode
[ 1119.797141][T27246] sit0: entered promiscuous mode
[ 1119.928536][T27253] bridge_slave_1: left allmulticast mode
[ 1119.948645][T27253] bridge_slave_1: left promiscuous mode
[ 1119.965249][T27253] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1120.053304][T27253] bridge_slave_0: left allmulticast mode
[ 1120.059956][T27253] bridge_slave_0: left promiscuous mode
[ 1120.068282][T27253] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1120.726996][T27254] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6933'.
[ 1121.250070][T27273] netlink: 'syz.1.6937': attribute type 3 has an invalid length.
[ 1121.273357][T27273] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6937'.
[ 1121.631476][T27277] netlink: 'syz.4.6940': attribute type 21 has an invalid length.
[ 1122.163359][T27295] netlink: 'syz.3.6945': attribute type 3 has an invalid length.
[ 1122.211535][T27295] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6945'.
[ 1122.912397][T27308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6950'.
[ 1122.963406][T27309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6950'.
[ 1123.515742][T27319] netlink: 'syz.4.6954': attribute type 11 has an invalid length.
[ 1123.579333][T27319] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6954'.
[ 1123.715542][T27327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6957'.
[ 1123.741233][T27332] netlink: 'syz.1.6959': attribute type 3 has an invalid length.
[ 1123.749812][T27332] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6959'.
[ 1123.803519][T27333] netlink: 'syz.3.6955': attribute type 3 has an invalid length.
[ 1123.829277][T27333] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6955'.
[ 1123.926733][T27336] netlink: 'syz.4.6968': attribute type 3 has an invalid length.
[ 1123.958272][T27336] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6968'.
[ 1124.247538][T27337] sit0: left promiscuous mode
[ 1124.689616][T27340] sit0: entered promiscuous mode
[ 1124.854138][T27352] netlink: 'syz.4.6970': attribute type 3 has an invalid length.
[ 1124.876019][T27352] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6970'.
[ 1125.768153][T27373] netlink: 'syz.3.6967': attribute type 11 has an invalid length.
[ 1126.091180][T27384] netlink: 'syz.1.6973': attribute type 3 has an invalid length.
[ 1126.099011][T27384] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6973'.
[ 1126.563568][T27399] netlink: 'syz.1.6979': attribute type 29 has an invalid length.
[ 1126.578491][T27399] netlink: 'syz.1.6979': attribute type 29 has an invalid length.
[ 1126.594451][T27398] netlink: 'syz.1.6979': attribute type 29 has an invalid length.
[ 1126.687090][T27398] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6979'.
[ 1126.753250][T27398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1127.897579][T27416] netlink: 'syz.1.6984': attribute type 3 has an invalid length.
[ 1127.910764][T27416] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6984'.
[ 1129.205442][T27436] syzkaller0: entered promiscuous mode
[ 1129.237844][T27436] syzkaller0: entered allmulticast mode
[ 1129.837686][T27447] netlink: 'syz.3.6994': attribute type 3 has an invalid length.
[ 1129.849339][T27447] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6994'.
[ 1130.629103][T27466] netlink: 'syz.3.7003': attribute type 3 has an invalid length.
[ 1130.640040][T27466] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7003'.
[ 1130.904833][T27469] netlink: 'syz.3.7005': attribute type 3 has an invalid length.
[ 1130.913088][T27469] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.7005'.
[ 1132.120603][T27493] netlink: 'syz.4.7013': attribute type 3 has an invalid length.
[ 1132.128854][T27493] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7013'.
[ 1134.258930][T27518] netlink: 'syz.4.7023': attribute type 3 has an invalid length.
[ 1134.278168][T27518] netlink: 197976 bytes leftover after parsing attributes in process `syz.4.7023'.
[ 1135.327364][T27541] netlink: 'syz.4.7033': attribute type 3 has an invalid length.
[ 1135.348969][T27541] netlink: 197976 bytes leftover after parsing attributes in process `syz.4.7033'.
[ 1136.377041][T27560] netlink: 'syz.1.7039': attribute type 29 has an invalid length.
[ 1136.544094][T27565] netlink: 'syz.2.7041': attribute type 3 has an invalid length.
[ 1136.563913][T27565] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7041'.
[ 1136.728339][T27571] netlink: 'syz.3.7044': attribute type 3 has an invalid length.
[ 1136.740172][T27571] netlink: 197976 bytes leftover after parsing attributes in process `syz.3.7044'.
[ 1136.997656][T27588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7049'.
[ 1137.389449][T27588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7049'.
[ 1137.402795][T27592] netlink: 'syz.3.7049': attribute type 10 has an invalid length.
[ 1137.440963][T27597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7049'.
[ 1137.553806][T27602] netlink: 'syz.3.7053': attribute type 3 has an invalid length.
[ 1137.562508][T27602] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7053'.
[ 1137.800490][T27610] netlink: 'syz.3.7057': attribute type 3 has an invalid length.
[ 1137.814583][T27610] netlink: 197976 bytes leftover after parsing attributes in process `syz.3.7057'.
[ 1138.005093][T27616] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7060'.
[ 1138.047508][T27616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1138.116879][T27616] netlink: 'syz.3.7060': attribute type 21 has an invalid length.
[ 1138.139368][T27616] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7060'.
[ 1138.170291][T27628] netlink: 'syz.4.7063': attribute type 3 has an invalid length.
[ 1138.625418][T27640] netlink: 'syz.3.7068': attribute type 3 has an invalid length.
[ 1138.917298][T27661] netlink: 'syz.1.7075': attribute type 27 has an invalid length.
[ 1138.962279][T27656] ƒ: renamed from tunl0 (while UP)
[ 1141.188803][T27706] __nla_validate_parse: 4 callbacks suppressed
[ 1141.188823][T27706] netlink: 197976 bytes leftover after parsing attributes in process `syz.3.7093'.
[ 1141.666146][T27728] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7100'.
[ 1142.402239][T27745] validate_nla: 2 callbacks suppressed
[ 1142.402260][T27745] netlink: 'syz.1.7107': attribute type 3 has an invalid length.
[ 1142.451252][T27745] netlink: 'syz.1.7107': attribute type 5 has an invalid length.
[ 1142.469243][T27745] netlink: 'syz.1.7107': attribute type 6 has an invalid length.
[ 1142.493122][T27745] netlink: 198296 bytes leftover after parsing attributes in process `syz.1.7107'.
[ 1143.193539][T27769] netlink: 'syz.2.7119': attribute type 3 has an invalid length.
[ 1143.529689][T27776] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7121'.
[ 1144.348205][T27792] netlink: 'syz.3.7128': attribute type 3 has an invalid length.
[ 1145.037603][T27805] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7132'.
[ 1145.064618][T27806] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7132'.
[ 1145.157091][T27811] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7133'.
[ 1145.398530][T27816] sit0: left promiscuous mode
[ 1145.448866][T27824] netlink: 'syz.4.7139': attribute type 3 has an invalid length.
[ 1145.525258][T27826] netlink: 'syz.3.7140': attribute type 29 has an invalid length.
[ 1145.620993][T27818] sit0: entered promiscuous mode
[ 1145.968012][T27826] netlink: 'syz.3.7140': attribute type 29 has an invalid length.
[ 1145.977262][T27828] netlink: 'syz.3.7140': attribute type 29 has an invalid length.
[ 1145.994002][T27832] netlink: 'syz.3.7140': attribute type 29 has an invalid length.
[ 1146.504965][T27863] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1146.518930][T27863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7148'.
[ 1146.744872][T27863] bridge_slave_0 (unregistering): left allmulticast mode
[ 1146.775313][T27863] bridge_slave_0 (unregistering): left promiscuous mode
[ 1146.791191][T27863] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1147.237697][T27867] rxe_eth0 speed is unknown, defaulting to 1000
[ 1147.272205][T27882] bridge0: port 2(dummy0) entered disabled state
[ 1147.306344][T27882] bridge_slave_0: left allmulticast mode
[ 1147.340307][T27882] bridge_slave_0: left promiscuous mode
[ 1147.374910][T27882] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1147.877459][T27888] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.7156'.
[ 1150.194548][T27952] validate_nla: 2 callbacks suppressed
[ 1150.194569][T27952] netlink: 'syz.4.7179': attribute type 10 has an invalid length.
[ 1151.764770][T15664] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1151.779394][T15664] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1151.790118][T15664] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1151.800562][T15664] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1151.808897][T15664] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1151.816796][T15664] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1153.243851][T27952] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1153.287498][T27952] team0: Port device batadv0 added
[ 1153.909813][T22450] Bluetooth: hci3: command tx timeout
[ 1154.348215][T27964] rxe_eth0 speed is unknown, defaulting to 1000
[ 1154.467365][T24646] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.677800][T24646] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1154.817662][T24646] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.015008][T24646] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1155.090627][T27997] netlink: 'syz.4.7191': attribute type 46 has an invalid length.
[ 1155.109024][T27997] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7191'.
[ 1155.424064][T28010] tap0: tun_chr_ioctl cmd 1074025681
[ 1155.448754][T28010] tap0: tun_chr_ioctl cmd 1074025677
[ 1155.464673][T28010] tap0: linktype set to 513
[ 1155.522993][T27964] chnl_net:caif_netlink_parms(): no params data found
[ 1155.951091][T22450] Bluetooth: hci3: command tx timeout
[ 1156.063280][T27964] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1156.079736][T27964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1156.087056][T27964] bridge_slave_0: entered allmulticast mode
[ 1156.103151][T27964] bridge_slave_0: entered promiscuous mode
[ 1156.206795][T27964] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1156.234202][T27964] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1156.254069][T27964] bridge_slave_1: entered allmulticast mode
[ 1156.272701][T27964] bridge_slave_1: entered promiscuous mode
[ 1156.504374][T27964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1156.532600][T27964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1156.737849][T27964] team0: Port device team_slave_0 added
[ 1156.852813][T27964] team0: Port device team_slave_1 added
[ 1157.047768][T27964] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1157.079616][T27964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1157.125077][T27964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1157.215770][T27964] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1157.242028][T27964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1157.282311][T27964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1157.450382][T27964] hsr_slave_0: entered promiscuous mode
[ 1157.510226][T27964] hsr_slave_1: entered promiscuous mode
[ 1157.826767][T28073] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7212'.
[ 1158.029344][T22450] Bluetooth: hci3: command tx timeout
[ 1160.109321][T22450] Bluetooth: hci3: command tx timeout
[ 1161.582731][T24646] hsr_slave_0: left promiscuous mode
[ 1161.603862][T24646] hsr_slave_1: left promiscuous mode
[ 1161.621009][T24646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1161.628541][T24646] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1161.656302][T24646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1161.677475][T24646] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1161.722655][T24646] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1161.745823][T24646] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1165.636255][T28116] netlink: 'syz.2.7221': attribute type 10 has an invalid length.
[ 1165.647917][T28116] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1166.114608][T27964] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1169.126242][T27964] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1169.179395][T27964] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1169.230947][T27964] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1169.530547][T27964] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1169.592174][T27964] 8021q: adding VLAN 0 to HW filter on device team0
[ 1169.624668][T28192] netlink: 'syz.4.7241': attribute type 10 has an invalid length.
[ 1169.685165][T28192] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1169.731397][T24631] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1169.738624][T24631] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1169.769522][T24631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1169.776748][T24631] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.497701][T27964] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1170.673108][T27964] veth0_vlan: entered promiscuous mode
[ 1170.720715][T28229] rxe_eth0 speed is unknown, defaulting to 1000
[ 1170.745116][T27964] veth1_vlan: entered promiscuous mode
[ 1170.918364][T27964] veth0_macvtap: entered promiscuous mode
[ 1171.055563][T27964] veth1_macvtap: entered promiscuous mode
[ 1171.204298][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1171.264855][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1171.318726][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1171.365985][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1171.418391][T27964] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1171.524347][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1171.567954][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1171.615018][T27964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1171.647885][T27964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1171.681990][T27964] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1171.724948][T27964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.743060][T27964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.754725][T27964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.765949][T27964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.118115][T24621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.137701][T28263] netlink: 'syz.2.7258': attribute type 1 has an invalid length.
[ 1172.159295][T24621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.200410][T28263] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7258'.
[ 1172.387021][T24646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.415853][T24646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1173.734929][T28301] netlink: 'syz.4.7268': attribute type 29 has an invalid length.
[ 1173.762731][T28305] netlink: 'syz.4.7268': attribute type 10 has an invalid length.
[ 1173.800249][T28305] veth0_vlan: entered allmulticast mode
[ 1174.179234][T28305] veth0_vlan: left promiscuous mode
[ 1174.223689][T15664] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1174.239394][T15664] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1174.265988][T15664] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1174.292904][T15664] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1174.301151][T28305] veth0_vlan: entered promiscuous mode
[ 1174.320028][T15664] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1174.329668][T15664] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1174.345814][T28325] netlink: 'syz.2.7270': attribute type 3 has an invalid length.
[ 1174.362248][T28305] team0: Device veth0_vlan failed to register rx_handler
[ 1174.469549][T28301] netlink: 'syz.4.7268': attribute type 29 has an invalid length.
[ 1174.505800][T28310] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7268'.
[ 1174.837727][T24646] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1174.900899][T28320] rxe_eth0 speed is unknown, defaulting to 1000
[ 1175.065581][T28336] syzkaller0: entered promiscuous mode
[ 1175.085718][T28336] syzkaller0: entered allmulticast mode
[ 1175.194319][T24646] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1175.262753][T28347] netlink: 763 bytes leftover after parsing attributes in process `syz.3.7276'.
[ 1175.459835][T28347] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7276'.
[ 1175.507321][T24646] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.100302][T28347] netlink: 'syz.3.7276': attribute type 6 has an invalid length.
[ 1176.277302][T24646] bond0: (slave netdevsim0): Releasing backup interface
[ 1176.306666][T24646] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1176.432042][T28366] netlink: 'syz.4.7278': attribute type 3 has an invalid length.
[ 1176.446402][T22450] Bluetooth: hci1: command tx timeout
[ 1177.714318][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.729241][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.513008][T22450] Bluetooth: hci1: command tx timeout
[ 1178.716604][T28372] mac80211_hwsim hwsim64 .3ãc¤±: renamed from wlan1 (while UP)
[ 1179.262066][T28391] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.7283'.
[ 1179.502771][T28320] chnl_net:caif_netlink_parms(): no params data found
[ 1179.760736][T28403] netlink: 'syz.2.7286': attribute type 3 has an invalid length.
[ 1180.616523][T22450] Bluetooth: hci1: command tx timeout
[ 1181.367028][T28447] netlink: 'syz.4.7294': attribute type 3 has an invalid length.
[ 1181.527362][T28433] syzkaller0: entered promiscuous mode
[ 1181.551798][T28433] syzkaller0: entered allmulticast mode
[ 1181.772558][T28320] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1181.801975][T28320] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1181.823919][T28320] bridge_slave_0: entered allmulticast mode
[ 1181.831797][T28320] bridge_slave_0: entered promiscuous mode
[ 1181.928229][T28320] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1181.951803][T28320] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1181.979553][T28320] bridge_slave_1: entered allmulticast mode
[ 1181.990158][T28320] bridge_slave_1: entered promiscuous mode
[ 1182.537050][T28470] netlink: 'syz.4.7303': attribute type 3 has an invalid length.
[ 1182.559841][T28470] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7303'.
[ 1182.669484][T22450] Bluetooth: hci1: command tx timeout
[ 1185.057172][T28320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1185.076909][T28320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1185.088890][T28468] mac80211_hwsim hwsim43 .3ãc¤±: renamed from wlan1 (while UP)
[ 1185.105766][T28488] sit0: left promiscuous mode
[ 1185.189835][T28485] sit0: entered promiscuous mode
[ 1185.507876][T28320] team0: Port device team_slave_0 added
[ 1185.542322][T28320] team0: Port device team_slave_1 added
[ 1185.563313][T28498] netlink: 'syz.2.7312': attribute type 3 has an invalid length.
[ 1186.563334][T28320] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1186.579526][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1186.652182][T28320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1186.681623][T28320] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1186.694542][T28320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1186.724987][T28320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1187.081093][T28320] hsr_slave_0: entered promiscuous mode
[ 1187.115132][T28320] hsr_slave_1: entered promiscuous mode
[ 1187.145370][T28320] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1187.169364][T28320] Cannot create hsr debugfs directory
[ 1187.242765][T24646] bond0: (slave wlan1): Releasing backup interface
[ 1187.487099][T28543] mac80211_hwsim hwsim68 .3ãc¤±: renamed from wlan1 (while UP)
[ 1187.851505][T28556] netlink: 'syz.4.7322': attribute type 3 has an invalid length.
[ 1188.516554][T24646] hsr_slave_0: left promiscuous mode
[ 1188.545565][T24646] hsr_slave_1: left promiscuous mode
[ 1188.589779][T24646] veth1_macvtap: left promiscuous mode
[ 1188.595415][T24646] veth0_macvtap: left promiscuous mode
[ 1188.614960][T24646] veth1_vlan: left promiscuous mode
[ 1188.627714][T24646] veth0_vlan: left promiscuous mode
[ 1189.146113][T28586] netlink: 'syz.3.7333': attribute type 3 has an invalid length.
[ 1189.169393][T28586] netlink: 197976 bytes leftover after parsing attributes in process `syz.3.7333'.
[ 1189.357513][T24646] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 1189.620738][T28599] FAULT_INJECTION: forcing a failure.
[ 1189.620738][T28599] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1189.652348][T28599] CPU: 1 PID: 28599 Comm: syz.3.7337 Not tainted syzkaller #0
[ 1189.659909][T28599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1189.670030][T28599] Call Trace:
[ 1189.673371][T28599]  <TASK>
[ 1189.676360][T28599]  dump_stack_lvl+0x18c/0x250
[ 1189.681113][T28599]  ? show_regs_print_info+0x20/0x20
[ 1189.686377][T28599]  ? load_image+0x420/0x420
[ 1189.690959][T28599]  ? __might_fault+0xaa/0x120
[ 1189.695701][T28599]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1189.700882][T28599]  should_fail_ex+0x394/0x4c0
[ 1189.705615][T28599]  _copy_from_user+0x2f/0xe0
[ 1189.710306][T28599]  ___sys_sendmsg+0x1c7/0x360
[ 1189.715060][T28599]  ? get_pid_task+0x20/0x1e0
[ 1189.718119][T28580] delete_channel: no stack
[ 1189.719707][T28599]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1189.719756][T28599]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1189.719807][T28599]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1189.739052][T28599]  ? __x64_sys_sendmsg+0x80/0x80
[ 1189.744233][T28599]  ? lockdep_hardirqs_on+0x98/0x150
[ 1189.749480][T28599]  do_syscall_64+0x55/0xb0
[ 1189.753944][T28599]  ? clear_bhb_loop+0x40/0x90
[ 1189.758655][T28599]  ? clear_bhb_loop+0x40/0x90
[ 1189.763371][T28599]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1189.769318][T28599] RIP: 0033:0x7f38e219f559
[ 1189.773767][T28599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1189.793429][T28599] RSP: 002b:00007f38e3010028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1189.802165][T28599] RAX: ffffffffffffffda RBX: 00007f38e2425fa0 RCX: 00007f38e219f559
[ 1189.810775][T28599] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1189.818776][T28599] RBP: 00007f38e3010090 R08: 0000000000000000 R09: 0000000000000000
[ 1189.826777][T28599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1189.834778][T28599] R13: 00007f38e2426038 R14: 00007f38e2425fa0 R15: 00007ffce5e34bf8
[ 1189.842790][T28599]  </TASK>
[ 1189.912916][T24646] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[ 1190.156972][T28609] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.7338'.
[ 1190.194549][T28609] netlink: 'syz.2.7338': attribute type 3 has an invalid length.
[ 1190.843843][T24646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1190.913113][T24646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1190.925146][T28615] netlink: 'syz.3.7342': attribute type 3 has an invalid length.
[ 1190.933471][T28615] netlink: 197976 bytes leftover after parsing attributes in process `syz.3.7342'.
[ 1191.060392][T28617] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7343'.
[ 1191.278078][T24646] bond0 (unregistering): Released all slaves
[ 1191.365325][T28601] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7338'.
[ 1191.394496][T28605] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7338'.
[ 1191.427499][T28605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1191.456294][T28618] netlink: 'syz.3.7343': attribute type 4 has an invalid length.
[ 1191.479667][T28618] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7343'.
[ 1191.645159][T28581] rxe_eth0 speed is unknown, defaulting to 1000
[ 1192.535486][T28645] netlink: 'syz.2.7350': attribute type 3 has an invalid length.
[ 1192.544950][T28649] FAULT_INJECTION: forcing a failure.
[ 1192.544950][T28649] name failslab, interval 1, probability 0, space 0, times 0
[ 1192.560165][T28645] netlink: 197976 bytes leftover after parsing attributes in process `syz.2.7350'.
[ 1192.570210][T28649] CPU: 0 PID: 28649 Comm: syz.3.7351 Not tainted syzkaller #0
[ 1192.577735][T28649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1192.587842][T28649] Call Trace:
[ 1192.591170][T28649]  <TASK>
[ 1192.594146][T28649]  dump_stack_lvl+0x18c/0x250
[ 1192.598892][T28649]  ? show_regs_print_info+0x20/0x20
[ 1192.604152][T28649]  ? load_image+0x420/0x420
[ 1192.608697][T28649]  ? __might_sleep+0xe0/0xe0
[ 1192.613322][T28649]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1192.618383][T28649]  should_fail_ex+0x394/0x4c0
[ 1192.623096][T28649]  should_failslab+0x9/0x20
[ 1192.627627][T28649]  slab_pre_alloc_hook+0x59/0x300
[ 1192.632684][T28649]  ? __get_vm_area_node+0x125/0x370
[ 1192.637924][T28649]  __kmem_cache_alloc_node+0x53/0x260
[ 1192.643328][T28649]  ? __get_vm_area_node+0x125/0x370
[ 1192.648562][T28649]  kmalloc_node_trace+0x26/0xe0
[ 1192.653556][T28649]  __get_vm_area_node+0x125/0x370
[ 1192.658621][T28649]  __vmalloc_node_range+0x36f/0x1320
[ 1192.663959][T28649]  ? netlink_sendmsg+0x602/0xbf0
[ 1192.668960][T28649]  ? netlink_insert+0x1094/0x1390
[ 1192.674021][T28649]  ? netlink_insert+0x2ba/0x1390
[ 1192.678992][T28649]  ? free_vm_area+0x50/0x50
[ 1192.683538][T28649]  ? netlink_sendmsg+0x602/0xbf0
[ 1192.688508][T28649]  vmalloc+0x79/0x90
[ 1192.692439][T28649]  ? netlink_sendmsg+0x602/0xbf0
[ 1192.697430][T28649]  netlink_sendmsg+0x602/0xbf0
[ 1192.702228][T28649]  ? netlink_getsockopt+0x590/0x590
[ 1192.707457][T28649]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1192.713044][T28649]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1192.718362][T28649]  ? security_socket_sendmsg+0x80/0xa0
[ 1192.723861][T28649]  ? netlink_getsockopt+0x590/0x590
[ 1192.729091][T28649]  ____sys_sendmsg+0x61b/0x980
[ 1192.733897][T28649]  ? __asan_memset+0x22/0x40
[ 1192.738528][T28649]  ? __sys_sendmsg_sock+0x30/0x30
[ 1192.743590][T28649]  ? __import_iovec+0x5f2/0x850
[ 1192.748476][T28649]  ? import_iovec+0x73/0xa0
[ 1192.753012][T28649]  ___sys_sendmsg+0x2a6/0x360
[ 1192.757721][T28649]  ? get_pid_task+0x20/0x1e0
[ 1192.762345][T28649]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1192.767150][T28649]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1192.772221][T28649]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1192.777106][T28649]  ? __x64_sys_sendmsg+0x80/0x80
[ 1192.782086][T28649]  ? lockdep_hardirqs_on+0x98/0x150
[ 1192.787321][T28649]  do_syscall_64+0x55/0xb0
[ 1192.791772][T28649]  ? clear_bhb_loop+0x40/0x90
[ 1192.796486][T28649]  ? clear_bhb_loop+0x40/0x90
[ 1192.801207][T28649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1192.807137][T28649] RIP: 0033:0x7f38e219f559
[ 1192.811584][T28649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1192.831230][T28649] RSP: 002b:00007f38e3010028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1192.839682][T28649] RAX: ffffffffffffffda RBX: 00007f38e2425fa0 RCX: 00007f38e219f559
[ 1192.847677][T28649] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1192.855675][T28649] RBP: 00007f38e3010090 R08: 0000000000000000 R09: 0000000000000000
[ 1192.863684][T28649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1192.871697][T28649] R13: 00007f38e2426038 R14: 00007f38e2425fa0 R15: 00007ffce5e34bf8
[ 1192.879714][T28649]  </TASK>
[ 1192.892347][T28649] syz.3.7351: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1192.907328][T28649] CPU: 1 PID: 28649 Comm: syz.3.7351 Not tainted syzkaller #0
[ 1192.914860][T28649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1192.924968][T28649] Call Trace:
[ 1192.928291][T28649]  <TASK>
[ 1192.931266][T28649]  dump_stack_lvl+0x18c/0x250
[ 1192.936013][T28649]  ? show_regs_print_info+0x20/0x20
[ 1192.941308][T28649]  ? load_image+0x420/0x420
[ 1192.945897][T28649]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1192.952377][T28649]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1192.958970][T28649]  warn_alloc+0x246/0x340
[ 1192.963358][T28649]  ? zone_watermark_ok_safe+0x230/0x230
[ 1192.968969][T28649]  ? __get_vm_area_node+0x356/0x370
[ 1192.974253][T28649]  __vmalloc_node_range+0x394/0x1320
[ 1192.979623][T28649]  ? netlink_insert+0x1094/0x1390
[ 1192.984818][T28649]  ? netlink_insert+0x2ba/0x1390
[ 1192.989833][T28649]  ? free_vm_area+0x50/0x50
[ 1192.994410][T28649]  ? netlink_sendmsg+0x602/0xbf0
[ 1192.999418][T28649]  vmalloc+0x79/0x90
[ 1193.003412][T28649]  ? netlink_sendmsg+0x602/0xbf0
[ 1193.008403][T28649]  netlink_sendmsg+0x602/0xbf0
[ 1193.013494][T28649]  ? netlink_getsockopt+0x590/0x590
[ 1193.018749][T28649]  ? apparmor_socket_sendmsg+0x8e/0x330
[ 1193.024573][T28649]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 1193.029932][T28649]  ? security_socket_sendmsg+0x80/0xa0
[ 1193.035440][T28649]  ? netlink_getsockopt+0x590/0x590
[ 1193.040696][T28649]  ____sys_sendmsg+0x61b/0x980
[ 1193.045528][T28649]  ? __asan_memset+0x22/0x40
[ 1193.050174][T28649]  ? __sys_sendmsg_sock+0x30/0x30
[ 1193.055330][T28649]  ? __import_iovec+0x5f2/0x850
[ 1193.060231][T28649]  ? import_iovec+0x73/0xa0
[ 1193.064774][T28649]  ___sys_sendmsg+0x2a6/0x360
[ 1193.069523][T28649]  ? get_pid_task+0x20/0x1e0
[ 1193.074436][T28649]  ? __sys_sendmsg+0x2b0/0x2b0
[ 1193.079361][T28649]  ? __lock_acquire+0x7eb0/0x7eb0
[ 1193.084440][T28649]  __se_sys_sendmsg+0x1d0/0x2c0
[ 1193.089333][T28649]  ? __x64_sys_sendmsg+0x80/0x80
[ 1193.094411][T28649]  ? lockdep_hardirqs_on+0x98/0x150
[ 1193.099662][T28649]  do_syscall_64+0x55/0xb0
[ 1193.104118][T28649]  ? clear_bhb_loop+0x40/0x90
[ 1193.108831][T28649]  ? clear_bhb_loop+0x40/0x90
[ 1193.113583][T28649]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1193.119598][T28649] RIP: 0033:0x7f38e219f559
[ 1193.124043][T28649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1193.143768][T28649] RSP: 002b:00007f38e3010028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1193.152479][T28649] RAX: ffffffffffffffda RBX: 00007f38e2425fa0 RCX: 00007f38e219f559
[ 1193.160745][T28649] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[ 1193.168825][T28649] RBP: 00007f38e3010090 R08: 0000000000000000 R09: 0000000000000000
[ 1193.177087][T28649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1193.185085][T28649] R13: 00007f38e2426038 R14: 00007f38e2425fa0 R15: 00007ffce5e34bf8
[ 1193.193208][T28649]  </TASK>
[ 1193.387839][T28649] Mem-Info:
[ 1193.401454][T28649] active_anon:11888 inactive_anon:0 isolated_anon:0
[ 1193.401454][T28649]  active_file:18968 inactive_file:40411 isolated_file:0
[ 1193.401454][T28649]  unevictable:768 dirty:89 writeback:0
[ 1193.401454][T28649]  slab_reclaimable:11214 slab_unreclaimable:99245
[ 1193.401454][T28649]  mapped:24573 shmem:1376 pagetables:654
[ 1193.401454][T28649]  sec_pagetables:0 bounce:0
[ 1193.401454][T28649]  kernel_misc_reclaimable:0
[ 1193.401454][T28649]  free:1321069 free_pcp:14814 free_cma:0
[ 1193.488679][T28320] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1193.505345][T28649] Node 0 active_anon:47452kB inactive_anon:0kB active_file:75872kB inactive_file:161444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98292kB dirty:356kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12968kB pagetables:2616kB sec_pagetables:0kB all_unreclaimable? no
[ 1193.546017][T28649] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1193.582335][T28320] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1193.596060][T28649] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1193.631181][T28649] lowmem_reserve[]: 0 2505 2506 2506 2506
[ 1193.637389][T28649] Node 0 DMA32 free:1367852kB boost:0kB min:34508kB low:43132kB high:51756kB reserved_highatomic:0KB active_anon:47416kB inactive_anon:0kB active_file:75872kB inactive_file:160376kB unevictable:1536kB writepending:356kB present:3129332kB managed:2570004kB mlocked:0kB bounce:0kB free_pcp:37452kB local_pcp:17260kB free_cma:0kB
[ 1193.694310][T28320] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1193.733332][T28320] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1193.751993][T28649] lowmem_reserve[]: 0 0 1 1 1
[ 1193.756819][T28649] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1068kB unevictable:0kB writepending:0kB present:1048576kB managed:1128kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 1193.830378][T28649] lowmem_reserve[]: 0 0 0 0 0
[ 1193.861249][T28649] Node 1 Normal free:3901052kB boost:0kB min:55380kB low:69224kB high:83068kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21804kB local_pcp:9952kB free_cma:0kB
[ 1193.899329][T28649] lowmem_reserve[]: 0 0 0 0 0
[ 1193.904150][T28649] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1193.917131][T28659] netlink: 'syz.2.7354': attribute type 3 has an invalid length.
[ 1193.959583][T28649] Node 0 DMA32: 997*4kB (UME) 861*8kB (UME) 1483*16kB (UM) 1052*32kB (UME) 896*64kB (UME) 847*128kB (UME) 190*256kB (UME) 83*512kB (UME) 46*1024kB (UME) 10*2048kB (UM) 238*4096kB (UM) = 1367596kB
[ 1194.018364][T28649] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[ 1194.059238][T28649] Node 1 Normal: 163*4kB (UME) 22*8kB (UME) 40*16kB (UME) 66*32kB (UME) 20*64kB (UME) 9*128kB (UME) 1*256kB (M) 1*512kB (E) 1*1024kB (E) 1*2048kB (E) 950*4096kB (UM) = 3901052kB
[ 1194.109255][T28649] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1194.140135][T28649] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1194.187975][T28649] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1194.213604][T28649] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1194.228734][T28320] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1194.263788][T28649] 60755 total pagecache pages
[ 1194.268556][T28649] 0 pages in swap cache
[ 1194.304816][T28649] Free swap  = 124996kB
[ 1194.321085][T28649] Total swap = 124996kB
[ 1194.326173][T28649] 2097051 pages RAM
[ 1194.349643][T28649] 0 pages HighMem/MovableOnly
[ 1194.354448][T28649] 421100 pages reserved
[ 1194.358679][T28649] 0 pages cma reserved
[ 1194.363664][T28320] 8021q: adding VLAN 0 to HW filter on device team0
[ 1194.402851][T24622] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1194.410375][T24622] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1194.470153][T28662] netlink: 'syz.2.7355': attribute type 21 has an invalid length.
[ 1194.478222][T28662] netlink: 'syz.2.7355': attribute type 4 has an invalid length.
[ 1194.519701][T28662] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7355'.
[ 1194.662267][T24631] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1194.669627][T24631] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1195.336872][T28684] netlink: 'syz.3.7361': attribute type 17 has an invalid length.
[ 1195.356291][T28684] netlink: 'syz.3.7361': attribute type 16 has an invalid length.
[ 1195.383187][T28684] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7361'.
[ 1195.503514][T28320] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1195.572382][T28694] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7363'.
[ 1195.658035][T28320] veth0_vlan: entered promiscuous mode
[ 1195.698559][T28320] veth1_vlan: entered promiscuous mode
[ 1196.006100][T28320] veth0_macvtap: entered promiscuous mode
[ 1196.042117][T28320] veth1_macvtap: entered promiscuous mode
[ 1196.134385][T28320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1196.153453][T28320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1196.163859][T28320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1196.187307][T28320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1196.211552][T28320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1196.230670][T28320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1196.255662][T28320] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1196.312456][T28320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1196.334578][T28320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1196.348090][T28320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1196.383769][T28320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1196.393975][T28320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1196.413764][T28320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1196.448614][T28320] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1196.480419][T28715] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7369'.
[ 1196.517048][T28715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1196.558640][T28320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1196.580546][T28320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1196.595729][T28320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1196.605500][T28320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1196.902822][T24651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1196.928116][T24651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1196.977987][T24651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1197.007481][T24651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1197.333842][T28740] netlink: 'syz.3.7374': attribute type 10 has an invalid length.
[ 1197.378256][T28740] nla_validate_range_unsigned: 25 callbacks suppressed
[ 1197.378277][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.450913][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.458821][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.487299][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.496540][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.510756][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.518650][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.596427][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.649261][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.682218][T28740] netlink: 'syz.3.7374': attribute type 11 has an invalid length.
[ 1197.712626][T28740] netlink: 'syz.3.7374': attribute type 4 has an invalid length.
[ 1197.729711][T28740] netlink: 'syz.3.7374': attribute type 5 has an invalid length.
[ 1197.750934][T28740] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.7374'.
[ 1197.763478][T28747] netlink: 'syz.1.7377': attribute type 21 has an invalid length.
[ 1197.791651][T28747] netlink: 'syz.1.7377': attribute type 4 has an invalid length.
[ 1197.835404][T28747] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7377'.
[ 1198.263137][T28754] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.7378'.
[ 1198.704462][T28767] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1198.716229][T28767] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1198.725196][T28767] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1198.735325][T28767] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1198.745989][T28767] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1198.755123][T28767] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1198.941391][T24631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.055514][T28774] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7382'.
[ 1199.065955][T28764] rxe_eth0 speed is unknown, defaulting to 1000
[ 1199.182615][T24631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1199.281719][T28774] netlink: 'syz.4.7382': attribute type 4 has an invalid length.
[ 1199.319532][T28774] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7382'.
[ 1199.691625][T28774] .3ãc¤±: mtu less than device minimum
[ 1199.774188][T28774] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1200.337692][T24631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.415840][T28797] netlink: 'syz.3.7386': attribute type 3 has an invalid length.
[ 1200.477167][T24631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1200.621035][T28805] netlink: 'syz.3.7387': attribute type 21 has an invalid length.
[ 1200.651489][T28805] netlink: 'syz.3.7387': attribute type 4 has an invalid length.
[ 1200.710989][T28805] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7387'.
[ 1201.049521][T28767] Bluetooth: hci2: command tx timeout
[ 1202.800016][T28764] chnl_net:caif_netlink_parms(): no params data found
[ 1203.083782][T28767] Bluetooth: hci2: command tx timeout
[ 1203.201197][T28764] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1203.208691][T28764] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1203.225103][T28764] bridge_slave_0: entered allmulticast mode
[ 1203.236160][T28764] bridge_slave_0: entered promiscuous mode
[ 1203.254934][T28764] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1203.268397][T28764] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1203.277848][T28764] bridge_slave_1: entered allmulticast mode
[ 1203.291925][T28764] bridge_slave_1: entered promiscuous mode
[ 1203.371179][T28764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1203.392641][T28764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1226.859200][T28767] Bluetooth: hci2: command tx timeout
[ 1226.942065][T28764] team0: Port device team_slave_0 added
[ 1228.396899][T28767] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1228.415237][T28767] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1228.426410][T28767] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1228.441061][T28767] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1228.456461][T28767] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1228.465439][T28767] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1228.913745][T28767] Bluetooth: hci2: command tx timeout
[ 1229.198594][T22450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1229.210174][T22450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1229.218584][T22450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1229.230210][T22450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1229.239528][T22450] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1229.248251][T22450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1229.820352][T28767] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1229.838670][T28767] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1229.847851][T28767] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1229.865194][T28767] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1229.878570][T28767] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 1229.890910][T28767] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1230.509539][T22450] Bluetooth: hci4: command tx timeout
[ 1231.309597][T22450] Bluetooth: hci5: command tx timeout
[ 1231.950856][T22450] Bluetooth: hci6: command tx timeout
[ 1232.589535][T22450] Bluetooth: hci4: command tx timeout
[ 1233.391189][T22450] Bluetooth: hci5: command tx timeout
[ 1234.042493][T22450] Bluetooth: hci6: command tx timeout
[ 1234.680139][T22450] Bluetooth: hci4: command tx timeout
[ 1235.479619][T22450] Bluetooth: hci5: command tx timeout
[ 1236.119525][T22450] Bluetooth: hci6: command tx timeout
[ 1236.759642][T22450] Bluetooth: hci4: command tx timeout
[ 1237.549513][T22450] Bluetooth: hci5: command tx timeout
[ 1238.189482][T22450] Bluetooth: hci6: command tx timeout
[ 1239.165782][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1239.172275][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1264.730410][T28767] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1264.749444][T28767] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1264.758654][T28767] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1264.768408][T28767] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1264.777815][T28767] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[ 1264.787332][T28767] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1266.839608][T28767] Bluetooth: hci7: command tx timeout
[ 1268.917543][T28767] Bluetooth: hci7: command tx timeout
[ 1270.999630][T28767] Bluetooth: hci7: command tx timeout
[ 1273.069375][T28767] Bluetooth: hci7: command tx timeout
[ 1277.075217][T28767] Bluetooth: hci3: command 0x0406 tx timeout
[ 1288.881667][T15664] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1288.892385][T28883] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1288.910594][T28883] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1288.920345][T28883] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1288.929184][T28883] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[ 1288.936661][T28883] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1289.921743][T15664] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1289.939358][T15664] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1289.948364][T15664] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1289.957783][T15664] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1289.966498][T15664] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[ 1289.974121][T15664] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1291.000340][T28890] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[ 1291.019254][T28890] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[ 1291.028074][T28890] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[ 1291.041952][T28890] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[ 1291.050017][T28890] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[ 1291.059018][T28890] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[ 1297.559644][T28892] Bluetooth: hci1: command 0x0406 tx timeout
[ 1300.617342][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.623950][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[ 1305.899147][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[ 1305.905932][    C0] rcu: 	0-....: (1 GPs behind) idle=eb9c/1/0x4000000000000000 softirq=117742/117743 fqs=2978
[ 1305.917276][    C0] rcu: 	         hardirqs   softirqs   csw/system
[ 1305.923708][    C0] rcu: 	 number:   558137          0            0
[ 1305.930128][    C0] rcu: 	cputime:     9815      42673          119   ==> 52490(ms)
[ 1305.937976][    C0] rcu: 	(t=10500 jiffies g=155713 q=4949 ncpus=2)
[ 1305.944467][    C0] CPU: 0 PID: 28802 Comm: syz.1.7394 Not tainted syzkaller #0
[ 1305.951945][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1305.962027][    C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0
[ 1305.968918][    C0] Code: 00 4d 85 e4 75 16 e8 d5 cf 0f 00 eb 15 e8 ce cf 0f 00 e8 29 3a 17 09 4d 85 e4 74 ea e8 bf cf 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25
[ 1305.988560][    C0] RSP: 0018:ffffc90000007a00 EFLAGS: 00000246
[ 1305.994645][    C0] RAX: ffffffff81780421 RBX: 0000000000000000 RCX: ffff888065979e00
[ 1306.002648][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[ 1306.010630][    C0] RBP: ffffc90000007ab8 R08: ffffffff91fe5607 R09: 1ffffffff23fcac0
[ 1306.018613][    C0] R10: dffffc0000000000 R11: fffffbfff23fcac1 R12: 0000000000000200
[ 1306.026598][    C0] R13: 000001fb63109b96 R14: 1ffff92000000f40 R15: dffffc0000000000
[ 1306.034584][    C0] FS:  00007f1b41a4c6c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000
[ 1306.043533][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1306.050131][    C0] CR2: 000055c199916950 CR3: 000000007a591000 CR4: 00000000003506f0
[ 1306.058119][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1306.066273][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[ 1306.074268][    C0] Call Trace:
[ 1306.077572][    C0]  <IRQ>
[ 1306.080438][    C0]  ? ktime_get_real_ts64+0x440/0x440
[ 1306.085783][    C0]  ktime_get_with_offset+0x94/0x330
[ 1306.091007][    C0]  __mac80211_hwsim_beacon_tx+0x1e7/0x520
[ 1306.096920][    C0]  mac80211_hwsim_beacon_tx+0x3df/0x770
[ 1306.102496][    C0]  __iterate_interfaces+0x225/0x4c0
[ 1306.107722][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[ 1306.114066][    C0]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[ 1306.121282][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[ 1306.127535][    C0]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[ 1306.134580][    C0]  mac80211_hwsim_beacon+0xbb/0x1b0
[ 1306.139809][    C0]  ? hw_scan_work+0xf10/0xf10
[ 1306.144499][    C0]  __hrtimer_run_queues+0x525/0xc10
[ 1306.149727][    C0]  ? hrtimer_interrupt+0x980/0x980
[ 1306.154850][    C0]  ? read_tsc+0x9/0x20
[ 1306.158941][    C0]  hrtimer_run_softirq+0x177/0x290
[ 1306.164077][    C0]  handle_softirqs+0x27d/0x820
[ 1306.168848][    C0]  ? read_tsc+0x9/0x20
[ 1306.172931][    C0]  ? ktime_get+0x24b/0x280
[ 1306.177482][    C0]  ? __irq_exit_rcu+0xd3/0x190
[ 1306.182264][    C0]  ? do_softirq+0x1a0/0x1a0
[ 1306.186783][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[ 1306.192002][    C0]  __irq_exit_rcu+0xd3/0x190
[ 1306.196623][    C0]  ? irq_exit_rcu+0x20/0x20
[ 1306.201176][    C0]  irq_exit_rcu+0x9/0x20
[ 1306.205474][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[ 1306.211159][    C0]  </IRQ>
[ 1306.214135][    C0]  <TASK>
[ 1306.217087][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1306.223102][    C0] RIP: 0010:generic_exec_single+0x477/0x4e0
[ 1306.229016][    C0] Code: 75 11 e8 ec 13 0b 00 48 85 db 75 16 e8 e2 13 0b 00 eb 15 e8 db 13 0b 00 e8 36 7e 12 09 48 85 db 74 ea e8 cc 13 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08
[ 1306.249163][    C0] RSP: 0018:ffffc90003877a00 EFLAGS: 00000246
[ 1306.255243][    C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff888065979e00
[ 1306.263228][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1306.271211][    C0] RBP: ffffc90003877ad0 R08: ffffffff91fe5607 R09: 1ffffffff23fcac0
[ 1306.279196][    C0] R10: dffffc0000000000 R11: fffffbfff23fcac1 R12: 1ffff9200070ef44
[ 1306.287178][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200070ef65
[ 1306.295201][    C0]  ? event_function+0x300/0x300
[ 1306.300094][    C0]  ? smp_call_function_single+0x5a0/0x5a0
[ 1306.305856][    C0]  ? percpu_counter_add_batch+0x1f4/0x2a0
[ 1306.311674][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1306.316886][    C0]  ? smp_call_function_single+0xb0/0x5a0
[ 1306.322540][    C0]  smp_call_function_single+0x36d/0x5a0
[ 1306.328100][    C0]  ? event_function+0x300/0x300
[ 1306.332973][    C0]  ? flush_smp_call_function_queue+0x250/0x250
[ 1306.339260][    C0]  ? event_function+0x300/0x300
[ 1306.344158][    C0]  perf_install_in_context+0x5bb/0x920
[ 1306.349647][    C0]  ? alloc_file_pseudo+0x1ae/0x210
[ 1306.354792][    C0]  ? exclusive_event_installable+0x2c0/0x2c0
[ 1306.360788][    C0]  ? add_event_to_ctx+0x1170/0x1170
[ 1306.366012][    C0]  ? anon_inode_getfile+0x109/0x1a0
[ 1306.371216][    C0]  ? perf_event__header_size+0x165/0x220
[ 1306.376979][    C0]  __se_sys_perf_event_open+0x180d/0x1d40
[ 1306.382735][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[ 1306.388403][    C0]  ? lock_chain_count+0x20/0x20
[ 1306.393283][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[ 1306.398494][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[ 1306.404163][    C0]  do_syscall_64+0x55/0xb0
[ 1306.408614][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1306.413334][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1306.418050][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1306.423963][    C0] RIP: 0033:0x7f1b40b9f559
[ 1306.428394][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1306.448017][    C0] RSP: 002b:00007f1b41a4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[ 1306.456455][    C0] RAX: ffffffffffffffda RBX: 00007f1b40e25fa0 RCX: 00007f1b40b9f559
[ 1306.465652][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000c40
[ 1306.476795][    C0] RBP: 00007f1b40c36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1306.484785][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 1306.492768][    C0] R13: 00007f1b40e26038 R14: 00007f1b40e25fa0 R15: 00007ffe115d8c48
[ 1306.500766][    C0]  </TASK>