last executing test programs:

2m55.030484091s ago: executing program 1 (id=459):
r0 = socket$kcm(0x10, 0x2, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x206}, [@call={0x85, 0x0, 0x0, 0xcf}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x200f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x80, 0x1, 0x43a1bd76, 0x2, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r1 = socket$kcm(0x2, 0x1, 0x84)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="b2", 0x1}, {&(0x7f0000000180)="23480d95ed94c4265b88f5532b5a63b5a84615cc674c206880d2eade17b1b60edf2ac4126ba663cce2046c70b60f7f5cfd0c621f483e40757769dbdf76ebcf74e4400bc1d6a8", 0xffe0}], 0x3a}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
openat$tun(0xffffffffffffff9c, 0x0, 0x8040, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000001000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6}, 0xc) (async)
close(r0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000100000000000000bc2146562111b142f97b0a6389760000c90000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_clone(0xa6015800, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r7}, 0xc) (async)
socket$kcm(0x10, 0x400000002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000640)='syzkaller\x00', 0x5, 0x85, &(0x7f0000000680)=""/133, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0xd, 0xfffffff5, 0xf}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000a00)=[{0x3, 0x4, 0xf, 0x6}, {0x5, 0x4, 0x10, 0x3}, {0x2, 0x3, 0x2, 0xa}, {0x0, 0x4, 0x3, 0xc}, {0x0, 0x4, 0x10, 0x7}, {0x2, 0x3, 0x5}, {0x5, 0x2, 0x7, 0xc}, {0x4, 0x4, 0xf}], 0x10, 0x8000}, 0x94) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}) (rerun: 32)
sendmsg$sock(r8, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}, 0x8005)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{}, &(0x7f00000002c0), &(0x7f00000004c0)='%pI4   \x00'}, 0x20)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)

2m54.806663326s ago: executing program 1 (id=463):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff4305", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x17, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a8", 0x0, 0xfb, 0x60006000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x189001, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x68001, 0x3f00)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0xffff, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33)
socket$kcm(0xa, 0x922000000003, 0x11)
perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1a210, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa2d40, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
syz_clone(0x8001000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0xfe33)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x27ee41, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
gettid()
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00132400000000000000000000010000000000", 0x18}], 0x1}, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x13)

2m54.131507221s ago: executing program 1 (id=465):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0x69)
socket$kcm(0x29, 0x5, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@fallback=r0, 0x9, 0x1, 0x7fff, &(0x7f0000000000)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r0, r1, 0x37, 0x10, 0x0, @void, @value, @void, @void, r2}, 0x20)

2m53.603124732s ago: executing program 1 (id=468):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x9, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x4, 0x9, 0x0, r0, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0xffffffff, 0x40000000}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m53.119665283s ago: executing program 1 (id=471):
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000001000000000000000000000018", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_clone(0x62005000, 0x0, 0x0, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
r4 = syz_clone(0x2000, &(0x7f00000001c0)="496bc8d683ca360af01952ea467b", 0xe, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="83b4289730e308a87b73572297")
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r3, r2}, 0xc)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
socket$kcm(0x2, 0x1, 0x84)
write$cgroup_pid(r3, &(0x7f00000002c0)=r4, 0x12)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x9d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$kcm(0x29, 0x7, 0x0)
sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xfffffffffffffff0, 0x1f00c00e}, 0x0)

2m51.802670463s ago: executing program 1 (id=477):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x4, 0x80, 0x9, 0x7, 0x9, 0x8e, 0x0, 0x8, 0x4000, 0x16, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0xffffffff, 0xf6b9, 0x2, 0x800, 0x6, 0x0, 0x0, 0x9, 0x0, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x100000, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000bc0)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x3)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c01803002d000b12d25a80648c2594f9118a3531690c020000040000053582c137153e370248078000f01700d1bd5e6df49db0fe8d7d0065b03faf4dc0e05c81604b7e0c3c14b3deef431473c34d94938e460ce2f587553f0609fbc4c61f9d2276580ee43cb8b535c31609a7dab4adba0fb0822788ef296771a9848eda67e0feae357d055f7f845a23c1785d1590520976d07b8ac77177a70d7d25630242223c58d6a5721ff94c0246c305a2faa1907ad65cbdd8c2988189790fa2dfb2f1192eb015d6ff39d11b8348129edf244bc558c989277f488e2a74ca8a8af3", 0xdc}], 0x1}, 0x91)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0xfffff001}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$kcm(0x2, 0x200000000000006, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80))
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x4000a042)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80)
close(r5)

2m36.204468023s ago: executing program 32 (id=477):
r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000000c0)={0x4, 0x80, 0x9, 0x7, 0x9, 0x8e, 0x0, 0x8, 0x4000, 0x16, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x20, 0xffffffff, 0xf6b9, 0x2, 0x800, 0x6, 0x0, 0x0, 0x9, 0x0, 0x7})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x2}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x100000, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000bc0)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x3)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="c01803002d000b12d25a80648c2594f9118a3531690c020000040000053582c137153e370248078000f01700d1bd5e6df49db0fe8d7d0065b03faf4dc0e05c81604b7e0c3c14b3deef431473c34d94938e460ce2f587553f0609fbc4c61f9d2276580ee43cb8b535c31609a7dab4adba0fb0822788ef296771a9848eda67e0feae357d055f7f845a23c1785d1590520976d07b8ac77177a70d7d25630242223c58d6a5721ff94c0246c305a2faa1907ad65cbdd8c2988189790fa2dfb2f1192eb015d6ff39d11b8348129edf244bc558c989277f488e2a74ca8a8af3", 0xdc}], 0x1}, 0x91)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0xfffff001}, 0x80, 0x0}, 0xe07e872420dfefca)
socket$kcm(0x2, 0x200000000000006, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80))
socket$kcm(0x2, 0x5, 0x84)
socket$kcm(0xa, 0x1, 0x106)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x4000a042)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$SIOCSIFHWADDR(r4, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast})
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80)
close(r5)

9.161533834s ago: executing program 2 (id=1306):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r2, 0x84, 0x17, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d04d9884be2f"], 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d000000faff947b72fb9900000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080))
sendmsg$kcm(r1, &(0x7f0000000c40)={&(0x7f0000000600)=@nl=@unspec, 0x80, 0x0}, 0x20040884)
r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a20, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x1}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x94)
r5 = socket$kcm(0xa, 0x6, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00e1ef2fa1467e4acbc06f0bff9bff36b5122aac9416fcddb5fa5a9826bb08b47ba97a0c7b2b788e208d729dfe32e5815f23ba6fe6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10d, 0xa, &(0x7f0000000000)=r6, 0x11)
setsockopt$sock_attach_bpf(r5, 0x10d, 0xa, &(0x7f0000000040)=r6, 0x4)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xb5}}}, &(0x7f0000000100)='GPL\x00'}, 0x90)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001480)={&(0x7f0000000080), &(0x7f00000000c0)=""/54, &(0x7f0000000400)="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", &(0x7f0000001400)="5b7a3932ea48e9684637ae060864a626980b1227da1f1f88ee918ca83a18d9ee16d7a6fd06acfdbd55f2a8b96d057e94962e3bed89792729c73b0ffd4f1be9190aeed76fce248aae5bbeb064108d2afe5efca7556f271bfba47fbf1923b181d93e3045cdd0b02d0ffc1430a75047e16eab97c6dfd1cd2c4589da", 0x81, r8, 0x4}, 0x38)

9.036866687s ago: executing program 3 (id=1309):
r0 = perf_event_open(&(0x7f00000006c0)={0x4, 0x80, 0x6, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x8c0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x2648, 0xd, 0x3, 0x6, 0x1, 0x7, 0x8001, 0x0, 0x8, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xb)
r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, r0, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000580))
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$kcm(0x15, 0x5, 0x0)
setsockopt$sock_attach_bpf(r3, 0x114, 0x4, 0x0, 0xe2a0a06200000010)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r5, 0x0, 0x0}, 0x10)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r6, 0x58, &(0x7f00000003c0)}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480)=0xffffffffffffffff, 0x4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000002"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20)

8.659665145s ago: executing program 3 (id=1310):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x51, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x80000001, 0x9}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x6, 0x3, 0x1, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000002400)=""/4131, 0x1023}, {&(0x7f0000004b40)=""/4080, 0xff0}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000280)=""/81, 0x51}], 0x6}, 0x20)

8.234630195s ago: executing program 3 (id=1313):
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080))
write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00ff"], 0xee8a)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33)
socket$kcm(0xa, 0x3, 0x106)
socket$kcm(0xa, 0x3, 0x106)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000)
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000000000000000000000060000851000000600000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000079000000000000001800000b00000000000000000000950000000000000000000000000006000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003040)={0x0, &(0x7f0000000380)=""/117, &(0x7f0000000680)="5b933b120b59437f21abb6885c753cffb15cd9995b0d189f84de1e7519f52a05929c070d33635b2db58741bbf351149696cebe60cd104acdd1459ca617d401c64133e715e8d2d5ba407771a005337193f9ddecbc1d58198f36b45a26af288e18bec433999938aaf48c40686b964133a9df3470279997a025a6565cdc70e27bbe0a70d57ca6e549312cc971879558a33a461a77103da758f3c6dee95cefa451063e7ee0e2cb40ee20", &(0x7f0000002040)="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", 0x1000, r6}, 0x38)
r7 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@ieee802154, 0x3118, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000010010000010000f8db00000000000000"], 0x18}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(r3, 0x0, 0x0)

8.062866008s ago: executing program 2 (id=1315):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
r1 = gettid()
r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000000), 0x2}, 0x400, 0x28, 0x2, 0x1, 0x6, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0xffffffffffffffff, r2, 0x0)
r3 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="d5", 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x8, &(0x7f0000000340), 0x3)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x4004051)

7.915501932s ago: executing program 2 (id=1316):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x81, 0x4, 0x0, 0x0, 0x9, 0x6c0b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000140), 0x5}, 0xcc48, 0x40000035, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001e80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000080000000400000001000084010000e004000000030000000000000400000000000000010500000020000000000000000000000300000000020000000200000000000000006100302e"], 0x0, 0x60, 0x0, 0x1}, 0x28)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810)
r2 = socket$kcm(0x29, 0x5, 0x0)
r3 = getpid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r3, r0, 0x0, 0x7, &(0x7f0000000240)='{+![&,\x00'}, 0x30)
r4 = socket$kcm(0x11, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xe, &(0x7f0000000000), 0x4)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000012c0)="48000000140081fb60590c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8d96d6f", 0x48}], 0x1}, 0x20000000)
setsockopt$sock_attach_bpf(r2, 0x6, 0x4, &(0x7f0000000100), 0x4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
socket$kcm(0x11, 0x2, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x91228, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r6}, 0x39)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

6.125004032s ago: executing program 4 (id=1320):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040))
sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0b00000005000000020000000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, <r4=>0x0})
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
r5 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000f00)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b24277c652274c2777211a0d4cf32f5f2652ce56085bbc54d2a19296a91cf2655d68e06aa034335bbd3bfe01ff515ab1cb9bb35e9c3f45019247d953f9613517944e1", 0x61}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040)
recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}], 0x7}, 0x40012100)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000540)}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x5, &(0x7f00000005c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}], &(0x7f0000000780)='GPL\x00', 0x80f, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0xa, 0xfffffffd, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0), 0x10, 0x2d}, 0x94)
recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="27a33198ca1d86ab7f8814b68ecbe9860dd64978f8e305f57949", 0x1a}], 0x1}, 0x80)
close(r8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000b1ffffff04"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000c00)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYRES64=r5, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES64=0x0], 0x20)

4.642852785s ago: executing program 4 (id=1321):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x51, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x80000001, 0x9}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x6, 0x3, 0x1, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000002400)=""/4131, 0x1023}, {&(0x7f0000004b40)=""/4080, 0xff0}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000280)=""/81, 0x51}], 0x6}, 0x20)

4.626929726s ago: executing program 2 (id=1323):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r5], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000001, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8010, 0x40000000000000, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r9 = socket$kcm(0x2, 0x200000000000003, 0x106)
syz_open_procfs$namespace(0x0, 0x0)
setsockopt$sock_attach_bpf(r9, 0x0, 0x33, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"})
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'sit0\x00', @local})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
mkdir(0x0, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002140)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

4.611455476s ago: executing program 3 (id=1324):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x300)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x4000})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89fb, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280a63, 0x0)
close(r3)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'wlan0\x00', @multicast})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x44091, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x1, 0x200009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
socket$kcm(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4040000)
recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000380)=""/210, 0xd2}, {0x0}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100)
recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002)

4.345515632s ago: executing program 4 (id=1325):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x51, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x80000001, 0x9}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x6, 0x3, 0x1, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)

4.294819763s ago: executing program 0 (id=1326):
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4)
r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback, 0x10, 0x0, 0x7, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@cgroup=r3, r0, 0xf, 0x2, r1, @void, @value, @void, @void, r2}, 0x20)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x89e0, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r10}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4)
sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)

3.959669531s ago: executing program 0 (id=1327):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xaa, &(0x7f00000007c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe7, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000000080), 0x0}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x50)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x1, 0x0, 0x2}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r3}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5, 0x8, 0x0, 0x0}}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r8, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e", 0x2c}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
close(0x3)
setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000f00), 0x4)
sendmsg(r7, &(0x7f0000005500)={0x0, 0x0, 0x0}, 0x10)
sendmsg$inet(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xbe6, 0x0, r0, 0xfffffff0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, <r10=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{r0, <r11=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%pI4   \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x11, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@jmp={0x5, 0x1, 0x0, 0x0, 0x4, 0x0, 0x8}, @jmp={0x5, 0x0, 0x5, 0x8, 0x2, 0x18, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[r10, r1, r11, r5, r1], &(0x7f00000004c0)=[{0x5, 0x2, 0x5, 0x2}, {0x0, 0x4, 0x10, 0xa}, {0x2, 0x3, 0x6, 0x9}, {0x3, 0x4, 0xd, 0x2}, {0x5, 0x3, 0x3, 0x6}], 0x10, 0x4}, 0x94)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x8, 0x3d, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000180), 0x1003, r12}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r12, &(0x7f0000000080), &(0x7f0000000540)=""/210}, 0x20)

3.906985192s ago: executing program 4 (id=1328):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000440)={0x2, 0x80, 0x8, 0x6, 0x6, 0x4, 0x0, 0x1, 0xc0a10, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xe}, 0x118, 0x9, 0xd836, 0x7, 0x9, 0x3, 0x10, 0x0, 0xa, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[], 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000000940)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236808dd10d88c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a914f94ca2935d9f30457a8ffb21aef4a95a155fab70a40b08605690f6333", 0x2, 0x0, 0x1000}, 0x2c)

3.592950359s ago: executing program 0 (id=1329):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b12d25a80648c2594f90324fc601000084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8911, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) (async)
socket$kcm(0x29, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200080, 0x0) (async)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) (async)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) (async)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="6110b9000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94)

3.510644281s ago: executing program 3 (id=1330):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7f, 0x7}, 0x104101, 0x4, 0x7fff, 0x1, 0x10, 0x0, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)
sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x14}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2b, 'hugetlb'}, {0x2b, 'cpuacct'}, {0x2b, 'devices'}, {0x0, 'perf_event'}]}, 0x27)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002780)={{0x1, <r4=>0xffffffffffffffff}, &(0x7f0000002700), &(0x7f0000002740)='%pK    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002840)={{0x1}, &(0x7f00000027c0), &(0x7f0000002800)='%pS    \x00'}, 0x20)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002980)={{0x1, <r6=>0xffffffffffffffff}, &(0x7f0000002900), &(0x7f0000002940)=r1}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000029c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000008844f83af436bd0d8d0c0500000018430000ffffffff0000000000000000c32c010001000000cd310001b0ffffff95000000000000002a18d83c8debdc4beb9b578c08e0ffc5323c110272f1ff1d072615177cf2c3b3307a3c5255c8769395e0b5a32c73abbcc84139a43edc4c50f00a863568e734e606e8a822b6635d19ffeacef5e4a4ad455890a25da0389bfb6ba3db5cd95f60f9572dd056b10daface3e846da24db32739cd9af1e53ecd6d88587c7cd508217df78e19e83a35aae0a0e8d858532304d9c1850e1db59b0e4d89f6d24fe8c5158f7f6f27e"], 0x0, 0x0, 0x5f, &(0x7f00000002c0)=""/95, 0x41000, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x11, 0x6, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[r8, r8], 0x0, 0x10, 0x8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, 0x0, &(0x7f0000000640)=r9}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf5c4}, {}, {}, [@exit, @jmp={0x5, 0x1, 0x4, 0x1, 0x9, 0x0, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='GPL\x00', 0x80006, 0x1000, &(0x7f0000001480)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000002600)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000002640)={0x0, 0xa, 0x3, 0x1}, 0x10, 0x2f279, r1, 0x0, &(0x7f0000002a00)=[0x1, 0xffffffffffffffff, r4, r6, r5, r6, r1, r7, 0x1, r8], 0x0, 0x10, 0x2ba}, 0x94)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x16}], &(0x7f00000000c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x2fe, <r12=>0x0}, 0x8)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xaa99}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x26, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4f78}, [@generic={0xfb, 0x8, 0x9, 0x4, 0x5}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}]}, &(0x7f0000000140)='GPL\x00', 0xa5d6, 0x43, &(0x7f00000001c0)=""/67, 0x41000, 0x2, '\x00', r11, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0xb, 0x8000, 0x4}, 0x10, r12, r1, 0x5, &(0x7f0000000340)=[r13], &(0x7f0000000380)=[{0x5, 0x4, 0x4, 0xc}, {0x5, 0x4, 0xa, 0xa}, {0x0, 0x5, 0xe, 0x2}, {0x5, 0x1, 0x10, 0x9}, {0x3, 0x1, 0x7, 0x8}], 0x10, 0x80000001}, 0x94)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x11, &(0x7f00000009c0)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r14}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r14}, &(0x7f0000000540), &(0x7f0000000580)=r15}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r14, &(0x7f0000000780)}, 0x20)

3.491078271s ago: executing program 2 (id=1331):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb4f66d387e4cf8a, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
socket$kcm(0x2, 0x6, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r2)
r3 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r4 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000015c0)="2d544357ed", 0x5}, {0x0}], 0x2}, 0x40004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg$kcm(r3, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r6, &(0x7f00000000c0)}, 0x20)
r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8)
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r9)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x28, 0x2, 0x10, 0x8, 0x0, 0x0, 0x900a0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xd}, 0x106842, 0xc8, 0x0, 0x7, 0x0, 0xdd, 0x1, 0x0, 0x20, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
close(r11)
recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r12=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r12, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace22000d2f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2b6d656d6f7279202b696f202b6e6574207d6e65745f636c73202d6d656d6f72792012b1150880bc41e71ef788a63b4a0f9e6ec1324e5bb7de7c07c36034788d775c9282f5df60d4d520a11ef1692757c9fa6d3729830e07d44ee7f4c6bf6fdb716c070de2f1aacf1bb6056295f0fa70f39b1b51cc3c7bb55fd486ade8004d21d9c56f9dc8e65034"], 0x83)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)

3.472519202s ago: executing program 4 (id=1332):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e7002f", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000000000000400"/28], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000f0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000080), &(0x7f0000000380)=r2}, 0x20)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r1}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x601, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x2, 0x0, 0x40}, 0xfffffffffffffecb)

3.360362854s ago: executing program 0 (id=1333):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x51, 0xc, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x80000001, 0x9}, 0x8000, 0x83, 0x43a1bd76, 0x7, 0x6, 0x3, 0x1, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x8)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, 0x0, 0x8000)
recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000480)=""/226, 0xe2}, {&(0x7f0000002400)=""/4131, 0x1023}, {&(0x7f0000004b40)=""/4080, 0xff0}, {&(0x7f0000000580)=""/201, 0xc9}, {&(0x7f0000000280)=""/81, 0x51}], 0x6}, 0x20)

372.504561ms ago: executing program 3 (id=1334):
r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000070000850000001b"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x3, '\x00', r3, 0xffffffffffffffff, 0x5, 0x4}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0x3)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28)
socket$kcm(0x10, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28)
r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000040), 0x1)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

372.003681ms ago: executing program 0 (id=1335):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x12023)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8d82}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1b}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000680)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000140)="5bd6bc1996ff006859a121fc0e0d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000100"/28], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r6)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xfffff038}, {0x6}]})
ioctl$TUNGETVNETLE(r6, 0x40107447, &(0x7f0000000180))
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r5, &(0x7f0000000940)}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000001c0)="2b1c52be5f144dd0c2db5cd68c42", 0x0, 0xb20c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

363.807272ms ago: executing program 2 (id=1336):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
socketpair(0x1, 0x5, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x8, 0x5, &(0x7f00000000c0)=ANY=[], 0x0, 0x4, 0x97, &(0x7f0000000e80)=""/151, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1d, 0x2, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
close(0xffffffffffffffff)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000ffdae5cf457c9e046354e4bc7f00000000000900000000000000be0f7814ad3ffbb733"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8918, 0x0)
r5 = perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x4, 0x10, 0x40, 0x81, 0x0, 0xfffffffffffffffb, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0xc03, 0x0, 0x8, 0x6, 0xa, 0xd19e, 0x7, 0x0, 0x6, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0xffffffffffffffff}, 0x40, 0x5, 0x3, 0x46ab52bf2228c1d1, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r5, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0xe8}, 0x0, 0x80000, 0x0, 0x3, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYRES32, @ANYBLOB="0000bec7b82ea2d800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000001d80), &(0x7f0000001d40)=r6}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r7, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20)

209.349µs ago: executing program 0 (id=1337):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10, 0x7}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xe)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[], 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff3f800180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x75, 0x0, &(0x7f0000000940)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f00000007c0)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236808dd10d88c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a914f94ca2935d9f30457a8ffb21aef4a95a155fab70a40b08605690f6333", 0x2, 0x0, 0x1000}, 0x2c)

0s ago: executing program 4 (id=1338):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a0000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009576a4d01dd14d66f13c06339f314a265d6da6a994699498ec38e090d4fe86f9f49e98961db250fd1f3b5d7737e83c67c507ef921196980d3d802899a98644a61be4e3132c9021687568b87dee9b9dd43564886afc908d3f5573374a5deb"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r1}, 0xc)
openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x8c, 0x12)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="dfd5649c4278aac9eea0f7f428b74cfbe38161a4c671ef59ffa41ce2536026772de37454ff3b84ad8dbec3ccacc0f5ce7ecdd8a7e5ed12345f100b563a56a3ade79b8e854421290aa7e66219aecf224b70a0f9abdaac1481a35f197915dd8deda52023", @ANYRES8=r2, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB='\x00'/14], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000340), 0x0}, 0x20)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080), 0x12)
mkdirat$cgroup(r0, &(0x7f0000000500)='syz0\x00', 0x1ff)
socket$kcm(0xa, 0x2, 0x73)
socketpair(0x2, 0x8000a, 0x1, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts.
[   82.971650][ T5764] cgroup: Unknown subsys name 'net'
[   83.116291][ T5764] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.871947][ T5764] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   86.416752][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.425305][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.433477][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.469336][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.477867][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   86.486044][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.495721][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.524828][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.533964][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.543060][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.557124][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.564660][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.573645][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.594704][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   86.602001][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.609431][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.618330][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   86.626776][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.667529][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   86.683650][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   86.691762][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.708000][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.719671][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   86.729273][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.116089][ T5779] chnl_net:caif_netlink_parms(): no params data found
[   87.233284][ T5783] chnl_net:caif_netlink_parms(): no params data found
[   87.283343][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   87.438656][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   87.574560][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.586258][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.594724][ T5779] bridge_slave_0: entered allmulticast mode
[   87.607482][ T5779] bridge_slave_0: entered promiscuous mode
[   87.635478][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.649986][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.659649][ T5783] bridge_slave_0: entered allmulticast mode
[   87.670445][ T5783] bridge_slave_0: entered promiscuous mode
[   87.701818][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.711789][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.722004][ T5779] bridge_slave_1: entered allmulticast mode
[   87.729963][ T5779] bridge_slave_1: entered promiscuous mode
[   87.751828][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.764351][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.771692][ T5783] bridge_slave_1: entered allmulticast mode
[   87.784302][ T5783] bridge_slave_1: entered promiscuous mode
[   87.826928][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.834093][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.844079][ T5776] bridge_slave_0: entered allmulticast mode
[   87.852196][ T5776] bridge_slave_0: entered promiscuous mode
[   87.888497][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.895683][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.903661][ T5776] bridge_slave_1: entered allmulticast mode
[   87.910931][ T5776] bridge_slave_1: entered promiscuous mode
[   87.949505][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.962202][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.995953][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.010950][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.033349][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.083038][ T5779] team0: Port device team_slave_0 added
[   88.091327][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.133731][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.141152][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.148810][ T5786] bridge_slave_0: entered allmulticast mode
[   88.155921][ T5786] bridge_slave_0: entered promiscuous mode
[   88.166097][ T5779] team0: Port device team_slave_1 added
[   88.176053][ T5783] team0: Port device team_slave_0 added
[   88.185881][ T5776] team0: Port device team_slave_0 added
[   88.192866][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.202559][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.210366][ T5786] bridge_slave_1: entered allmulticast mode
[   88.217845][ T5786] bridge_slave_1: entered promiscuous mode
[   88.237227][ T5783] team0: Port device team_slave_1 added
[   88.257425][ T5776] team0: Port device team_slave_1 added
[   88.312007][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.322535][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.330237][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.356530][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.370597][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.377975][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.404496][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.441763][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.451802][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.459474][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.485625][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.505442][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.514083][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.543400][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.566062][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.573287][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.599565][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.611759][ T5777] Bluetooth: hci0: command tx timeout
[   88.618905][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.625884][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.652142][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.686718][ T5777] Bluetooth: hci2: command tx timeout
[   88.696973][ T5777] Bluetooth: hci1: command tx timeout
[   88.726136][ T5786] team0: Port device team_slave_0 added
[   88.764401][ T5779] hsr_slave_0: entered promiscuous mode
[   88.771822][ T5779] hsr_slave_1: entered promiscuous mode
[   88.783005][ T5786] team0: Port device team_slave_1 added
[   88.830385][ T5783] hsr_slave_0: entered promiscuous mode
[   88.837064][ T5783] hsr_slave_1: entered promiscuous mode
[   88.844282][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.852470][ T5777] Bluetooth: hci3: command tx timeout
[   88.858666][ T5783] Cannot create hsr debugfs directory
[   88.880742][ T5776] hsr_slave_0: entered promiscuous mode
[   88.887599][ T5776] hsr_slave_1: entered promiscuous mode
[   88.894043][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.901734][ T5776] Cannot create hsr debugfs directory
[   88.937849][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.944868][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.970994][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.024761][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.032241][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.058751][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.209192][ T5786] hsr_slave_0: entered promiscuous mode
[   89.215716][ T5786] hsr_slave_1: entered promiscuous mode
[   89.222424][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.230120][ T5786] Cannot create hsr debugfs directory
[   89.542589][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.558318][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.572217][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.607275][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.670882][ T5783] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.685642][ T5783] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.698790][ T5783] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.717063][ T5783] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.818072][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.831232][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.849571][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.862654][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.985014][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.004053][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.012805][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.038019][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.074246][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.141490][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   90.181498][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.188916][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.223180][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.234659][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.241858][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.259177][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.308158][ T5783] 8021q: adding VLAN 0 to HW filter on device team0
[   90.351406][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.358580][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.382458][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[   90.392774][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.400003][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.418629][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.463134][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   90.487391][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.494534][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.507266][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.514416][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.524402][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.531581][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.596160][ T3502] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.603429][ T3502] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.687808][ T5777] Bluetooth: hci0: command tx timeout
[   90.744124][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.770056][ T5777] Bluetooth: hci1: command tx timeout
[   90.770127][ T5087] Bluetooth: hci2: command tx timeout
[   90.927086][ T5087] Bluetooth: hci3: command tx timeout
[   91.183160][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.296477][ T5776] veth0_vlan: entered promiscuous mode
[   91.332094][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.343633][ T5776] veth1_vlan: entered promiscuous mode
[   91.401906][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.440059][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.449940][ T5776] veth0_macvtap: entered promiscuous mode
[   91.482398][ T5776] veth1_macvtap: entered promiscuous mode
[   91.520067][ T5783] veth0_vlan: entered promiscuous mode
[   91.535343][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.564138][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.604908][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.619685][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.629324][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.638406][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.654543][ T5783] veth1_vlan: entered promiscuous mode
[   91.691659][ T5779] veth0_vlan: entered promiscuous mode
[   91.729581][ T5786] veth0_vlan: entered promiscuous mode
[   91.747734][ T5786] veth1_vlan: entered promiscuous mode
[   91.759975][ T5779] veth1_vlan: entered promiscuous mode
[   91.804366][ T5783] veth0_macvtap: entered promiscuous mode
[   91.871973][ T5783] veth1_macvtap: entered promiscuous mode
[   91.923181][ T5786] veth0_macvtap: entered promiscuous mode
[   91.932146][   T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.942449][   T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.992423][ T5779] veth0_macvtap: entered promiscuous mode
[   92.012450][ T5779] veth1_macvtap: entered promiscuous mode
[   92.023525][ T5786] veth1_macvtap: entered promiscuous mode
[   92.033733][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.053177][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.070766][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.080198][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.105182][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.122110][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.136400][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.150461][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.162805][ T5783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.176085][ T5783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.185795][ T5783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.200680][ T5783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.225596][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.248569][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.258972][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.270115][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.282739][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.308853][    T9] cfg80211: failed to load regulatory.db
[   92.350261][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.378485][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.403784][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.426726][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.442514][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.454137][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.464093][    C0] hrtimer: interrupt took 97704 ns
[   92.469771][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.480134][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.493403][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.504048][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.515524][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.536437][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.568577][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.578844][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.591516][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.604438][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.646053][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.659478][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.670067][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.680966][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.693286][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.704194][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.716368][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.767497][ T5087] Bluetooth: hci0: command tx timeout
[   92.838029][ T5839] syzkaller0: entered promiscuous mode
[   92.843562][ T5839] syzkaller0: entered allmulticast mode
[   92.850810][ T5087] Bluetooth: hci1: command tx timeout
[   92.850826][ T5777] Bluetooth: hci2: command tx timeout
[   92.878406][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.888745][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.898306][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.907167][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.014747][ T5777] Bluetooth: hci3: command tx timeout
[   94.146981][  T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.162830][  T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.217112][  T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.225637][  T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.283382][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.308878][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.397070][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.404974][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.480919][ T3537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.517750][ T3537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.606412][   T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.646651][   T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.810914][ T5849] syzkaller0: entered promiscuous mode
[   94.816509][ T5849] syzkaller0: entered allmulticast mode
[   94.849732][ T5777] Bluetooth: hci0: command tx timeout
[   94.857644][ T5849] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   94.865300][ T5849] netlink: 'syz.0.1': attribute type 3 has an invalid length.
[   94.883592][ T5848] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   94.910760][ T5848] netlink: 'syz.0.1': attribute type 3 has an invalid length.
[   94.934509][ T5777] Bluetooth: hci2: command tx timeout
[   94.938677][ T5087] Bluetooth: hci1: command tx timeout
[   94.967682][ T5849] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.014913][ T5848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1'.
[   95.095951][ T5087] Bluetooth: hci3: command tx timeout
[   95.821940][ T5864] IPv6: pim6reg1: Disabled Multicast RS
[   97.209417][ T5892] netlink: 'syz.3.16': attribute type 21 has an invalid length.
[   97.287877][ T5892] netlink: 156 bytes leftover after parsing attributes in process `syz.3.16'.
[   97.543222][ T5893] netlink: 'syz.3.16': attribute type 1 has an invalid length.
[   97.579564][ T5893] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.16'.
[   97.617588][ T5893] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16'.
[   97.841321][ T5902] Zero length message leads to an empty skb
[   98.886499][ T5919] : port 1(ip6gretap0) entered blocking state
[   98.893672][ T5919] : port 1(ip6gretap0) entered disabled state
[   98.901396][ T5919] ip6gretap0: entered allmulticast mode
[   98.909344][ T5919] ip6gretap0: entered promiscuous mode
[   98.987475][ T5919] netlink: 'syz.1.21': attribute type 10 has an invalid length.
[   98.996075][ T5915] syz.0.23 (5915) used greatest stack depth: 17992 bytes left
[   99.794128][ T5924] netlink: 'syz.3.25': attribute type 11 has an invalid length.
[   99.828902][ T5924] netlink: 204620 bytes leftover after parsing attributes in process `syz.3.25'.
[  101.301849][ T5919] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  101.577820][ T5937] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  101.608394][ T5929] netlink: 'syz.1.27': attribute type 1 has an invalid length.
[  101.769814][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'.
[  101.784930][ T5942] netlink: 152 bytes leftover after parsing attributes in process `syz.1.30'.
[  102.051190][ T5946] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  102.461640][ T5959] IPv6: …: Disabled Multicast RS
[  102.920943][ T5962] netlink: 60 bytes leftover after parsing attributes in process `syz.2.35'.
[  103.963330][ T5972] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.37'.
[  104.602375][ T5983] netlink: 'syz.1.38': attribute type 3 has an invalid length.
[  104.656783][ T5983] netlink: 'syz.1.38': attribute type 1 has an invalid length.
[  104.664442][ T5983] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.38'.
[  104.731534][ T5979] netlink: 'syz.3.40': attribute type 9 has an invalid length.
[  104.777367][ T5979] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.40'.
[  104.947824][ T5979] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.40'.
[  105.640031][ T5996] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.45'.
[  105.657015][ T5996] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  107.504348][ T6034] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.56'.
[  108.385994][ T6046] netlink: 'syz.2.58': attribute type 39 has an invalid length.
[  109.092837][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.103145][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.113164][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.123086][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.132922][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.142915][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.152741][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.162666][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.172569][ T6064] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  109.510605][ T6054] delete_channel: no stack
[  110.849910][ T6097] IPv6: NLM_F_CREATE should be specified when creating new route
[  112.519085][ T6131] netlink: 'syz.1.82': attribute type 10 has an invalid length.
[  112.536973][ T6131] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.82'.
[  112.656994][ T6126] netlink: 'syz.1.82': attribute type 21 has an invalid length.
[  112.686369][ T6126] netlink: 'syz.1.82': attribute type 1 has an invalid length.
[  112.702428][ T6126] netlink: 144 bytes leftover after parsing attributes in process `syz.1.82'.
[  112.884573][ T6137] netlink: 60 bytes leftover after parsing attributes in process `syz.2.86'.
[  113.018853][ T6144] raw_sendmsg: syz.1.87 forgot to set AF_INET. Fix it!
[  113.417904][ T6147] netlink: 'syz.1.87': attribute type 29 has an invalid length.
[  113.454264][ T6147] netlink: 'syz.1.87': attribute type 16 has an invalid length.
[  113.477783][ T6147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.87'.
[  113.942367][ T6159] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.90'.
[  114.242267][ T6163] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.93'.
[  116.731424][ T6157] : port 1(ip6gretap0) entered blocking state
[  116.738199][ T6157] : port 1(ip6gretap0) entered disabled state
[  116.744651][ T6157] ip6gretap0: entered allmulticast mode
[  116.761521][ T6157] ip6gretap0: entered promiscuous mode
[  116.773487][ T6160] netlink: 'syz.2.92': attribute type 10 has an invalid length.
[  116.838606][ T6160] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  116.885676][ T6169] netlink: 'syz.3.93': attribute type 10 has an invalid length.
[  116.907984][ T6169] netlink: 55 bytes leftover after parsing attributes in process `syz.3.93'.
[  117.083955][ T6173] netlink: 'syz.0.96': attribute type 29 has an invalid length.
[  117.140731][ T6173] netlink: 'syz.0.96': attribute type 29 has an invalid length.
[  117.181802][ T6174] netlink: 'syz.0.96': attribute type 29 has an invalid length.
[  118.537855][ T6196] netlink: 'syz.3.102': attribute type 2 has an invalid length.
[  119.210898][ T6210] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.106'.
[  119.467152][ T6217] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.105'.
[  119.549891][ T6214] netlink: 'syz.2.106': attribute type 10 has an invalid length.
[  119.576883][ T6214] netlink: 55 bytes leftover after parsing attributes in process `syz.2.106'.
[  120.456886][ T6230] netlink: 160 bytes leftover after parsing attributes in process `syz.3.112'.
[  120.489201][ T6230] netlink: 6 bytes leftover after parsing attributes in process `syz.3.112'.
[  120.792759][ T6237] netlink: 'syz.2.114': attribute type 2 has an invalid length.
[  120.801690][ T6235] netlink: 'syz.3.112': attribute type 27 has an invalid length.
[  120.820779][ T6235] netlink: 'syz.3.112': attribute type 25 has an invalid length.
[  121.655490][ T6242] netlink: 'syz.0.123': attribute type 10 has an invalid length.
[  121.680028][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.123'.
[  121.705628][ T6242] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  121.716618][ T6242] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  122.634819][ T6260] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  123.464946][ T6267] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.119'.
[  123.830044][ T6281] : port 1(ip6gretap0) entered blocking state
[  123.857176][ T6281] : port 1(ip6gretap0) entered disabled state
[  123.863786][ T6281] ip6gretap0: entered allmulticast mode
[  123.893478][ T6281] ip6gretap0: entered promiscuous mode
[  124.025997][ T6281] netlink: 'syz.0.124': attribute type 10 has an invalid length.
[  126.659774][ T6281] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  126.908366][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  126.914057][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  126.955669][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.039262][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.074682][ T6294] pimreg: owner set to 776
[  127.084653][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.102642][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.130589][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.151395][ T6294] pimreg: owner set to 776
[  127.155978][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.173157][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.179273][ T6289] netlink: 'syz.0.125': attribute type 2 has an invalid length.
[  127.187558][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.203593][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.248656][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.258746][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.287422][ T6294] pimreg: owner set to 776
[  127.302039][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.320908][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.331035][ T6294] pimreg: owner set to 776
[  127.337519][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.347382][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.356819][ T6294] pimreg: owner set to 776
[  127.365915][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.371952][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.399819][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.407774][ T6294] pimreg: owner set to 776
[  127.434077][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.475841][ T6294] pimreg: owner set to 776
[  127.601898][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.636874][ T6292] pimreg: tun_chr_ioctl cmd 1074025673
[  127.642879][ T6294] pimreg: tun_chr_ioctl cmd 1074025676
[  127.707568][ T6294] pimreg: owner set to 776
[  128.149118][ T6312] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  128.638686][ T6315] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.132'.
[  128.759621][ T6314] netlink: 14 bytes leftover after parsing attributes in process `syz.0.133'.
[  130.301799][  T234] wlan1: Trigger new scan to find an IBSS to join
[  131.409058][ T6349] syzkaller0: entered promiscuous mode
[  131.430479][ T6349] syzkaller0: entered allmulticast mode
[  133.251398][ T3502] wlan1: Trigger new scan to find an IBSS to join
[  133.253394][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  133.271835][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  134.395287][ T6391] syzkaller0: entered promiscuous mode
[  134.434535][ T6391] syzkaller0: entered allmulticast mode
[  134.473131][ T6391] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487
[  135.102870][ T6396] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.161'.
[  135.128955][ T6395] delete_channel: no stack
[  135.337239][ T3537] wlan1: Creating new IBSS network, BSSID 2e:7c:9d:fd:db:c0
[  135.766112][ T6410] netlink: 'syz.1.165': attribute type 12 has an invalid length.
[  135.786379][ T6410] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.165'.
[  136.823409][ T6419] netlink: 'syz.1.167': attribute type 10 has an invalid length.
[  136.890334][ T6419] veth0_vlan: left promiscuous mode
[  136.918648][ T6419] veth0_vlan: entered promiscuous mode
[  136.953948][ T6419] team0: Device veth0_vlan failed to register rx_handler
[  137.529755][ T6433] netlink: 76 bytes leftover after parsing attributes in process `syz.1.173'.
[  138.109653][ T6441] À: port 1(vlan0) entered blocking state
[  138.126087][ T6441] À: port 1(vlan0) entered disabled state
[  138.136236][ T6441] vlan0: entered allmulticast mode
[  138.148087][ T6441] veth0_vlan: entered allmulticast mode
[  138.175471][ T6441] vlan0: entered promiscuous mode
[  138.932933][ T6455] netlink: 'syz.0.180': attribute type 29 has an invalid length.
[  138.956775][ T6455] netlink: 'syz.0.180': attribute type 29 has an invalid length.
[  138.993832][ T6450] netlink: 'syz.0.180': attribute type 29 has an invalid length.
[  139.085784][ T6463] C: renamed from team_slave_0 (while UP)
[  139.126333][ T6463] netlink: 'syz.2.183': attribute type 4 has an invalid length.
[  139.147012][ T6463] netlink: 116 bytes leftover after parsing attributes in process `syz.2.183'.
[  139.190069][ T6463] net_ratelimit: 3320 callbacks suppressed
[  139.190087][ T6463] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  139.291238][ T6465] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  139.481395][ T6469] netlink: 'syz.0.185': attribute type 3 has an invalid length.
[  139.500242][ T6469] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.185'.
[  139.548342][ T6473] netpci0: tun_chr_ioctl cmd 1074812117
[  139.989193][ T6494] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[  140.013161][ T6494] 8021q: adding VLAN 0 to HW filter on device team0
[  140.040486][ T6494] bond0: (slave team0): Enslaving as an active interface with an up link
[  140.073017][ T6495] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[  140.089654][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.191'.
[  140.106678][ T6495] team0: entered promiscuous mode
[  140.121491][ T6495] C: entered promiscuous mode
[  140.146968][ T6495] team_slave_1: entered promiscuous mode
[  140.179386][ T6495] bond0: (slave team0): Releasing backup interface
[  140.212518][ T6495] bridge0: port 3(team0) entered blocking state
[  140.246327][ T6495] bridge0: port 3(team0) entered disabled state
[  140.271851][ T6495] team0: entered allmulticast mode
[  140.279893][ T6495] C: entered allmulticast mode
[  140.284761][ T6495] team_slave_1: entered allmulticast mode
[  140.301543][ T6504] netlink: 'syz.0.194': attribute type 11 has an invalid length.
[  140.302871][ T6498] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.192'.
[  140.321371][ T6504] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.194'.
[  140.513481][ T6496] netlink: 10 bytes leftover after parsing attributes in process `syz.1.192'.
[  141.053659][ T6526] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  141.061490][ T6526] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  141.934697][ T3502] tipc: Subscription rejected, illegal request
[  142.260124][ T6560] ipvlan1: entered promiscuous mode
[  142.265777][ T6560] ipvlan1: entered allmulticast mode
[  142.325136][ T6560] veth0_vlan: entered allmulticast mode
[  142.436927][ T6562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  142.444615][ T6562] IPv6: NLM_F_CREATE should be set when creating new route
[  142.452035][ T6562] IPv6: NLM_F_CREATE should be set when creating new route
[  142.459566][ T6562] IPv6: NLM_F_CREATE should be set when creating new route
[  142.784339][ T6562] netlink: 132 bytes leftover after parsing attributes in process `syz.2.207'.
[  143.119916][ T6576] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.211'.
[  144.038234][ T6598] syzkaller0: entered promiscuous mode
[  144.044212][ T6598] syzkaller0: entered allmulticast mode
[  146.287746][ T6608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.221'.
[  147.140070][ T6651] syz.2.232 uses obsolete (PF_INET,SOCK_PACKET)
[  147.268502][ T6657] Driver unsupported XDP return value 0 on prog  (id 234) dev N/A, expect packet loss!
[  150.442962][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.240'.
[  150.453038][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.240'.
[  150.488405][ T6680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.240'.
[  151.567256][ T6717] netlink: 'syz.0.251': attribute type 26 has an invalid length.
[  151.581762][ T6717] netlink: 62827 bytes leftover after parsing attributes in process `syz.0.251'.
[  152.019416][ T6728] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.254'.
[  153.699488][ T6747] netlink: 'syz.1.258': attribute type 3 has an invalid length.
[  153.729664][ T6747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.258'.
[  154.968658][ T6763] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.264'.
[  155.253297][ T6766] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.266'.
[  155.315751][ T6766] netlink: 'syz.3.266': attribute type 2 has an invalid length.
[  158.675057][ T6798] netlink: 'syz.2.271': attribute type 11 has an invalid length.
[  158.705947][ T6798] netlink: 168 bytes leftover after parsing attributes in process `syz.2.271'.
[  158.893154][   T11] tipc: Subscription rejected, illegal request
[  159.923634][ T6837] netlink: 'syz.0.282': attribute type 10 has an invalid length.
[  160.374285][ T6837] team0: Port device geneve1 added
[  160.691728][ T6855] syzkaller0: entered promiscuous mode
[  160.742766][ T6855] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.288'.
[  161.088510][ T6864] -1: renamed from syzkaller0
[  161.240536][ T6870] ipvlan1: entered promiscuous mode
[  161.256961][ T6870] ipvlan1: entered allmulticast mode
[  161.262665][ T6870] veth0_vlan: entered allmulticast mode
[  161.344725][ T6870] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.292'.
[  161.486164][ T6873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  161.493555][ T6873] IPv6: NLM_F_CREATE should be set when creating new route
[  161.501024][ T6873] IPv6: NLM_F_CREATE should be set when creating new route
[  161.508373][ T6873] IPv6: NLM_F_CREATE should be set when creating new route
[  163.903945][ T6894] netlink: 'syz.3.301': attribute type 5 has an invalid length.
[  164.070090][ T6891] netlink: 'syz.1.299': attribute type 3 has an invalid length.
[  164.921676][ T6910] netlink: 'syz.3.305': attribute type 3 has an invalid length.
[  164.952668][ T6910] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.305'.
[  165.245606][ T6918] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.307'.
[  165.333305][ T6918] netlink: 'syz.3.307': attribute type 10 has an invalid length.
[  165.480275][ T6918] team0: Device vxcan1 is of different type
[  165.529181][ T6921] netlink: 'syz.0.308': attribute type 17 has an invalid length.
[  166.206206][ T6930] netlink: 'syz.2.312': attribute type 3 has an invalid length.
[  166.396248][ T6937] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.313'.
[  167.325468][ T6961] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  167.364198][ T6961] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  167.833919][ T6973] netlink: 'syz.0.326': attribute type 2 has an invalid length.
[  168.665807][ T6990] netlink: 'syz.2.331': attribute type 2 has an invalid length.
[  168.686933][ T6990] netlink: 'syz.2.331': attribute type 1 has an invalid length.
[  168.702187][ T6990] netlink: 'syz.2.331': attribute type 10 has an invalid length.
[  168.805996][ T6990] geneve1: entered promiscuous mode
[  168.822641][ T6990] geneve1: entered allmulticast mode
[  168.854123][ T6990] team0: Port device geneve1 added
[  169.245044][ T6999] netlink: 'syz.1.335': attribute type 3 has an invalid length.
[  169.272689][ T6999] netlink: 'syz.1.335': attribute type 1 has an invalid length.
[  169.287025][ T6998] netlink: 132 bytes leftover after parsing attributes in process `syz.2.334'.
[  169.314613][ T6999] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.335'.
[  170.318161][ T7002] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.336'.
[  170.350285][ T7002] netlink: 'syz.1.336': attribute type 10 has an invalid length.
[  170.454431][ T7002] team0: Device vxcan1 is of different type
[  171.328588][   T11] wlan1: Trigger new scan to find an IBSS to join
[  171.710312][ T7044] netlink: 'syz.3.350': attribute type 10 has an invalid length.
[  171.754336][ T7044] 8021q: adding VLAN 0 to HW filter on device team0
[  171.775846][ T7044] bond0: (slave team0): Enslaving as an active interface with an up link
[  171.784608][ T7045] netlink: 'syz.2.348': attribute type 10 has an invalid length.
[  171.801035][ T7040] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.348'.
[  174.755707][ T7091] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.361'.
[  174.784900][ T7093] netlink: 'syz.0.361': attribute type 10 has an invalid length.
[  174.818873][ T7093] team0: Device vxcan1 is of different type
[  174.869011][ T7096] netlink: 'syz.2.363': attribute type 11 has an invalid length.
[  174.878743][ T7096] netlink: 168 bytes leftover after parsing attributes in process `syz.2.363'.
[  175.152079][ T7101] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  175.160908][ T7101] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  175.265831][   T11] wlan1: Trigger new scan to find an IBSS to join
[  175.370138][   T69] wlan1: Creating new IBSS network, BSSID 0a:f4:20:3c:5f:02
[  175.695627][ T7111] syzkaller0: entered promiscuous mode
[  175.747828][ T7111] syzkaller0: entered allmulticast mode
[  175.760712][ T7116] netlink: 'syz.0.370': attribute type 3 has an invalid length.
[  175.795956][ T7116] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.370'.
[  177.931786][ T7138] netlink: 'syz.1.376': attribute type 10 has an invalid length.
[  177.950785][ T7138] team0: Device hsr_slave_0 failed to register rx_handler
[  178.295669][ T7148] netlink: 'syz.1.378': attribute type 10 has an invalid length.
[  178.371139][ T7148] 8021q: adding VLAN 0 to HW filter on device team0
[  178.434477][ T7148] bond0: (slave team0): Enslaving as an active interface with an up link
[  178.456399][ T7150] netlink: 'syz.1.378': attribute type 10 has an invalid length.
[  178.481289][ T7150] netlink: 40 bytes leftover after parsing attributes in process `syz.1.378'.
[  178.505782][ T7150] team0: entered promiscuous mode
[  178.518984][ T7150] team_slave_0: entered promiscuous mode
[  178.539914][ T7150] team_slave_1: entered promiscuous mode
[  178.560542][ T7150] bond0: (slave team0): Releasing backup interface
[  178.608585][ T7150] bridge0: port 3(team0) entered blocking state
[  178.619336][ T7150] bridge0: port 3(team0) entered disabled state
[  178.637596][ T7150] team0: entered allmulticast mode
[  178.643052][ T7150] team_slave_0: entered allmulticast mode
[  178.656059][ T7150] team_slave_1: entered allmulticast mode
[  178.877561][ T7158] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  179.447779][ T7181] netlink: 164 bytes leftover after parsing attributes in process `syz.1.387'.
[  179.584896][ T7182] netlink: 164 bytes leftover after parsing attributes in process `syz.1.387'.
[  179.611362][ T7180] netlink: 'syz.3.388': attribute type 10 has an invalid length.
[  179.642995][ T7180] team0: Device vxcan0 is of different type
[  179.677381][ T7179] sit0: entered allmulticast mode
[  179.790890][ T7188] netlink: 'syz.0.390': attribute type 21 has an invalid length.
[  179.832755][ T7188] IPv6: NLM_F_CREATE should be specified when creating new route
[  179.967921][ T7189] netlink: 184 bytes leftover after parsing attributes in process `syz.0.390'.
[  180.036857][ T7191] netlink: 184 bytes leftover after parsing attributes in process `syz.0.390'.
[  180.862217][ T7217] netlink: 'syz.3.397': attribute type 10 has an invalid length.
[  180.908563][ T7217] netlink: 2 bytes leftover after parsing attributes in process `syz.3.397'.
[  180.919634][ T7217] batadv_slave_1: entered promiscuous mode
[  180.928741][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.936906][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.431897][ T7230] netlink: 'syz.2.400': attribute type 1 has an invalid length.
[  181.452371][ T7230] netlink: 'syz.2.400': attribute type 3 has an invalid length.
[  181.460391][ T7230] netlink: 132 bytes leftover after parsing attributes in process `syz.2.400'.
[  182.063677][ T7236] syzkaller0: entered promiscuous mode
[  182.093485][ T7236] syzkaller0: entered allmulticast mode
[  182.221337][ T7243] netlink: 'syz.3.404': attribute type 2 has an invalid length.
[  182.230356][ T7243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.404'.
[  182.342002][ T7246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.405'.
[  183.995432][ T7244] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.404'.
[  184.005201][ T7246] netlink: 60 bytes leftover after parsing attributes in process `syz.0.405'.
[  184.170428][ T7256] netlink: 'syz.3.407': attribute type 33 has an invalid length.
[  184.190377][ T7256] netlink: 152 bytes leftover after parsing attributes in process `syz.3.407'.
[  184.202482][ T7259] netlink: 'syz.0.409': attribute type 29 has an invalid length.
[  184.221320][ T7259] netlink: 'syz.0.409': attribute type 29 has an invalid length.
[  184.239712][ T7259] netlink: 'syz.0.409': attribute type 29 has an invalid length.
[  184.268165][ T7258] netlink: 'syz.2.408': attribute type 21 has an invalid length.
[  184.679820][ T7268] macsec0: entered promiscuous mode
[  184.686702][ T7268] macsec0: entered allmulticast mode
[  184.692187][ T7268] veth1_macvtap: entered allmulticast mode
[  185.602124][ T7284] netlink: 10 bytes leftover after parsing attributes in process `syz.1.418'.
[  185.888278][ T7287] netlink: 'syz.0.419': attribute type 4 has an invalid length.
[  185.963746][ T7287] netlink: 'syz.0.419': attribute type 4 has an invalid length.
[  187.261428][ T7308] syzkaller0: entered promiscuous mode
[  187.286732][ T7308] syzkaller0: entered allmulticast mode
[  188.007899][ T7327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.428'.
[  189.449702][ T7327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.428'.
[  189.720366][ T7347] -1: renamed from syzkaller0
[  190.372379][ T7360] syz.3.436[7360] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  190.824384][ T7379] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.441'.
[  190.964350][ T7377] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.440'.
[  192.270586][ T7404] netlink: 'syz.2.449': attribute type 10 has an invalid length.
[  192.329710][ T7404] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  192.379635][ T7404] bridge0: port 4(netdevsim0) entered blocking state
[  192.410095][ T7404] bridge0: port 4(netdevsim0) entered disabled state
[  192.439391][ T7404] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  192.649583][ T7411] syzkaller0: entered promiscuous mode
[  192.655176][ T7411] syzkaller0: entered allmulticast mode
[  193.816092][ T7436] netlink: 176 bytes leftover after parsing attributes in process `syz.0.455'.
[  194.622447][ T7455] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.463'.
[  194.692109][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  194.698707][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  195.278981][ T7474] netlink: 'syz.2.466': attribute type 10 has an invalid length.
[  195.287359][ T7474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.466'.
[  195.296285][ T7474] vcan0: entered promiscuous mode
[  195.302761][ T7474] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  195.596056][ T7478] netlink: 'syz.2.467': attribute type 3 has an invalid length.
[  195.626796][ T7478] netlink: 'syz.2.467': attribute type 6 has an invalid length.
[  195.636350][ T7478] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.467'.
[  196.381487][ T5087] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  197.673354][ T7526] netlink: 'syz.0.478': attribute type 10 has an invalid length.
[  197.681880][ T7526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.478'.
[  198.501039][ T7521] syzkaller0: entered promiscuous mode
[  198.522867][ T7521] syzkaller0: entered allmulticast mode
[  205.421918][ T7544] netlink: 'syz.2.483': attribute type 19 has an invalid length.
[  205.430011][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.483'.
[  205.619325][ T7558] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.487'.
[  205.831633][ T7557] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.487'.
[  205.932585][ T7557] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!'
[  205.975779][ T7557] CPU: 0 PID: 7557 Comm: syz.2.487 Not tainted syzkaller #0
[  205.983173][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  205.993299][ T7557] Call Trace:
[  205.996622][ T7557]  <TASK>
[  205.999599][ T7557]  dump_stack_lvl+0x18c/0x250
[  206.004361][ T7557]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  206.010587][ T7557]  ? show_regs_print_info+0x20/0x20
[  206.015842][ T7557]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  206.022161][ T7557]  sysfs_warn_dup+0x8e/0xa0
[  206.026729][ T7557]  sysfs_do_create_link_sd+0xc0/0x110
[  206.032166][ T7557]  device_add_class_symlinks+0x1cf/0x240
[  206.037865][ T7557]  device_add+0x4f9/0xc40
[  206.042253][ T7557]  wiphy_register+0x1d99/0x2ac0
[  206.047180][ T7557]  ? cfg80211_event_work+0x40/0x40
[  206.052360][ T7557]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  206.058492][ T7557]  ieee80211_register_hw+0x2dd8/0x3b30
[  206.064020][ T7557]  ? ieee80211_register_hw+0xef1/0x3b30
[  206.069636][ T7557]  ? ieee80211_tasklet_handler+0x20/0x20
[  206.075329][ T7557]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  206.081293][ T7557]  ? __debug_object_init+0xec/0x450
[  206.086553][ T7557]  ? __asan_memset+0x22/0x40
[  206.091201][ T7557]  ? __hrtimer_init+0x189/0x270
[  206.096136][ T7557]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  206.101960][ T7557]  ? mac80211_hwsim_free+0x220/0x220
[  206.107321][ T7557]  ? rcu_is_watching+0x15/0xb0
[  206.112150][ T7557]  ? kstrndup+0xbd/0x140
[  206.116484][ T7557]  hwsim_new_radio_nl+0xdad/0x1a70
[  206.121666][ T7557]  ? __nla_validate+0x50/0x50
[  206.126420][ T7557]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  206.132841][ T7557]  ? __nla_parse+0x40/0x50
[  206.137320][ T7557]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  206.143727][ T7557]  genl_family_rcv_msg_doit+0x21a/0x310
[  206.149349][ T7557]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  206.155331][ T7557]  ? bpf_lsm_capable+0x9/0x10
[  206.160065][ T7557]  ? security_capable+0x89/0xb0
[  206.164979][ T7557]  genl_rcv_msg+0x611/0x7a0
[  206.169549][ T7557]  ? genl_bind+0x360/0x360
[  206.174018][ T7557]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  206.180412][ T7557]  ? lockdep_hardirqs_on+0x98/0x150
[  206.185678][ T7557]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  206.191943][ T7557]  netlink_rcv_skb+0x235/0x4c0
[  206.196768][ T7557]  ? genl_bind+0x360/0x360
[  206.201245][ T7557]  ? netlink_ack+0x1160/0x1160
[  206.206111][ T7557]  ? down_read+0x1ac/0x2e0
[  206.210614][ T7557]  genl_rcv+0x28/0x40
[  206.214682][ T7557]  netlink_unicast+0x7b1/0x930
[  206.219522][ T7557]  netlink_sendmsg+0x8d0/0xbf0
[  206.224352][ T7557]  ? netlink_getsockopt+0x590/0x590
[  206.229621][ T7557]  ? apparmor_socket_sendmsg+0x8e/0x330
[  206.235220][ T7557]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  206.240564][ T7557]  ? security_socket_sendmsg+0x80/0xa0
[  206.246096][ T7557]  ? netlink_getsockopt+0x590/0x590
[  206.251399][ T7557]  ____sys_sendmsg+0x61b/0x980
[  206.256253][ T7557]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  206.262511][ T7557]  ? __asan_memset+0x22/0x40
[  206.267166][ T7557]  ? __sys_sendmsg_sock+0x30/0x30
[  206.272283][ T7557]  ? __import_iovec+0x5f2/0x850
[  206.277218][ T7557]  ? import_iovec+0x73/0xa0
[  206.282134][ T7557]  ___sys_sendmsg+0x2a6/0x360
[  206.286909][ T7557]  ? __sys_sendmsg+0x2b0/0x2b0
[  206.291805][ T7557]  __se_sys_sendmsg+0x1d0/0x2c0
[  206.296717][ T7557]  ? __x64_sys_sendmsg+0x80/0x80
[  206.301705][ T7557]  ? lockdep_hardirqs_on+0x98/0x150
[  206.306976][ T7557]  ? __x64_sys_sendmsg+0x70/0x80
[  206.311984][ T7557]  do_syscall_64+0x55/0xb0
[  206.316459][ T7557]  ? clear_bhb_loop+0x40/0x90
[  206.321196][ T7557]  ? clear_bhb_loop+0x40/0x90
[  206.325933][ T7557]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.331912][ T7557] RIP: 0033:0x7f06a239de59
[  206.336387][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  206.356047][ T7557] RSP: 002b:00007f06a3335028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  206.364526][ T7557] RAX: ffffffffffffffda RBX: 00007f06a2625fa0 RCX: 00007f06a239de59
[  206.372553][ T7557] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  206.380574][ T7557] RBP: 00007f06a2433e6f R08: 0000000000000000 R09: 0000000000000000
[  206.388584][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.396601][ T7557] R13: 00007f06a2626038 R14: 00007f06a2625fa0 R15: 00007ffc4b757fc8
[  206.404643][ T7557]  </TASK>
[  208.568064][ T7609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.503'.
[  209.589342][ T7620] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.509'.
[  209.601739][ T7620] netlink: zone id is out of range
[  209.612798][ T7620] netlink: zone id is out of range
[  209.618768][ T7620] netlink: zone id is out of range
[  209.624494][ T7620] netlink: zone id is out of range
[  209.630784][ T7620] netlink: zone id is out of range
[  209.648006][ T7620] netlink: zone id is out of range
[  209.655482][ T7620] netlink: zone id is out of range
[  209.664777][ T7620] netlink: zone id is out of range
[  209.678095][ T7620] netlink: zone id is out of range
[  212.128865][ T5785] Bluetooth: hci2: command 0x0406 tx timeout
[  212.208698][ T5785] Bluetooth: hci0: command 0x0406 tx timeout
[  212.214855][ T5785] Bluetooth: hci1: command 0x0406 tx timeout
[  212.287235][ T7642] Bluetooth: hci3: command 0x0406 tx timeout
[  213.235096][ T7647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.775867][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  213.789780][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  213.799606][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  213.823020][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  213.837883][ T5087] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  213.845574][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  215.887287][ T5087] Bluetooth: hci4: command tx timeout
[  216.537090][ T7673] netlink: 'syz.0.529': attribute type 21 has an invalid length.
[  216.545854][ T7673] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[  216.554008][ T7673] netlink: 'syz.0.529': attribute type 2 has an invalid length.
[  216.562742][ T7673] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.529'.
[  216.675761][ T7665] chnl_net:caif_netlink_parms(): no params data found
[  217.115732][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.147226][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.185070][ T7665] bridge_slave_0: entered allmulticast mode
[  217.226697][ T7665] bridge_slave_0: entered promiscuous mode
[  217.264982][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.282455][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.299863][ T7665] bridge_slave_1: entered allmulticast mode
[  217.310916][ T7665] bridge_slave_1: entered promiscuous mode
[  217.374519][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.390258][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.623096][ T7665] team0: Port device team_slave_0 added
[  217.664188][ T7665] team0: Port device team_slave_1 added
[  217.737432][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.744863][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.823950][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.854429][ T7693] netlink: 'syz.0.524': attribute type 10 has an invalid length.
[  217.875122][ T7693] team0: Port device virt_wifi0 added
[  217.901889][ T7700] netlink: 'syz.0.524': attribute type 39 has an invalid length.
[  217.967826][ T5087] Bluetooth: hci4: command tx timeout
[  217.975156][ T7701] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.530'.
[  218.072303][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.094947][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.137843][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.351260][ T7665] hsr_slave_0: entered promiscuous mode
[  218.378224][ T7665] hsr_slave_1: entered promiscuous mode
[  218.389011][ T7711] netlink: 196 bytes leftover after parsing attributes in process `syz.0.534'.
[  218.398937][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.406999][ T7665] Cannot create hsr debugfs directory
[  219.214322][ T7665] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  219.255305][ T7665] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  219.320373][ T7665] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  219.354327][ T7728] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[  219.371969][ T7728] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[  219.401382][ T7665] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  219.780444][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.866315][ T7665] 8021q: adding VLAN 0 to HW filter on device team0
[  219.896212][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.903580][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.937320][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.944575][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.056296][ T5087] Bluetooth: hci4: command tx timeout
[  220.504133][ T7751] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.546'.
[  220.726950][ T7753] netlink: 'syz.2.545': attribute type 12 has an invalid length.
[  220.734825][ T7753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.545'.
[  221.138083][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.398284][ T7767] netlink: 'syz.3.548': attribute type 3 has an invalid length.
[  221.436663][ T7767] netlink: 'syz.3.548': attribute type 16 has an invalid length.
[  221.466843][ T7767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.548'.
[  222.129923][ T5087] Bluetooth: hci4: command tx timeout
[  222.179243][ T7773] netlink: 'syz.2.549': attribute type 10 has an invalid length.
[  222.236791][ T7773] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  222.690103][ T7665] veth0_vlan: entered promiscuous mode
[  222.725890][ T7665] veth1_vlan: entered promiscuous mode
[  222.820262][ T7665] veth0_macvtap: entered promiscuous mode
[  222.881321][ T7665] veth1_macvtap: entered promiscuous mode
[  222.926342][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.943344][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  222.958097][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  222.975672][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.005609][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.016846][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.027125][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.044787][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.099295][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.130820][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.153803][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.183676][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.205146][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.236797][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.261636][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.318618][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1
[  223.397916][ T7665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  223.446796][ T7665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  223.455691][ T7665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  223.487029][ T7665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  223.725024][ T7807] lo: entered promiscuous mode
[  223.753118][   T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.773788][   T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.881802][   T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.912383][   T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.961294][ T7819] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.560'.
[  224.241270][ T7824] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  224.298326][ T7823] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe
[  224.407662][ T7823] delete_channel: no stack
[  224.415889][ T7823] delete_channel: no stack
[  225.898020][ T7877] netlink: 'syz.2.576': attribute type 5 has an invalid length.
[  226.017995][ T7883] netlink: 132 bytes leftover after parsing attributes in process `syz.4.578'.
[  226.503490][ T7901] tap0: tun_chr_ioctl cmd 1074025677
[  226.529053][ T7901] tap0: linktype set to 825
[  226.671447][ T7897] lo: entered promiscuous mode
[  227.206832][ T7927] netlink: 21 bytes leftover after parsing attributes in process `syz.2.590'.
[  227.215808][ T7927] ksmbd: Unknown IPC event: 0, ignore.
[  227.815695][ T7940] netlink: 'syz.3.594': attribute type 3 has an invalid length.
[  227.836163][ T7940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.594'.
[  228.245612][ T7957] netlink: 'syz.0.599': attribute type 27 has an invalid length.
[  229.864607][ T7988] netlink: 'syz.2.605': attribute type 6 has an invalid length.
[  229.872829][ T7988] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.605'.
[  231.144380][ T7966] sit0: entered allmulticast mode
[  231.154024][ T7969] sit0: entered promiscuous mode
[  231.237082][ T7985] IPv6: NLM_F_CREATE should be specified when creating new route
[  231.256866][ T7985] netlink: 1 bytes leftover after parsing attributes in process `syz.2.605'.
[  231.495842][ T8001] netlink: 'syz.0.608': attribute type 10 has an invalid length.
[  231.749786][ T8001] team0 (unregistering): Port device team_slave_0 removed
[  231.846039][ T8001] team0 (unregistering): Port device team_slave_1 removed
[  232.010222][ T8013] netlink: 'syz.2.611': attribute type 3 has an invalid length.
[  232.023318][ T8013] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.611'.
[  232.157364][ T8001] team0 (unregistering): Port device geneve1 removed
[  232.238295][ T8001] team0 (unregistering): Port device virt_wifi0 removed
[  232.360436][ T8019] netlink: 'syz.3.614': attribute type 41 has an invalid length.
[  232.587607][ T8024] netlink: 21 bytes leftover after parsing attributes in process `syz.3.616'.
[  232.655504][ T8024] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  232.791876][ T8024] netlink: 'syz.3.616': attribute type 10 has an invalid length.
[  232.884094][ T8024] bond0: (slave team0): Releasing backup interface
[  233.012592][ T8024] team0 (unregistering): Port device team_slave_0 removed
[  233.058851][ T8024] team0 (unregistering): Port device team_slave_1 removed
[  233.837038][ T8052] netlink: 'syz.0.625': attribute type 41 has an invalid length.
[  234.318145][ T8063] netlink: 'syz.4.629': attribute type 21 has an invalid length.
[  234.339881][ T8063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.629'.
[  234.391651][ T8068] netlink: 21 bytes leftover after parsing attributes in process `syz.0.631'.
[  234.429023][ T8068] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  234.599142][ T8068] netlink: 'syz.0.631': attribute type 10 has an invalid length.
[  234.980321][ T8078] netlink: 'syz.4.635': attribute type 41 has an invalid length.
[  236.020096][ T8100] netlink: 'syz.3.641': attribute type 21 has an invalid length.
[  236.046853][ T8100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.641'.
[  236.655281][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.664126][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.683487][ T8132] bridge0: entered allmulticast mode
[  236.789212][ T8132] bridge_slave_1: left allmulticast mode
[  236.838471][ T8132] bridge_slave_1: left promiscuous mode
[  236.844576][ T8132] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.872037][ T8132] bridge_slave_0: left allmulticast mode
[  236.885232][ T8132] bridge_slave_0: left promiscuous mode
[  236.921801][ T8132] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.226388][ T8145] netlink: 156 bytes leftover after parsing attributes in process `syz.3.654'.
[  237.687031][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.658'.
[  237.744305][ T8156] netlink: 132 bytes leftover after parsing attributes in process `syz.4.657'.
[  237.943890][ T8160] netlink: 'syz.0.656': attribute type 21 has an invalid length.
[  237.976884][ T8160] netlink: 132 bytes leftover after parsing attributes in process `syz.0.656'.
[  238.774932][ T8186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.666'.
[  238.814056][ T8186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.666'.
[  238.834160][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.666'.
[  238.877240][ T8184] netlink: 60 bytes leftover after parsing attributes in process `syz.0.666'.
[  239.532436][ T8208] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.674'.
[  239.689440][ T8212] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  240.871079][ T8235] netlink: 'syz.4.681': attribute type 21 has an invalid length.
[  240.887070][ T8235] netlink: 'syz.4.681': attribute type 5 has an invalid length.
[  241.025258][ T8237] tipc: Started in network mode
[  241.090448][ T8237] tipc: Node identity 1a, cluster identity 4711
[  241.141932][ T8237] tipc: Node number set to 26
[  245.274807][ T8276] netlink: 'syz.3.693': attribute type 46 has an invalid length.
[  245.317217][ T8276] __nla_validate_parse: 4 callbacks suppressed
[  245.317235][ T8276] netlink: 55 bytes leftover after parsing attributes in process `syz.3.693'.
[  246.174095][ T8299] netlink: 'syz.4.701': attribute type 39 has an invalid length.
[  246.663159][ T8307] netlink: 'syz.3.703': attribute type 1 has an invalid length.
[  246.716722][ T8307] netlink: 'syz.3.703': attribute type 3 has an invalid length.
[  246.742352][ T8307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.703'.
[  246.872936][ T8311] netlink: 'syz.4.706': attribute type 4 has an invalid length.
[  247.964825][ T8338] netlink: 'syz.2.715': attribute type 4 has an invalid length.
[  247.989608][ T8338] netlink: 152 bytes leftover after parsing attributes in process `syz.2.715'.
[  248.003855][ T8339] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.713'.
[  248.038765][ T8338] wlan1: mtu less than device minimum
[  248.049264][ T8339] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.713'.
[  248.061894][ T8333] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.713'.
[  248.096860][ T8343] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.713'.
[  248.261872][ T8339] netlink: 'syz.3.713': attribute type 10 has an invalid length.
[  248.300032][ T8345] netlink: 'syz.4.717': attribute type 1 has an invalid length.
[  248.309132][ T8339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.713'.
[  248.310307][ T8339] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  248.310327][ T8339] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  248.513218][ T8355] pim6reg0: tun_chr_ioctl cmd 1074025694
[  248.982993][ T8364] netlink: 'syz.2.724': attribute type 10 has an invalid length.
[  249.397676][ T8376] netlink: 'syz.4.727': attribute type 10 has an invalid length.
[  249.422642][ T8376] netlink: 55 bytes leftover after parsing attributes in process `syz.4.727'.
[  252.280151][ T8450] netlink: 'syz.4.756': attribute type 4 has an invalid length.
[  252.849349][ T8462] netlink: 'syz.3.751': attribute type 10 has an invalid length.
[  252.861527][ T8462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.751'.
[  252.875890][ T8462] batman_adv: batadv0: Adding interface: veth0_vlan
[  252.888964][ T8462] batman_adv: batadv0: Interface activated: veth0_vlan
[  253.037119][ T8462] cgroup: fork rejected by pids controller in /syz3
[  254.125727][ T3477] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.290057][ T3477] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.400338][ T3477] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.509177][ T3477] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.883998][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  255.894787][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  255.906857][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  255.933331][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  255.949574][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  255.976714][ T5782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  256.141862][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  256.150952][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  258.047533][ T5087] Bluetooth: hci3: command tx timeout
[  260.056239][ T8516] chnl_net:caif_netlink_parms(): no params data found
[  260.126820][ T5087] Bluetooth: hci3: command tx timeout
[  260.507455][ T8593] netlink: 'syz.0.778': attribute type 2 has an invalid length.
[  260.531862][ T8593] netlink: 'syz.0.778': attribute type 1 has an invalid length.
[  260.588246][ T8593] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.056877][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.125862][ T8516] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.133646][ T8516] bridge_slave_0: entered allmulticast mode
[  261.148210][ T8516] bridge_slave_0: entered promiscuous mode
[  261.158274][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.166414][ T8516] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.174542][ T8516] bridge_slave_1: entered allmulticast mode
[  261.209713][ T8516] bridge_slave_1: entered promiscuous mode
[  261.613951][ T8516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.206760][ T5087] Bluetooth: hci3: command tx timeout
[  262.488525][ T8516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.602554][ T8516] team0: Port device team_slave_0 added
[  262.716227][ T8516] team0: Port device team_slave_1 added
[  263.109589][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.118707][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.147054][ T8516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.160977][ T8516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.171318][ T8516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.199370][ T8516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  263.457643][ T3477] hsr_slave_0: left promiscuous mode
[  263.515777][ T3477] hsr_slave_1: left promiscuous mode
[  263.542667][ T3477] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.567319][ T3477] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.601478][ T3477] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  263.617488][ T3477] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  263.663237][ T3477] batman_adv: batadv0: Interface deactivated: veth0_vlan
[  263.674007][ T3477] batman_adv: batadv0: Removing interface: veth0_vlan
[  263.709042][ T3477] bridge_slave_1: left allmulticast mode
[  263.714865][ T3477] bridge_slave_1: left promiscuous mode
[  263.747899][ T3477] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.799673][ T3477] bridge_slave_0: left allmulticast mode
[  263.805532][ T3477] bridge_slave_0: left promiscuous mode
[  263.822252][ T3477] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.959528][ T3477] veth1_macvtap: left promiscuous mode
[  263.965768][ T3477] veth0_macvtap: left promiscuous mode
[  264.007108][ T3477] veth1_vlan: left promiscuous mode
[  264.012847][ T3477] veth0_vlan: left promiscuous mode
[  264.287985][ T5087] Bluetooth: hci3: command tx timeout
[  265.213952][ T8681] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.794'.
[  265.364962][ T3477] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  265.416034][ T3477] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  265.784481][ T3477] bond0 (unregistering): Released all slaves
[  266.078850][ T8516] hsr_slave_0: entered promiscuous mode
[  266.102555][ T8516] hsr_slave_1: entered promiscuous mode
[  266.130640][ T8516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  266.146745][ T8516] Cannot create hsr debugfs directory
[  268.141654][ T8725] TCP: TCP_TX_DELAY enabled
[  268.407965][ T8730] netlink: 'syz.0.804': attribute type 10 has an invalid length.
[  269.060919][ T8734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.806'.
[  269.122729][ T8516] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  269.148485][ T8734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.806'.
[  269.185454][ T8516] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  269.282044][ T8741] netlink: 1 bytes leftover after parsing attributes in process `syz.2.809'.
[  269.313024][ T8738] netlink: 60 bytes leftover after parsing attributes in process `syz.0.806'.
[  269.377801][ T8516] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  269.485556][ T8516] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  269.918481][ T8516] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.998242][ T8516] 8021q: adding VLAN 0 to HW filter on device team0
[  270.090643][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.097925][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.250041][ T8109] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.257371][ T8109] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.516324][ T8516] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.945449][ T8516] veth0_vlan: entered promiscuous mode
[  272.068154][ T8516] veth1_vlan: entered promiscuous mode
[  272.193705][ T8516] veth0_macvtap: entered promiscuous mode
[  272.245293][ T8516] veth1_macvtap: entered promiscuous mode
[  272.340799][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.389970][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.451975][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.557239][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.651131][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.666297][ T8812] netlink: 'syz.2.821': attribute type 11 has an invalid length.
[  272.678604][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.706982][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  272.726707][ T8812] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.821'.
[  272.740929][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.769561][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.848337][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.900324][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  272.977023][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  272.998458][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.030598][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.081442][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.122072][ T8516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  273.141628][ T8516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  273.164253][ T8516] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.192016][ T8516] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  273.343921][ T8516] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  273.384859][ T8516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  273.415379][ T8516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.450337][ T8824] netlink: 144 bytes leftover after parsing attributes in process `syz.2.823'.
[  273.514006][ T8824] C: left promiscuous mode
[  273.526950][ T8824] C: left allmulticast mode
[  273.598956][ T8824] team0: Port device C removed
[  273.608039][ T8824] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  274.204225][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.227489][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.327972][  T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.362083][  T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.428452][ T8875] netlink: 192308 bytes leftover after parsing attributes in process `syz.4.840'.
[  275.560981][ T8875] debugfs: Directory '!!ô' with parent 'ieee80211' already present!
[  277.070312][ T8916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  278.446614][ T8938] netlink: 'syz.0.847': attribute type 10 has an invalid length.
[  278.602532][ T8938] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.637575][ T8938] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.677581][ T8938] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.724749][ T8938] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  278.757462][ T8938] geneve0: entered promiscuous mode
[  278.785988][ T8938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  278.800306][ T8938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  278.813371][ T8938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.831877][ T8938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.845978][ T8938] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  279.644584][ T8966] netlink: 'syz.4.853': attribute type 39 has an invalid length.
[  280.502886][ T8994] netlink: 'syz.2.857': attribute type 9 has an invalid length.
[  280.544932][ T8994] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.857'.
[  280.571600][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.859'.
[  280.674460][ T8996] netlink: 60 bytes leftover after parsing attributes in process `syz.3.859'.
[  280.711356][ T9000] netlink: 60 bytes leftover after parsing attributes in process `syz.3.859'.
[  280.812708][ T9006] netlink: 60 bytes leftover after parsing attributes in process `syz.3.859'.
[  280.834244][ T8999] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.858'.
[  281.043324][ T8995] netlink: 'syz.2.857': attribute type 9 has an invalid length.
[  281.106903][ T8995] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.857'.
[  281.500537][ T9003] netlink: 'syz.2.857': attribute type 9 has an invalid length.
[  281.576962][ T9003] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.857'.
[  281.869978][ T9023] bridge_slave_0: entered promiscuous mode
[  281.875895][ T9023] bridge_slave_0: entered allmulticast mode
[  281.982281][ T9031] netlink: 'syz.2.866': attribute type 10 has an invalid length.
[  282.011044][ T9023] netlink: 40 bytes leftover after parsing attributes in process `syz.4.865'.
[  282.143059][ T9034] netlink: 'syz.2.866': attribute type 20 has an invalid length.
[  283.503002][ T9067] netlink: 'syz.2.875': attribute type 19 has an invalid length.
[  283.530353][ T9067] netlink: 172 bytes leftover after parsing attributes in process `syz.2.875'.
[  283.701170][ T5087] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9
[  283.708994][ T5087] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9
[  284.669278][ T9110] netlink: 'syz.3.885': attribute type 3 has an invalid length.
[  285.585137][ T9131] netlink: 'syz.3.890': attribute type 16 has an invalid length.
[  285.633457][ T9131] __nla_validate_parse: 6 callbacks suppressed
[  285.633474][ T9131] netlink: 132 bytes leftover after parsing attributes in process `syz.3.890'.
[  286.312510][ T9140] veth1_to_bond: entered allmulticast mode
[  287.212875][ T9158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'.
[  287.233810][ T9158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'.
[  287.265291][ T9158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'.
[  287.301381][ T9158] netlink: 60 bytes leftover after parsing attributes in process `syz.0.899'.
[  287.439493][ T9162] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.902'.
[  287.583710][ T9168] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  287.624324][ T9168] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  287.885350][ T9172] netlink: 'syz.0.905': attribute type 15 has an invalid length.
[  288.090481][ T9179] netlink: 'syz.4.907': attribute type 29 has an invalid length.
[  288.121125][ T9179] netlink: 'syz.4.907': attribute type 29 has an invalid length.
[  288.454819][ T9191] netlink: 668 bytes leftover after parsing attributes in process `syz.4.910'.
[  288.465369][ T9191] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  288.479079][ T9191] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  289.119927][ T9203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.914'.
[  289.154609][ T9203] netlink: 60 bytes leftover after parsing attributes in process `syz.4.914'.
[  289.175319][ T9213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.914'.
[  290.070286][ T9224] team0: Port device team_slave_0 removed
[  290.101144][ T9224] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  290.574217][ T9233] hsr_slave_0: left promiscuous mode
[  290.590597][ T9233] hsr_slave_1: left promiscuous mode
[  290.748428][ T9254] __nla_validate_parse: 3 callbacks suppressed
[  290.748449][ T9254] netlink: 128 bytes leftover after parsing attributes in process `syz.3.924'.
[  290.788859][ T9254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  290.978335][ T9257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.927'.
[  291.003682][ T9257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.927'.
[  291.292147][ T9271] netlink: 'syz.4.932': attribute type 39 has an invalid length.
[  291.407978][ T5087] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10
[  291.571877][ T9279] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.932'.
[  291.622292][ T9279] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.932'.
[  291.698238][ T9271] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.932'.
[  291.709469][ T9284] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.932'.
[  292.142258][ T9300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'.
[  292.165508][ T9300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.940'.
[  292.193640][ T9299] mac80211_hwsim hwsim19 .3ãc¤±: renamed from wlan1 (while UP)
[  292.232243][ T9299] netlink: 'syz.4.941': attribute type 29 has an invalid length.
[  292.261409][ T9299] netlink: 'syz.4.941': attribute type 29 has an invalid length.
[  292.287305][ T9304] netlink: 'syz.4.941': attribute type 29 has an invalid length.
[  292.329856][ T9303] netlink: 26 bytes leftover after parsing attributes in process `syz.2.942'.
[  292.376898][ T9302] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[  292.385354][ T9302] netlink: 'syz.2.942': attribute type 1 has an invalid length.
[  293.509263][ T5087] Bluetooth: hci4: command tx timeout
[  296.332331][ T9383] __nla_validate_parse: 11 callbacks suppressed
[  296.332377][ T9383] netlink: 18187 bytes leftover after parsing attributes in process `syz.4.967'.
[  298.937689][ T9430] netlink: 'syz.2.979': attribute type 1 has an invalid length.
[  298.967955][ T9430] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.979'.
[  299.907216][ T9439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.983'.
[  299.969091][ T9442] netlink: 'syz.0.984': attribute type 2 has an invalid length.
[  300.594569][ T9467] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.992'.
[  301.486155][ T9486] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.999'.
[  301.523461][ T9486] openvswitch: netlink: Tunnel attr 0 has unexpected len 145 expected 8
[  302.159384][ T9501] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.423713][ T9502] netlink: 'syz.3.1004': attribute type 17 has an invalid length.
[  303.138326][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'.
[  303.167748][ T9523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1009'.
[  304.069424][ T9538] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode
[  304.107766][ T9538] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode
[  304.417629][ T9545] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1015'.
[  304.562482][ T9551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'.
[  304.593255][ T9551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'.
[  304.616058][ T9554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'.
[  304.725268][ T9551] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1017'.
[  305.785997][ T9566] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1021'.
[  305.839308][ T9566] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1021'.
[  308.626115][ T9609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'.
[  308.705263][ T9609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'.
[  308.980607][ T9616] syzkaller1: tun_chr_ioctl cmd 1074025677
[  308.987819][ T9616] syzkaller1: Linktype set failed because interface is up
[  309.138092][   T23] syzkaller1: tun_net_xmit 90
[  310.748405][ T9631] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1047'.
[  310.977805][ T9638] netlink: 'syz.3.1042': attribute type 9 has an invalid length.
[  311.020381][ T9638] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1042'.
[  311.852371][ T9657] netlink: 'syz.4.1049': attribute type 17 has an invalid length.
[  311.900950][ T9657] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1049'.
[  311.976319][ T9657] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.046208][ T9654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1048'.
[  312.190999][ T9659] netlink: 'syz.4.1049': attribute type 10 has an invalid length.
[  314.505669][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0
[  314.560449][ T9659] team0: Port device bond0 added
[  316.918735][ T9721] netlink: 'syz.2.1066': attribute type 27 has an invalid length.
[  316.956949][ T9721] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1066'.
[  317.057457][ T9727] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1067'.
[  317.127287][ T9727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  317.134830][ T9727] IPv6: NLM_F_CREATE should be set when creating new route
[  317.142523][ T9727] IPv6: NLM_F_CREATE should be set when creating new route
[  317.151118][ T9727] IPv6: NLM_F_CREATE should be set when creating new route
[  317.571388][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[  317.584288][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[  317.749491][ T9745] netlink: 'syz.2.1073': attribute type 21 has an invalid length.
[  317.781124][ T9745] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1073'.
[  318.019720][ T9749] netlink: 'syz.4.1075': attribute type 10 has an invalid length.
[  318.028040][ T9749] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1075'.
[  319.115850][ T9763] netlink: 'syz.4.1085': attribute type 21 has an invalid length.
[  319.140140][ T9763] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1085'.
[  319.190540][ T9767] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1078'.
[  319.731198][ T9774] netlink: 'syz.4.1079': attribute type 6 has an invalid length.
[  319.767309][ T9774] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1079'.
[  321.283194][ T9786] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1086'.
[  321.316949][ T9788] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1086'.
[  322.075803][ T9796] netlink: 'syz.0.1088': attribute type 10 has an invalid length.
[  322.797439][ T9799] netlink: 'syz.0.1089': attribute type 21 has an invalid length.
[  322.806129][ T9799] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1089'.
[  323.096948][ T9809] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1093'.
[  323.451012][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1097'.
[  323.483634][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1097'.
[  323.548251][ T9827] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1097'.
[  323.660393][ T9831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  323.752959][ T9832] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1098'.
[  324.100574][ T9844] netlink: 'syz.2.1101': attribute type 22 has an invalid length.
[  324.128594][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'.
[  324.205944][ T9850] netlink: 'syz.2.1101': attribute type 10 has an invalid length.
[  324.234193][ T9850] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  324.954759][ T9865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  325.057700][ T9865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  325.226955][ T9867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1108'.
[  325.537198][ T9880] netlink: 'syz.0.1112': attribute type 46 has an invalid length.
[  327.117396][ T9896] delete_channel: no stack
[  327.506369][ T9915] FAULT_INJECTION: forcing a failure.
[  327.506369][ T9915] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  327.526770][ T9915] CPU: 1 PID: 9915 Comm: syz.0.1125 Not tainted syzkaller #0
[  327.534266][ T9915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  327.544428][ T9915] Call Trace:
[  327.547789][ T9915]  <TASK>
[  327.550797][ T9915]  dump_stack_lvl+0x18c/0x250
[  327.555594][ T9915]  ? show_regs_print_info+0x20/0x20
[  327.560933][ T9915]  ? load_image+0x420/0x420
[  327.565545][ T9915]  ? __lock_acquire+0x7d80/0x7d80
[  327.570669][ T9915]  ? snprintf+0xe9/0x140
[  327.575016][ T9915]  should_fail_ex+0x394/0x4c0
[  327.579809][ T9915]  _copy_to_user+0x2f/0xa0
[  327.584334][ T9915]  simple_read_from_buffer+0xe7/0x150
[  327.589826][ T9915]  proc_fail_nth_read+0x1e8/0x260
[  327.594974][ T9915]  ? proc_fault_inject_write+0x360/0x360
[  327.600719][ T9915]  ? fsnotify_perm+0x271/0x5e0
[  327.605599][ T9915]  ? proc_fault_inject_write+0x360/0x360
[  327.611339][ T9915]  vfs_read+0x298/0x990
[  327.615657][ T9915]  ? kernel_read+0x1e0/0x1e0
[  327.620358][ T9915]  ? __fget_files+0x28/0x460
[  327.625048][ T9915]  ? __fget_files+0x3fc/0x460
[  327.629853][ T9915]  ? __fdget_pos+0x2a3/0x330
[  327.634533][ T9915]  ? ksys_read+0x74/0x260
[  327.638975][ T9915]  ksys_read+0x151/0x260
[  327.643324][ T9915]  ? vfs_write+0x9a0/0x9a0
[  327.647864][ T9915]  ? lockdep_hardirqs_on+0x98/0x150
[  327.653184][ T9915]  do_syscall_64+0x55/0xb0
[  327.657725][ T9915]  ? clear_bhb_loop+0x40/0x90
[  327.662478][ T9915]  ? clear_bhb_loop+0x40/0x90
[  327.667280][ T9915]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  327.673819][ T9915] RIP: 0033:0x7f84da95e68e
[  327.678676][ T9915] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  327.698462][ T9915] RSP: 002b:00007f84db78ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  327.707512][ T9915] RAX: ffffffffffffffda RBX: 00007f84db7906c0 RCX: 00007f84da95e68e
[  327.715578][ T9915] RDX: 000000000000000f RSI: 00007f84db7900a0 RDI: 0000000000000007
[  327.723809][ T9915] RBP: 00007f84db790090 R08: 0000000000000000 R09: 0000000000000000
[  327.731902][ T9915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.739964][ T9915] R13: 00007f84dac26038 R14: 00007f84dac25fa0 R15: 00007ffc17062658
[  327.748082][ T9915]  </TASK>
[  328.057945][ T9920] netlink: 'syz.3.1127': attribute type 9 has an invalid length.
[  328.076778][ T9920] __nla_validate_parse: 4 callbacks suppressed
[  328.076817][ T9920] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1127'.
[  328.975403][ T9946] netlink: 'syz.4.1133': attribute type 3 has an invalid length.
[  328.995394][ T9946] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1133'.
[  329.747403][ T9958] netlink: 'syz.0.1137': attribute type 46 has an invalid length.
[  329.766808][ T9958] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1137'.
[  330.538238][ T9965] netlink: 'syz.0.1140': attribute type 15 has an invalid length.
[  330.546176][ T9965] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.1140'.
[  330.661232][ T9970] netlink: 'syz.3.1142': attribute type 21 has an invalid length.
[  330.697471][ T9967] sit0: entered allmulticast mode
[  330.785329][ T9967] sit0: entered promiscuous mode
[  330.888743][ T9972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1143'.
[  330.976349][ T9975] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.1144'.
[  331.342510][ T9982] netlink: 'syz.0.1146': attribute type 29 has an invalid length.
[  331.506106][ T9972] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1143'.
[  331.527733][ T9982] netlink: 'syz.0.1146': attribute type 29 has an invalid length.
[  331.562173][ T9983] netlink: 'syz.0.1146': attribute type 29 has an invalid length.
[  331.588038][ T9973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1143'.
[  332.431864][T10020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1158'.
[  335.124844][T10020] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1158'.
[  335.157032][T10021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1158'.
[  335.312398][T10029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1162'.
[  335.334577][T10029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1162'.
[  335.362551][T10029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1162'.
[  335.392942][T10029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1162'.
[  335.425009][T10034] delete_channel: no stack
[  335.451166][T10034] delete_channel: no stack
[  335.682606][T10038] netlink: 'syz.2.1165': attribute type 9 has an invalid length.
[  335.697768][T10038] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1165'.
[  335.947392][T10042] netlink: 'syz.2.1165': attribute type 9 has an invalid length.
[  336.009596][T10046] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1167'.
[  336.019572][T10042] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1165'.
[  336.994108][T10053] netlink: 'syz.2.1169': attribute type 9 has an invalid length.
[  337.012974][T10053] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1169'.
[  337.084243][T10060] netlink: 'syz.4.1171': attribute type 8 has an invalid length.
[  337.112482][T10052] syzkaller0: entered promiscuous mode
[  337.121504][T10060] netlink: 'syz.4.1171': attribute type 6 has an invalid length.
[  337.132194][T10052] syzkaller0: entered allmulticast mode
[  340.129024][ T5782] Bluetooth: hci4: command 0x0406 tx timeout
[  340.421991][T10101] netlink: 'syz.0.1183': attribute type 10 has an invalid length.
[  340.548505][T10101] bond0: (slave wlan1): Releasing backup interface
[  340.600536][T10100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  341.611657][T10125] __nla_validate_parse: 5 callbacks suppressed
[  341.611699][T10125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1192'.
[  341.691339][T10125] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1192'.
[  341.732896][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1192'.
[  342.327256][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1198'.
[  342.348827][T10157] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1198'.
[  342.366723][T10146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1198'.
[  342.384039][T10157] netlink: 'syz.3.1198': attribute type 15 has an invalid length.
[  342.392536][T10157] netlink: 'syz.3.1198': attribute type 7 has an invalid length.
[  342.400951][T10157] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1198'.
[  342.410660][T10152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1198'.
[  343.936721][T10201] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1212'.
[  345.581401][T10221] netlink: 'syz.3.1214': attribute type 10 has an invalid length.
[  345.798908][T10221] team0: Port device wlan1 added
[  345.829972][T10226] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1217'.
[  345.864031][T10213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  346.340264][T10233] netlink: 'syz.4.1221': attribute type 1 has an invalid length.
[  346.766132][T10241] netlink: 'syz.3.1220': attribute type 9 has an invalid length.
[  346.778827][T10241] __nla_validate_parse: 5 callbacks suppressed
[  346.778845][T10241] netlink: 379 bytes leftover after parsing attributes in process `syz.3.1220'.
[  346.931843][T10245] netlink: 'syz.3.1220': attribute type 21 has an invalid length.
[  346.958508][T10245] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1220'.
[  346.986749][T10245] netlink: 'syz.3.1220': attribute type 4 has an invalid length.
[  347.042307][T10245] netlink: 'syz.3.1220': attribute type 5 has an invalid length.
[  347.084545][T10245] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1220'.
[  347.962804][T10263] netlink: 'syz.4.1229': attribute type 19 has an invalid length.
[  347.985086][T10263] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1229'.
[  348.496866][T10269] ªªªªªª: renamed from vlan0 (while UP)
[  348.818262][T10274] netlink: 'syz.2.1231': attribute type 10 has an invalid length.
[  348.848208][T10277] FAULT_INJECTION: forcing a failure.
[  348.848208][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  348.909695][T10274] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  348.924784][T10277] CPU: 1 PID: 10277 Comm: syz.4.1233 Not tainted syzkaller #0
[  348.932380][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  348.942527][T10277] Call Trace:
[  348.945880][T10277]  <TASK>
[  348.949418][T10277]  dump_stack_lvl+0x18c/0x250
[  348.954388][T10277]  ? show_regs_print_info+0x20/0x20
[  348.959707][T10277]  ? load_image+0x420/0x420
[  348.964351][T10277]  ? __might_fault+0xaa/0x120
[  348.969160][T10277]  ? __lock_acquire+0x7d80/0x7d80
[  348.974327][T10277]  should_fail_ex+0x394/0x4c0
[  348.979167][T10277]  _copy_from_user+0x2f/0xe0
[  348.979184][T10274] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  348.984443][T10277]  ___sys_sendmsg+0x1c7/0x360
[  348.984657][T10277]  ? __sys_sendmsg+0x2b0/0x2b0
[  348.984872][T10277]  ? __lock_acquire+0x7d80/0x7d80
[  349.006429][T10277]  __se_sys_sendmsg+0x1d0/0x2c0
[  349.011400][T10277]  ? __x64_sys_sendmsg+0x80/0x80
[  349.016629][T10277]  ? lockdep_hardirqs_on+0x98/0x150
[  349.022163][T10277]  do_syscall_64+0x55/0xb0
[  349.026706][T10277]  ? clear_bhb_loop+0x40/0x90
[  349.031578][T10277]  ? clear_bhb_loop+0x40/0x90
[  349.036381][T10277]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  349.042439][T10277] RIP: 0033:0x7fe38f19de59
[  349.046947][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  349.066639][T10277] RSP: 002b:00007fe3900fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.075159][T10277] RAX: ffffffffffffffda RBX: 00007fe38f425fa0 RCX: 00007fe38f19de59
[  349.083347][T10277] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  349.091430][T10277] RBP: 00007fe3900fd090 R08: 0000000000000000 R09: 0000000000000000
[  349.099486][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.107537][T10277] R13: 00007fe38f426038 R14: 00007fe38f425fa0 R15: 00007ffefb91dbb8
[  349.115654][T10277]  </TASK>
[  349.208219][T10274] bond0: (slave wlan1): Releasing backup interface
[  349.373548][T10274] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  349.447476][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  349.499092][T10274] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  349.574252][T10274] team0: Port device wlan1 added
[  349.863596][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1241'.
[  349.896721][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1241'.
[  349.933754][T10297] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1241'.
[  350.186211][T10303] netlink: 'syz.2.1243': attribute type 29 has an invalid length.
[  350.237087][T10303] netlink: 'syz.2.1243': attribute type 29 has an invalid length.
[  350.288048][T10303] netlink: 'syz.2.1243': attribute type 29 has an invalid length.
[  350.564849][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1252'.
[  350.583387][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1252'.
[  350.608087][T10309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1252'.
[  350.947975][T10313] FAULT_INJECTION: forcing a failure.
[  350.947975][T10313] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  351.000813][T10313] CPU: 1 PID: 10313 Comm: syz.0.1245 Not tainted syzkaller #0
[  351.008378][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  351.018674][T10313] Call Trace:
[  351.022037][T10313]  <TASK>
[  351.025029][T10313]  dump_stack_lvl+0x18c/0x250
[  351.029785][T10313]  ? show_regs_print_info+0x20/0x20
[  351.035086][T10313]  ? load_image+0x420/0x420
[  351.039654][T10313]  ? __lock_acquire+0x7d80/0x7d80
[  351.044792][T10313]  should_fail_ex+0x394/0x4c0
[  351.049821][T10313]  _copy_from_user+0x2f/0xe0
[  351.054542][T10313]  __copy_msghdr+0x388/0x560
[  351.059375][T10313]  ___sys_sendmsg+0x214/0x360
[  351.064131][T10313]  ? get_pid_task+0x20/0x1e0
[  351.068803][T10313]  ? __sys_sendmsg+0x2b0/0x2b0
[  351.073626][T10313]  ? __lock_acquire+0x7d80/0x7d80
[  351.078714][T10313]  __se_sys_sendmsg+0x1d0/0x2c0
[  351.083800][T10313]  ? __x64_sys_sendmsg+0x80/0x80
[  351.088794][T10313]  ? lockdep_hardirqs_on+0x98/0x150
[  351.094025][T10313]  do_syscall_64+0x55/0xb0
[  351.098476][T10313]  ? clear_bhb_loop+0x40/0x90
[  351.103207][T10313]  ? clear_bhb_loop+0x40/0x90
[  351.107940][T10313]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  351.113871][T10313] RIP: 0033:0x7f84da99de59
[  351.118584][T10313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  351.139089][T10313] RSP: 002b:00007f84db790028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.147545][T10313] RAX: ffffffffffffffda RBX: 00007f84dac25fa0 RCX: 00007f84da99de59
[  351.155552][T10313] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004
[  351.163552][T10313] RBP: 00007f84db790090 R08: 0000000000000000 R09: 0000000000000000
[  351.171560][T10313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.179579][T10313] R13: 00007f84dac26038 R14: 00007f84dac25fa0 R15: 00007ffc17062658
[  351.187604][T10313]  </TASK>
[  351.555262][T10325] netlink: 'syz.3.1248': attribute type 10 has an invalid length.
[  352.014325][T10342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1254'.
[  352.355467][T10342] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1254'.
[  352.366976][T10343] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1254'.
[  352.644848][T10351] netlink: 'syz.0.1255': attribute type 1 has an invalid length.
[  352.671034][T10351] netlink: 'syz.0.1255': attribute type 3 has an invalid length.
[  352.687136][T10351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1255'.
[  352.721433][T10351] netlink: 'syz.0.1255': attribute type 10 has an invalid length.
[  352.766710][T10351] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1255'.
[  352.801140][T10350] netlink: 'syz.4.1256': attribute type 10 has an invalid length.
[  352.827140][T10350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1256'.
[  352.847560][T10350] vcan0: entered promiscuous mode
[  352.859223][T10350] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  355.214288][T10379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1263'.
[  355.244831][T10379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1263'.
[  355.274192][T10379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1263'.
[  355.897342][T10395] netlink: 'syz.3.1271': attribute type 10 has an invalid length.
[  355.920741][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1271'.
[  355.963667][T10395] vcan0: entered promiscuous mode
[  356.006343][T10395] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  356.418109][T10417] netlink: 'syz.4.1280': attribute type 10 has an invalid length.
[  357.167064][T10440] __nla_validate_parse: 4 callbacks suppressed
[  357.167082][T10440] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1286'.
[  357.207351][T10444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1287'.
[  357.236611][T10444] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1287'.
[  357.259730][T10445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1287'.
[  357.680470][T10456] netlink: 'syz.0.1291': attribute type 10 has an invalid length.
[  357.691428][T10456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1291'.
[  357.716963][T10456] vcan0: entered promiscuous mode
[  357.736558][T10456] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  358.211677][T10468] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1295'.
[  358.968746][T10475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1299'.
[  359.007036][T10475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1299'.
[  359.038280][T10475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1299'.
[  359.685767][T10485] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode
[  359.693217][T10485] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  360.127420][T10495] netlink: 'syz.2.1306': attribute type 29 has an invalid length.
[  360.135934][T10495] netlink: 'syz.2.1306': attribute type 29 has an invalid length.
[  360.301753][T10500] netlink: 'syz.4.1307': attribute type 1 has an invalid length.
[  360.316123][T10500] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1307'.
[  360.327342][T10501] netlink: 'syz.0.1308': attribute type 10 has an invalid length.
[  360.823543][T10505] netlink: 'syz.0.1311': attribute type 3 has an invalid length.
[  361.336348][T10509] syzkaller0: entered promiscuous mode
[  361.353829][T10509] syzkaller0: entered allmulticast mode
[  364.365191][T10521] netlink: 'syz.2.1316': attribute type 21 has an invalid length.
[  364.373804][T10521] __nla_validate_parse: 4 callbacks suppressed
[  364.373819][T10521] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1316'.
[  364.542959][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1321'.
[  364.573428][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1321'.
[  364.617681][T10542] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1321'.
[  364.671576][T10544] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1322'.
[  364.695866][T10539] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1322'.
[  364.806750][T10545] wlan0: mtu less than device minimum
[  364.908911][T10541] sit0: left promiscuous mode
[  365.181176][T10546] sit0: entered promiscuous mode
[  365.554173][T10565] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.1329'.
[  369.406898][   T29] INFO: task syz.1.477:7517 blocked for more than 143 seconds.
[  369.448264][   T29]       Not tainted syzkaller #0
[  369.498728][   T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  369.544666][   T29] task:syz.1.477       state:D stack:23272 pid:7517  ppid:5776   flags:0x00004006
[  369.596629][   T29] Call Trace:
[  369.600157][   T29]  <TASK>
[  369.603199][   T29]  __schedule+0x15ae/0x4660
[  369.624987][   T29]  ? __lock_acquire+0x7d80/0x7d80
[  369.645589][   T29]  ? asan.module_dtor+0x20/0x20
[  369.655492][   T29]  ? trace_contention_end+0x39/0xe0
[  369.665585][   T29]  ? perf_event_ctx_lock_nested+0x490/0x490
[  369.676665][   T29]  ? task_work_cancel+0xa5/0x220
[  369.685580][   T29]  ? task_work_cancel_func+0x210/0x210
[  369.697617][   T29]  schedule+0xbd/0x170
[  369.705573][   T29]  ? _free_event+0x10d/0xfb0
[  369.721418][   T29]  _free_event+0x176/0xfb0
[  369.745848][   T29]  perf_event_release_kernel+0x7c8/0x850
[  369.766781][   T29]  ? __might_sleep+0xe0/0xe0
[  369.782110][   T29]  ? calc_timer_values+0x400/0x400
[  369.794922][   T29]  ? perf_mmap+0x15e0/0x15e0
[  369.806896][   T29]  perf_release+0x3b/0x40
[  369.817003][   T29]  __fput+0x221/0x940
[  369.824785][   T29]  task_work_run+0x1d4/0x260
[  369.835890][   T29]  ? task_work_cancel+0x220/0x220
[  369.860505][   T29]  get_signal+0x11da/0x1390
[  369.882979][   T29]  ? create_io_thread+0x190/0x190
[  369.888562][   T29]  arch_do_signal_or_restart+0xc2/0x7b0
[  369.894517][   T29]  ? get_sigframe_size+0x20/0x20
[  369.900015][   T29]  ? perf_trace_preemptirq_template+0xac/0x330
[  369.906609][   T29]  ? exit_to_user_mode_loop+0x3b/0x110
[  369.912407][   T29]  exit_to_user_mode_loop+0x70/0x110
[  369.918542][   T29]  exit_to_user_mode_prepare+0xee/0x180
[  369.924436][   T29]  syscall_exit_to_user_mode+0x1a/0x50
[  369.930396][   T29]  do_syscall_64+0x61/0xb0
[  369.935151][   T29]  ? clear_bhb_loop+0x40/0x90
[  369.940009][   T29]  ? clear_bhb_loop+0x40/0x90
[  369.946052][   T29]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  369.958625][   T29] RIP: 0033:0x7f663259de59
[  369.964646][   T29] RSP: 002b:00007f66334c8fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  369.979431][   T29] RAX: fffffffffffffff4 RBX: 00007f6632825fa0 RCX: 00007f663259de59
[  369.993918][   T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000
[  370.005682][   T29] RBP: 00007f6632633e6f R08: 0000000000000000 R09: 0000000000000000
[  370.016358][   T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  370.031136][   T29] R13: 00007f6632826038 R14: 00007f6632825fa0 R15: 00007ffd8931d6c8
[  370.043388][   T29]  </TASK>
[  370.054316][   T29] 
[  370.054316][   T29] Showing all locks held in the system:
[  370.076259][   T29] 1 lock held by rcu_tasks_trace/15:
[  370.089506][   T29]  #0: ffffffff8d132ad0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xb11/0xdf0
[  370.127367][   T29] 1 lock held by khungtaskd/29:
[  370.142682][   T29]  #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290
[  370.161295][   T29] 2 locks held by getty/5531:
[  370.166404][   T29]  #0: ffff88803133a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  370.188151][   T29]  #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370
[  370.229499][   T29] 2 locks held by kworker/1:3/5816:
[  370.234834][   T29] 2 locks held by kworker/1:5/6742:
[  370.257082][   T29]  #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  370.276930][   T29]  #1: ffffc9000454fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600
[  370.296554][   T29] 2 locks held by kworker/u4:19/8110:
[  370.308373][   T29] 1 lock held by syz.2.1336/10584:
[  370.320224][   T29]  #0: ffffffff8d1920e8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310
[  370.340554][   T29] 1 lock held by syz.2.1336/10585:
[  370.345990][   T29] 1 lock held by syz.4.1338/10589:
[  370.357494][   T29]  #0: ffffffff8d1920e8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310
[  370.373915][   T29] 1 lock held by syz.3.1334/10593:
[  370.386738][   T29]  #0: ffffffff8d1920e8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310
[  370.408542][   T29] 
[  370.414454][   T29] =============================================
[  370.414454][   T29] 
[  370.430400][   T29] NMI backtrace for cpu 1
[  370.434833][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  370.442097][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  370.452229][   T29] Call Trace:
[  370.455569][   T29]  <TASK>
[  370.458578][   T29]  dump_stack_lvl+0x18c/0x250
[  370.463388][   T29]  ? nmi_cpu_backtrace+0x1b6/0x3e0
[  370.468574][   T29]  ? show_regs_print_info+0x20/0x20
[  370.473885][   T29]  ? load_image+0x420/0x420
[  370.478491][   T29]  nmi_cpu_backtrace+0x3a6/0x3e0
[  370.483526][   T29]  ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0
[  370.489762][   T29]  ? load_image+0x420/0x420
[  370.494348][   T29]  ? wq_watchdog_touch+0xef/0x170
[  370.499484][   T29]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  370.505694][   T29]  nmi_trigger_cpumask_backtrace+0x17a/0x2f0
[  370.511783][   T29]  watchdog+0xf59/0xfa0
[  370.516017][   T29]  ? watchdog+0x1e1/0xfa0
[  370.520435][   T29]  kthread+0x2fa/0x390
[  370.524591][   T29]  ? hungtask_pm_notify+0x50/0x50
[  370.529690][   T29]  ? kthread_blkcg+0xd0/0xd0
[  370.534345][   T29]  ret_from_fork+0x48/0x80
[  370.538847][   T29]  ? kthread_blkcg+0xd0/0xd0
[  370.543507][   T29]  ret_from_fork_asm+0x11/0x20
[  370.548397][   T29]  </TASK>
[  370.552371][   T29] Sending NMI from CPU 1 to CPUs 0:
[  370.557729][    C0] NMI backtrace for cpu 0
[  370.557740][    C0] CPU: 0 PID: 10585 Comm: syz.2.1336 Not tainted syzkaller #0
[  370.557759][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  370.557769][    C0] RIP: 0010:__next_zones_zonelist+0x0/0x130
[  370.557805][    C0] Code: c3 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 6d ff ff ff 4c 89 f7 e8 10 b5 1c 00 e9 60 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 89 f3 49 89 fe 48 bd 00
[  370.557820][    C0] RSP: 0018:ffffc900106f6b68 EFLAGS: 00000286
[  370.557837][    C0] RAX: 1ffff920020ded85 RBX: ffffc900106f6c28 RCX: 0000000000000003
[  370.557857][    C0] RDX: ffff88807c9acf00 RSI: 0000000000000002 RDI: ffff88813fffc300
[  370.557870][    C0] RBP: 0000000000000002 R08: ffffc900106f6c20 R09: ffffc900106f6bf8
[  370.557882][    C0] R10: ffffc900106f6c20 R11: fffff520020ded89 R12: 0000000000000000
[  370.557895][    C0] R13: 0000000000000000 R14: ffff88813fffc300 R15: 1ffff920020ded84
[  370.557907][    C0] FS:  00007f06a33356c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  370.557924][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  370.557936][    C0] CR2: 00007f93699ed2f8 CR3: 0000000064ef2000 CR4: 00000000003506f0
[  370.557952][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  370.557962][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  370.557976][    C0] Call Trace:
[  370.557982][    C0]  <TASK>
[  370.557987][    C0]  prepare_alloc_pages+0x357/0x5b0
[  370.558012][    C0]  __alloc_pages+0x134/0x460
[  370.558031][    C0]  ? zone_statistics+0x170/0x170
[  370.558059][    C0]  alloc_slab_page+0x5d/0x180
[  370.558079][    C0]  new_slab+0x87/0x2d0
[  370.558108][    C0]  ___slab_alloc+0xc5c/0x12f0
[  370.558138][    C0]  ? copy_array+0x64/0xf0
[  370.558170][    C0]  __kmem_cache_alloc_node+0x11f/0x250
[  370.558197][    C0]  ? copy_array+0x64/0xf0
[  370.558225][    C0]  ? copy_array+0x64/0xf0
[  370.558253][    C0]  __kmalloc_node_track_caller+0xa4/0x230
[  370.558284][    C0]  krealloc+0x86/0x120
[  370.558311][    C0]  copy_array+0x64/0xf0
[  370.558340][    C0]  copy_verifier_state+0x817/0xd50
[  370.558376][    C0]  push_stack+0x1b9/0x500
[  370.558408][    C0]  check_cond_jmp_op+0x10a4/0x28b0
[  370.558446][    C0]  ? check_mem_access+0xa97/0x19b0
[  370.558472][    C0]  ? check_return_code+0x1110/0x1110
[  370.558503][    C0]  ? __check_reg_arg+0x4ec/0x800
[  370.558520][    C0]  ? save_aux_ptr_type+0x9c/0x2b0
[  370.558549][    C0]  do_check+0x6992/0xd0a0
[  370.558587][    C0]  ? __kasan_kmalloc+0x8f/0xa0
[  370.558608][    C0]  ? __sys_bpf+0x5ba/0x890
[  370.558627][    C0]  ? do_syscall_64+0x55/0xb0
[  370.558677][    C0]  ? init_func_state+0x2d10/0x2d10
[  370.558704][    C0]  ? __asan_memset+0x22/0x40
[  370.558729][    C0]  ? init_func_state+0x1dc6/0x2d10
[  370.558755][    C0]  ? btf_check_subprog_arg_match+0x142/0x2a0
[  370.558783][    C0]  do_check_common+0xacc/0x1410
[  370.558814][    C0]  bpf_check+0x65d1/0xec30
[  370.558856][    C0]  ? __lock_acquire+0x1336/0x7d80
[  370.558883][    C0]  ? bpf_get_btf_vmlinux+0x20/0x20
[  370.558906][    C0]  ? __lock_acquire+0x1262/0x7d80
[  370.558933][    C0]  ? mark_lock+0x94/0x320
[  370.558955][    C0]  ? __lock_acquire+0x1336/0x7d80
[  370.558993][    C0]  ? verify_lock_unused+0x140/0x140
[  370.559019][    C0]  ? verify_lock_unused+0x140/0x140
[  370.559040][    C0]  ? verify_lock_unused+0x140/0x140
[  370.559064][    C0]  ? pcpu_memcg_post_alloc_hook+0xef/0x3f0
[  370.559099][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  370.559121][    C0]  ? __lock_acquire+0x7d80/0x7d80
[  370.559142][    C0]  ? lock_chain_count+0x20/0x20
[  370.559164][    C0]  ? seqcount_lockdep_reader_access+0x12b/0x1d0
[  370.559187][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  370.559209][    C0]  ? ktime_get_with_offset+0x103/0x330
[  370.559230][    C0]  ? seqcount_lockdep_reader_access+0x191/0x1d0
[  370.559253][    C0]  ? ktime_get_real_ts64+0x440/0x440
[  370.559275][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  370.559308][    C0]  ? bpf_obj_name_cpy+0x194/0x1e0
[  370.559339][    C0]  bpf_prog_load+0x10fa/0x1610
[  370.559368][    C0]  ? map_freeze+0x420/0x420
[  370.559397][    C0]  ? __might_fault+0xaa/0x120
[  370.559416][    C0]  ? __might_fault+0xc6/0x120
[  370.559432][    C0]  ? __might_fault+0xaa/0x120
[  370.559450][    C0]  ? bpf_lsm_bpf+0x9/0x10
[  370.559474][    C0]  ? security_bpf+0x7e/0xa0
[  370.559537][    C0]  __sys_bpf+0x5ba/0x890
[  370.559558][    C0]  ? bpf_link_show_fdinfo+0x390/0x390
[  370.559589][    C0]  ? lock_chain_count+0x20/0x20
[  370.559614][    C0]  __x64_sys_bpf+0x7c/0x90
[  370.559635][    C0]  do_syscall_64+0x55/0xb0
[  370.559668][    C0]  ? clear_bhb_loop+0x40/0x90
[  370.559686][    C0]  ? clear_bhb_loop+0x40/0x90
[  370.559705][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  370.559735][    C0] RIP: 0033:0x7f06a239de59
[  370.559751][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  370.559766][    C0] RSP: 002b:00007f06a3335028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  370.559784][    C0] RAX: ffffffffffffffda RBX: 00007f06a2625fa0 RCX: 00007f06a239de59
[  370.559798][    C0] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  370.559815][    C0] RBP: 00007f06a2433e6f R08: 0000000000000000 R09: 0000000000000000
[  370.559826][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  370.559837][    C0] R13: 00007f06a2626038 R14: 00007f06a2625fa0 R15: 00007ffc4b757fc8
[  370.559867][    C0]  </TASK>
[  371.104339][   T29] Kernel panic - not syncing: hung_task: blocked tasks
[  371.111274][   T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0
[  371.118531][   T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  371.128635][   T29] Call Trace:
[  371.132481][   T29]  <TASK>
[  371.135452][   T29]  dump_stack_lvl+0x18c/0x250
[  371.140195][   T29]  ? show_regs_print_info+0x20/0x20
[  371.145457][   T29]  ? load_image+0x420/0x420
[  371.150030][   T29]  panic+0x2ca/0x720
[  371.154075][   T29]  ? bpf_jit_dump+0xd0/0xd0
[  371.158727][   T29]  ? __irq_work_queue_local+0x13a/0x3b0
[  371.164335][   T29]  ? preempt_schedule_thunk+0x1a/0x30
[  371.169779][   T29]  ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0
[  371.175997][   T29]  watchdog+0xf98/0xfa0
[  371.180224][   T29]  ? watchdog+0x1e1/0xfa0
[  371.184632][   T29]  kthread+0x2fa/0x390
[  371.188755][   T29]  ? hungtask_pm_notify+0x50/0x50
[  371.193844][   T29]  ? kthread_blkcg+0xd0/0xd0
[  371.198493][   T29]  ret_from_fork+0x48/0x80
[  371.202975][   T29]  ? kthread_blkcg+0xd0/0xd0
[  371.207628][   T29]  ret_from_fork_asm+0x11/0x20
[  371.212470][   T29]  </TASK>
[  371.216131][   T29] Kernel Offset: disabled
[  371.220470][   T29] Rebooting in 86400 seconds..