last executing test programs:

14.006208497s ago: executing program 3 (id=1375):
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x3, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES8=0x0], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x5c}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810)
recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x6, 0xa}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000006d01"], 0x0, 0x192, 0x0, 0x1, 0x1}, 0x28)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)="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", 0x28c}], 0x1}, 0x488d0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)
r6 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x3, 0x5, 0x44, 0x3, 0x0, 0x6, 0x1051a, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9b3, 0x2, @perf_config_ext={0x6, 0xb}, 0x80, 0x6, 0x8, 0x9, 0x9, 0x80000000, 0x8, 0x0, 0x7fffffff, 0x0, 0x7}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r0)

11.369982941s ago: executing program 3 (id=1377):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'wlan0\x00'})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e000000000000000380000007"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53, 0x4}, 0x20)

9.952946156s ago: executing program 0 (id=1382):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="0408005eafcfc47a2ec6b4001000b317a2c8e53a0d0000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x6)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20)

8.1733267s ago: executing program 3 (id=1383):
perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x800)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000001c0), 0x2, 0x0)

8.032807253s ago: executing program 0 (id=1385):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00))
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x0, 0x20009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x35, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000080000007b367c5711565a9aef51dc400000000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000240), 0x0}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(0x0, 0x47660708ddf4f68a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6c029, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x668, 0x35, 0x120, 0x4, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080), 0x12)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f00000000c0)=0x8000000000000003, 0x12)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

7.876719237s ago: executing program 3 (id=1388):
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='.9\xb7\xa8(\x05\xb6\xbc\xdc\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` \x8e\x1a\xb9\xd5\xa1B\xe5\xcd\xc1\xefPHG-\xf5\x0e\xec\x13l\xd1`A/\xef\xa6\xe7\f\x8c')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000003000000fa0900008500000041000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c6b0d21c94c21c708e4278b05c7e1ced252deff3c491c39be79c0c2627adf7ee675b7767a8b5847b2e90c5a96e8cbcd575879edae8b88d04bcfce5383341f5b3904f9914", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000006000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x38, 0xe, 0x0, &(0x7f0000000240)="00000000000800005bdfa092873f", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1600000000000000b40000205e"], 0x50)
r3 = perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000900)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38)
r5 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r5, 0x10d, 0xd, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0)
openat$cgroup_type(r6, &(0x7f0000000880), 0x2, 0x0)
close(r6)
write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r6], 0xa)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xa, 0x11, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000c000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000000000080000001009500000000000000183b000003000000000000f80000c8a1342ed360bc4cd9f50000bf91000000000000b7020000010000008500000085000000b700000000000100ad00000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x10004}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x5, 0x8, 0x8f}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000580)=[{0x0, 0x3, 0xe, 0x5}, {0x2, 0x1, 0xc, 0x2}, {0x3, 0x3, 0x7, 0x4}, {0x0, 0x2, 0x4, 0x1}, {0x1, 0x4, 0x2, 0x4}, {0x3, 0x2, 0xf, 0x4}], 0x10, 0x2f9}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@fallback=r3, 0x36, 0x0, 0xc8, &(0x7f00000006c0), 0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000740)=[0x0], &(0x7f0000000780)=[0x0, 0x0], <r8=>0x0}, 0x40)
r9 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="b00000001a007f029e78f6030f7a0a762353bfb89fd8c902317bab30f89f080aaaaeb9d8091c815dcf03e14e877733fff4fe20a5be870f576b162e7de2d02673e789a4950c9cdc206e086fd0dc8ca9afcd9d525146add31b7bc77c26d8982be29d889d1e35355848794ca3f8b38aef1e114ab9fbebe9c6609e64b1e5a3b0c81c6f8144e74fe12780ca46c1a6c04ad73c9d44b605f9000000000000000000", 0x9e}, {&(0x7f00000001c0)="68cabf2dfb58fc0af787a8ffff0200258f00", 0x12}], 0x2}, 0x40840)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@map=r0, r3, 0x1b, 0x1, r7, @void, @value, @void, @void, r8}, 0x20)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf4}, 0x1050b0, 0x2, 0x6, 0x0, 0xb, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r11 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r11, 0x1, 0x46, &(0x7f00000002c0)=r10, 0x161)
ioctl$TUNGETFILTER(r10, 0x801054db, &(0x7f00000008c0)=""/13)

7.625423833s ago: executing program 2 (id=1389):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb3b0000ce220000000004000000e3"], 0xfdef) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x90) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x80000000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) (async)
write$cgroup_int(r1, &(0x7f0000000040)=0xa000000000000000, 0x12) (async, rerun: 32)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100, 0x2}, 0x50)

6.897081351s ago: executing program 2 (id=1390):
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200})
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0800000000000000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000018feffff720aa9fff8ffffff71a400fe0000000072030200000000131d400500000000004704000001ed00006b03feff000000001d440000000000007a0a00fe00ffffffc303000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7109000000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e50002a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de5c028d6112a0c2d21b2dc98814106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c53218294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb118888876b617398d00a7526103ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e08b7ab6cd9c65ba55f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddc42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293d364b9effa9a9406ac2683e231d4774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479517dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a79e59e1712c8c546768e5722da19fcdb4c2890cda1f96b952511e3a49d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767987d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c32040098e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1be62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070f66b2b388f0f744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028a3a981463f25c068d4410dad0c74e2a9478fa3be18a1a27bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab07001b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe293308b2a146f12a4c205235924cee765d94b1cc06641247c773ab8d1abbeb03ea68"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x6a, 0x40000007, 0x84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07186702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)

4.741271304s ago: executing program 3 (id=1391):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4}]})
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff010}]})
ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x2, 0x3, 0x6, 0x3, 0x2, 0x80, 0x4}, @alu={0x4, 0x1, 0x4, 0x2, 0x6, 0xfffffffffffffff4, 0xffffffffffffffe0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000200)='GPL\x00', 0x7, 0x33, &(0x7f00000002c0)=""/51, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x2, 0x4, 0x400}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1, 0x1], &(0x7f0000000480)=[{0x3, 0x3, 0x8, 0x6}, {0x2, 0x5, 0x0, 0x9}, {0x0, 0x3, 0x7, 0xe86b34288401721e}], 0x10, 0xc31c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61154c00000000006113580000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07906706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f19de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03cc86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800030cffa651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a60100c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40446d7074be86a912a5ac00f7ffffffffffffff000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000001fe4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642894cacd473b543ccb5f0d7b63924f17c67b00631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809f905f12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad0fceee5f339550130a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a557317c66dd255ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d644b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a6749b94a42b25e9321fc2cc17dc4a29b9cba8ded5de439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f3b563ab9000000ff000000000077a99fb5b0a43749ca477c9c7ca20bd428d8f77bb920ad0db4c1da671bfad7f109b776476a54939e621232cd115ba9f37057ad891fea2353f3ad9c042c64a5ecf80f4e4cf927ae39347c22822375c26edf2754695c16780429e03759691adb63553e9c4561528ded5f35bb20e98b2e6d01dbfcde82608359c50881324524db0dbe21efba4f0fc338f4b0b11cb028d1063b3bacaab92fb7f9d2971440f873ec261d54c1570adef8004c91896fcd74c9e03dfd9a781210c0346ed1b02a44c64adad8a3f238a8ddf7207c45057c02e922b942f15ddcfbfb00"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r2, &(0x7f0000000280), 0x9)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x0)
sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="b5", 0x1}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='t', 0x1}], 0x1}, 0x1)
setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000180), 0x43)
sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090)

4.537593769s ago: executing program 0 (id=1392):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000200ffb00f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000000080)='GPL\x00', 0x9, 0xdf, &(0x7f000000cf3d)=""/186, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x41)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async)
close(r0) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000200ffb00f100000000000007a0000000000000095f305e49b243c69"], &(0x7f0000000080)='GPL\x00', 0x9, 0xdf, &(0x7f000000cf3d)=""/186, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x41) (async)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) (async)
write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) (async)

4.461064301s ago: executing program 2 (id=1393):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="0408005eafcfc47a2ec6b4001000b317a2c8e53a0d0000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20)

4.358566933s ago: executing program 0 (id=1394):
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000001700000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a00ef00850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x50)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x8, 0x0, 0x8000000000000, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0xb)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000008010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40)

4.358252603s ago: executing program 1 (id=1395):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000002000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.295294335s ago: executing program 2 (id=1396):
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$kcm(0x10, 0x2, 0x10)
socketpair(0x6, 0x1, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3a}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0x40f, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e9}], 0x1}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a)
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/43, 0x2b}, 0x100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080))

4.014534942s ago: executing program 1 (id=1397):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b00009000700060411000000160005000afe20000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x5}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c80)="39000000140081ae0000dc676f97da021f2357f9ffffffffffffff0521018701546fabca05e28a06b8580e88370200c54c1960b89c67157f40", 0x39}], 0x1}, 0x4000080)
socketpair(0x0, 0x4, 0x4, &(0x7f0000003540))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0xfffffd79}, 0x80)
perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[], 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31)

1.165470281s ago: executing program 1 (id=1398):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x40086, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0xebf0, 0x7, 0x6, 0x8, 0x7edb, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x40086, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0xebf0, 0x7, 0x6, 0x8, 0x7edb, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x1e, 0x4, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) (async)
r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4)
socketpair(0x23, 0x800, 0xfff, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000100)=r0, 0x4)
r2 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0)

1.123244792s ago: executing program 0 (id=1399):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a1180015000600141f030000120800040043000000a8001600a40001", 0x37}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x0, 0x2, 0x9, 0x0, 0xa9b6, 0xc004, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1, 0xe, 0x5, 0x9, 0x9, 0x2, 0x4, 0x0, 0x7, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x4)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='$\x00')
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)

1.052844084s ago: executing program 2 (id=1400):
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2)
r4 = openat$cgroup_int(r0, &(0x7f0000000400)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000004c0)=0x30000000000, 0x12)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r1}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000007c0), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000800)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000014"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', r5, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64)
r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x2}}, 0x80, 0x0}, 0x88010)
socketpair(0x3, 0x6, 0x88, &(0x7f00000002c0)) (async)
r8 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100)}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) (async, rerun: 64)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d000864160af36504001a0038001d00a1ff0000", 0x28}, {&(0x7f00000006c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x5605744c5c979ce6) (async)
socket$kcm(0x10, 0x3, 0x10)

1.011538696s ago: executing program 3 (id=1401):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000e00))
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x1, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x0, 0x20009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x5, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x35, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000080000007b367c5711565a9aef51dc400000000001000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r3, &(0x7f0000000240), 0x0}, 0x20)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdir(0x0, 0x47660708ddf4f68a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0)
perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6c029, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x668, 0x35, 0x120, 0x4, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000500)=""/114, 0x72}, {0x0, 0xffa1}], 0x3}, 0x120)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_pid(r7, &(0x7f0000000080), 0x12)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f00000000c0)=0x8000000000000003, 0x12)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

918.609797ms ago: executing program 0 (id=1402):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$kcm(0x10, 0x2, 0x0)
close(r0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES16=r1, @ANYRES64=0x0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000800)={0x2, 0xa6, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000400))
perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

806.28913ms ago: executing program 1 (id=1403):
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2002, 0x0, 0x0, 0x0, 0x80000}, [@generic={0x71, 0x0, 0x1, 0x64}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xd}, 0x94)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'veth1_to_bridge\x00'})
r3 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x6b}, 0x0)
sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r6 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000080)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x10}, 0x0)
close(r6)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@fallback=r9, 0x9, 0x1, 0x4, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0)

379.877221ms ago: executing program 2 (id=1404):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="0408005eafcfc47a2ec6b4001000b317a2c8e53a0d0000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0xffffffffffffff3d, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f0000000040)=r2}, 0x20)

312.992453ms ago: executing program 1 (id=1405):
r0 = socket$kcm(0x10, 0x3, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0xa, 0x3, 0xffffff}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x5f, 0x30, 0x61, 0x4f, 0x0, 0x61, 0x2e, 0x0, 0x2e]}}, 0x0, 0x54, 0x0, 0x2, 0x400}, 0x28)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x9, 0x12)

0s ago: executing program 1 (id=1406):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffff9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0)
close(r1)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$sock(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000380)='1UB', 0x5dc}], 0x1}, 0x1)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x2}, 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf02e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x65, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
socket$kcm(0xa, 0x5, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x5, &(0x7f00000002c0)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}, {0x0, 0x9d, 0x0, 0x4}, {0x5f, 0x3, 0x4, 0x5}, {0x9, 0x4e, 0xa, 0x1}]})
ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180))
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$cgroup_type(r7, &(0x7f0000000280), 0x9)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts.
[   74.738105][ T5761] cgroup: Unknown subsys name 'net'
[   74.841831][ T5761] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   76.594690][ T5761] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   78.232802][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   78.235117][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   78.241043][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   78.257585][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   78.265815][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   78.275811][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   78.283392][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   78.283955][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   78.298933][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   78.308190][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   78.312293][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.342953][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   78.343900][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.358258][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   78.358635][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.374431][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   78.374446][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   78.375091][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   78.381980][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.397271][ T5791] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   78.411160][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   78.411243][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   78.419335][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.435495][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.831690][ T5774] chnl_net:caif_netlink_parms(): no params data found
[   78.916457][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   79.027927][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.035882][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.043388][ T5774] bridge_slave_0: entered allmulticast mode
[   79.050788][ T5774] bridge_slave_0: entered promiscuous mode
[   79.066699][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.074325][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.082216][ T5774] bridge_slave_1: entered allmulticast mode
[   79.089466][ T5774] bridge_slave_1: entered promiscuous mode
[   79.145253][ T5776] chnl_net:caif_netlink_parms(): no params data found
[   79.174457][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.187428][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.258234][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.265823][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.273223][ T5777] bridge_slave_0: entered allmulticast mode
[   79.280906][ T5777] bridge_slave_0: entered promiscuous mode
[   79.288748][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.296321][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.303889][ T5777] bridge_slave_1: entered allmulticast mode
[   79.310754][ T5777] bridge_slave_1: entered promiscuous mode
[   79.374804][ T5774] team0: Port device team_slave_0 added
[   79.385470][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.408062][ T5774] team0: Port device team_slave_1 added
[   79.439363][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.469226][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.476912][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.503746][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.521924][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.529519][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.557102][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.586777][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.596616][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.603934][ T5776] bridge_slave_0: entered allmulticast mode
[   79.610884][ T5776] bridge_slave_0: entered promiscuous mode
[   79.621620][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.628857][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.636512][ T5776] bridge_slave_1: entered allmulticast mode
[   79.644241][ T5776] bridge_slave_1: entered promiscuous mode
[   79.651428][ T5775] chnl_net:caif_netlink_parms(): no params data found
[   79.672925][ T5777] team0: Port device team_slave_0 added
[   79.682791][ T5777] team0: Port device team_slave_1 added
[   79.755506][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.768980][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.788908][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.796153][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.823246][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.836621][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.845211][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.871511][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.970268][ T5774] hsr_slave_0: entered promiscuous mode
[   79.977942][ T5774] hsr_slave_1: entered promiscuous mode
[   80.012416][ T5776] team0: Port device team_slave_0 added
[   80.034603][ T5777] hsr_slave_0: entered promiscuous mode
[   80.041250][ T5777] hsr_slave_1: entered promiscuous mode
[   80.049145][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.057534][ T5777] Cannot create hsr debugfs directory
[   80.085038][ T5776] team0: Port device team_slave_1 added
[   80.151601][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.159723][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.167441][ T5775] bridge_slave_0: entered allmulticast mode
[   80.174660][ T5775] bridge_slave_0: entered promiscuous mode
[   80.182389][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.189745][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.197117][ T5775] bridge_slave_1: entered allmulticast mode
[   80.205046][ T5775] bridge_slave_1: entered promiscuous mode
[   80.212436][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.219705][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.246533][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.299809][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.307112][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.333487][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.334732][ T5782] Bluetooth: hci2: command tx timeout
[   80.393005][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.405430][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   80.493718][ T5782] Bluetooth: hci1: command tx timeout
[   80.493798][ T5791] Bluetooth: hci0: command tx timeout
[   80.519920][ T5776] hsr_slave_0: entered promiscuous mode
[   80.526547][ T5776] hsr_slave_1: entered promiscuous mode
[   80.533062][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.541761][ T5776] Cannot create hsr debugfs directory
[   80.558957][ T5775] team0: Port device team_slave_0 added
[   80.567658][ T5775] team0: Port device team_slave_1 added
[   80.574558][ T5791] Bluetooth: hci3: command tx timeout
[   80.651896][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0
[   80.659085][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.685732][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   80.704949][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.712131][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.740413][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.862802][ T5775] hsr_slave_0: entered promiscuous mode
[   80.870513][ T5775] hsr_slave_1: entered promiscuous mode
[   80.877979][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   80.885868][ T5775] Cannot create hsr debugfs directory
[   80.935412][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.973079][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.983135][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.037531][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   81.111791][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.144381][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.157374][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.172109][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.261068][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.281997][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.294133][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.305154][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.475084][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   81.496206][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   81.517533][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   81.529825][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   81.570985][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.629771][ T5774] 8021q: adding VLAN 0 to HW filter on device team0
[   81.676915][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.684403][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.697993][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.705196][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.721389][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.790384][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.801872][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.812406][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   81.860837][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.868082][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.888400][ T5776] 8021q: adding VLAN 0 to HW filter on device team0
[   81.912739][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.920173][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.943874][ T5775] 8021q: adding VLAN 0 to HW filter on device team0
[   81.953485][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.960763][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.988305][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.995503][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.038689][   T61] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.045879][   T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.130511][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.160653][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.167957][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.307090][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   82.413888][ T5791] Bluetooth: hci2: command tx timeout
[   82.512212][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.575240][ T5791] Bluetooth: hci0: command tx timeout
[   82.580822][ T5791] Bluetooth: hci1: command tx timeout
[   82.653925][ T5791] Bluetooth: hci3: command tx timeout
[   82.679135][ T5774] veth0_vlan: entered promiscuous mode
[   82.743948][ T5774] veth1_vlan: entered promiscuous mode
[   82.811863][ T5774] veth0_macvtap: entered promiscuous mode
[   82.832621][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.842950][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.863811][ T5774] veth1_macvtap: entered promiscuous mode
[   82.890351][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0
[   82.939562][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.972278][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.989610][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.998873][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.008568][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.017618][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.031860][ T5777] veth0_vlan: entered promiscuous mode
[   83.067886][ T5777] veth1_vlan: entered promiscuous mode
[   83.181321][ T5777] veth0_macvtap: entered promiscuous mode
[   83.198823][ T5775] veth0_vlan: entered promiscuous mode
[   83.225926][ T5776] veth0_vlan: entered promiscuous mode
[   83.232670][ T5777] veth1_macvtap: entered promiscuous mode
[   83.256512][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.273136][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.298302][ T5776] veth1_vlan: entered promiscuous mode
[   83.334446][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.346274][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.358209][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.369496][ T5775] veth1_vlan: entered promiscuous mode
[   83.389987][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.390654][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.409155][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.412812][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.421078][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.454252][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.463007][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.472633][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.481609][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.527208][ T5776] veth0_macvtap: entered promiscuous mode
[   83.562089][ T5776] veth1_macvtap: entered promiscuous mode
[   83.579047][ T5775] veth0_macvtap: entered promiscuous mode
[   83.614747][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.628379][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.638806][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.652132][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.669733][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.681678][ T5775] veth1_macvtap: entered promiscuous mode
[   83.720124][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.743249][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.755110][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.766600][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.780725][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.812345][ T5838] netlink: set zone limit has 8 unknown bytes
[   83.816476][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.834976][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.844816][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.856113][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.894870][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.905858][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.916628][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.928638][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.940582][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.952829][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.963556][    C0] hrtimer: interrupt took 46166 ns
[   83.968712][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.005748][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.023297][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.036433][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.053432][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.065784][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.077050][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.087523][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.100777][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.113357][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.189514][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.202656][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.213470][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.251072][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.314042][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.322030][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.476912][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.494597][ T5791] Bluetooth: hci2: command tx timeout
[   84.513183][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.633808][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.642548][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.655412][ T5791] Bluetooth: hci1: command tx timeout
[   84.655849][ T5782] Bluetooth: hci0: command tx timeout
[   84.734102][ T5782] Bluetooth: hci3: command tx timeout
[   84.758471][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.809805][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.940322][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.961135][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.408739][ T5854] warning: `syz.3.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   85.625188][ T5857] netlink: 'syz.0.1': attribute type 2 has an invalid length.
[   86.356306][ T5857] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[   86.397943][ T5857] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[   86.573979][ T5782] Bluetooth: hci2: command tx timeout
[   86.734545][ T5782] Bluetooth: hci0: command tx timeout
[   86.740186][ T5782] Bluetooth: hci1: command tx timeout
[   86.773353][ T5869] netlink: 'syz.1.8': attribute type 29 has an invalid length.
[   86.785536][ T5869] netlink: 'syz.1.8': attribute type 29 has an invalid length.
[   86.828149][ T5791] Bluetooth: hci3: command tx timeout
[   91.478773][ T5910] netlink: 'syz.0.17': attribute type 10 has an invalid length.
[   91.612833][ T5910] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[   91.620211][ T5910] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[   91.677370][ T5910] team0: Port device wlan1 added
[   91.789455][ T5913] netlink: 'syz.3.20': attribute type 2 has an invalid length.
[   91.847977][ T5911] netlink: 'syz.1.19': attribute type 10 has an invalid length.
[   92.155484][ T5908] Driver unsupported XDP return value 0 on prog  (id 24) dev N/A, expect packet loss!
[   92.283488][   T23] cfg80211: failed to load regulatory.db
[  104.269652][ T5911] team0: Port device wlan1 added
[  104.326518][ T5911] syz.1.19 (5911) used greatest stack depth: 18408 bytes left
[  104.602404][ T5932] Zero length message leads to an empty skb
[  104.779795][ T5935] netlink: 'syz.2.26': attribute type 29 has an invalid length.
[  104.827186][ T5935] netlink: 'syz.2.26': attribute type 29 has an invalid length.
[  104.890319][ T5935] netlink: 'syz.2.26': attribute type 29 has an invalid length.
[  105.706741][ T5949] netlink: 'syz.0.29': attribute type 10 has an invalid length.
[  105.894102][ T5956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'.
[  105.925851][ T5956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'.
[  105.976330][ T5951] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'.
[  105.992836][ T5954] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'.
[  106.002859][ T5950] netlink: 60 bytes leftover after parsing attributes in process `syz.0.29'.
[  106.964887][ T5967] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  107.017432][ T5967] netlink: 'syz.0.32': attribute type 9 has an invalid length.
[  107.055779][ T5967] netlink: 155304 bytes leftover after parsing attributes in process `syz.0.32'.
[  107.343740][ T5976] netlink: 'syz.3.35': attribute type 2 has an invalid length.
[  107.621429][ T5977] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  107.645770][ T5977] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  107.791758][ T5983] netlink: 'syz.1.37': attribute type 29 has an invalid length.
[  107.839310][ T5983] netlink: 'syz.1.37': attribute type 29 has an invalid length.
[  107.918430][ T5985] netlink: 'syz.1.37': attribute type 29 has an invalid length.
[  108.969955][ T6003] netlink: 'syz.0.43': attribute type 2 has an invalid length.
[  109.326728][ T6007] team0: Port device wlan1 added
[  109.573076][ T6014] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  109.596749][ T6014] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  110.544630][ T6023] validate_nla: 2 callbacks suppressed
[  110.544645][ T6023] netlink: 'syz.2.58': attribute type 2 has an invalid length.
[  111.710929][ T6040] netlink: 'syz.3.54': attribute type 29 has an invalid length.
[  111.725946][ T6040] netlink: 'syz.3.54': attribute type 29 has an invalid length.
[  111.744000][ T6040] netlink: 'syz.3.54': attribute type 29 has an invalid length.
[  112.919444][ T6058] netlink: 'syz.2.59': attribute type 2 has an invalid length.
[  113.165368][ T6058] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  113.196943][ T6058] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  113.593304][ T6060] netlink: 'syz.3.60': attribute type 10 has an invalid length.
[  113.619804][ T6060] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  113.643773][ T6060] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  113.694447][ T6060] team0: Port device wlan1 added
[  114.076904][ T6067] netlink: 'syz.2.62': attribute type 10 has an invalid length.
[  114.116514][ T6067] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  114.124531][ T6067] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  114.393122][ T6073] netlink: 'syz.1.64': attribute type 2 has an invalid length.
[  119.651377][ T6123] netlink: 'syz.3.79': attribute type 10 has an invalid length.
[  121.747986][ T6156] netlink: 'syz.3.91': attribute type 29 has an invalid length.
[  124.459425][ T6156] netlink: 'syz.3.91': attribute type 29 has an invalid length.
[  127.571414][ T6195] netlink: 'syz.2.104': attribute type 29 has an invalid length.
[  127.623011][ T6195] netlink: 'syz.2.104': attribute type 29 has an invalid length.
[  129.259788][ T6217] netlink: set zone limit has 8 unknown bytes
[  130.246149][ T6233] netlink: 'syz.0.115': attribute type 29 has an invalid length.
[  130.333139][ T6233] netlink: 'syz.0.115': attribute type 29 has an invalid length.
[  133.228132][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  133.245691][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  133.485680][ T6270] netlink: set zone limit has 8 unknown bytes
[  133.965975][ T6285] netlink: 'syz.2.133': attribute type 10 has an invalid length.
[  134.756287][ T6296] netlink: 'syz.2.142': attribute type 10 has an invalid length.
[  136.589027][ T6318] netlink: set zone limit has 8 unknown bytes
[  138.856524][ T6332] netlink: 'syz.2.146': attribute type 10 has an invalid length.
[  139.151154][ T6345] netlink: 154464 bytes leftover after parsing attributes in process `syz.1.153'.
[  139.167277][ T6345] netlink: 'syz.1.153': attribute type 153 has an invalid length.
[  139.180184][ T6345] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.153'.
[  139.721886][ T6361] netlink: 'syz.3.157': attribute type 10 has an invalid length.
[  139.733265][ T6361] macvlan0: entered promiscuous mode
[  139.739055][ T6361] macvlan0: entered allmulticast mode
[  139.761647][ T6361] veth1_vlan: entered allmulticast mode
[  139.799476][ T6361] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  139.918752][ T6367] netlink: 'syz.1.160': attribute type 10 has an invalid length.
[  139.930562][ T6367] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  139.941028][ T6367] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  140.061887][ T6369] syz.1.161 uses obsolete (PF_INET,SOCK_PACKET)
[  140.344145][ T6378] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  141.089586][ T6396] netlink: 'syz.3.169': attribute type 10 has an invalid length.
[  141.171491][ T6398] netlink: 'syz.1.171': attribute type 21 has an invalid length.
[  141.185874][ T6398] netlink: 156 bytes leftover after parsing attributes in process `syz.1.171'.
[  141.237487][ T6398] sit0: entered allmulticast mode
[  141.341199][ T6402] sit0: entered promiscuous mode
[  142.631152][ T6436] netlink: 'syz.0.181': attribute type 10 has an invalid length.
[  142.929088][ T6446] netlink: 'syz.2.184': attribute type 8 has an invalid length.
[  142.963757][ T6446] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.184'.
[  143.897468][ T6472] netlink: 'syz.1.194': attribute type 10 has an invalid length.
[  144.554322][ T6483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.198'.
[  144.831351][ T6498] netlink: 'syz.0.204': attribute type 10 has an invalid length.
[  145.672367][ T6512] À: port 1(vlan0) entered blocking state
[  145.717494][ T6512] À: port 1(vlan0) entered disabled state
[  145.744023][ T6512] vlan0: entered allmulticast mode
[  145.803003][ T6512] veth0_vlan: entered allmulticast mode
[  145.811960][ T6512] vlan0: entered promiscuous mode
[  146.050716][ T6518] netlink: 'syz.3.210': attribute type 29 has an invalid length.
[  146.061106][ T6517] netlink: 'syz.3.210': attribute type 29 has an invalid length.
[  146.078251][ T6518] netlink: 'syz.3.210': attribute type 29 has an invalid length.
[  146.175418][ T6520] netlink: 160 bytes leftover after parsing attributes in process `syz.1.211'.
[  146.287771][ T6520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  146.379102][ T6522] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.211'.
[  146.403669][ T6521] netlink: 'syz.3.210': attribute type 29 has an invalid length.
[  146.442140][ T6523] netlink: 'syz.3.210': attribute type 29 has an invalid length.
[  146.504270][ T6527] netlink: 'syz.3.210': attribute type 10 has an invalid length.
[  146.821678][ T6527] veth0_vlan: entered allmulticast mode
[  146.952588][ T6527] veth0_vlan: left promiscuous mode
[  146.986049][ T6527] veth0_vlan: entered promiscuous mode
[  147.011557][ T6527] team0: Device veth0_vlan failed to register rx_handler
[  147.076626][ T6531] netlink: 830 bytes leftover after parsing attributes in process `syz.3.210'.
[  147.103111][ T6517] netlink: 'syz.3.210': attribute type 29 has an invalid length.
[  147.112577][ T6530] netlink: 'syz.3.210': attribute type 29 has an invalid length.
[  147.131233][ T6534] netlink: 'syz.0.214': attribute type 10 has an invalid length.
[  147.212269][ T6544] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.216'.
[  147.791660][ T6554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.803583][ T6554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.813897][ T6554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.891390][ T6554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.901979][ T6554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.925684][ T6554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  149.091414][ T6575] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  151.603846][ T6604] netlink: 108 bytes leftover after parsing attributes in process `syz.0.236'.
[  152.180205][ T6615] validate_nla: 1 callbacks suppressed
[  152.180250][ T6615] netlink: 'syz.1.237': attribute type 10 has an invalid length.
[  154.661800][ T6658] netlink: 'syz.0.249': attribute type 10 has an invalid length.
[  157.212219][ T6695] netlink: 'syz.1.262': attribute type 10 has an invalid length.
[  158.060717][ T6709] netlink: 'syz.1.266': attribute type 10 has an invalid length.
[  158.118558][ T6709] netlink: 40 bytes leftover after parsing attributes in process `syz.1.266'.
[  158.190306][ T6709] ipvlan1: entered promiscuous mode
[  158.238723][ T6709] ipvlan1: entered allmulticast mode
[  158.269690][ T6709] bridge0: port 3(ipvlan1) entered blocking state
[  158.328807][ T6709] bridge0: port 3(ipvlan1) entered disabled state
[  158.361282][ T6709] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  159.655522][ T6734] netlink: 'syz.0.275': attribute type 10 has an invalid length.
[  160.889386][ T6752] netlink: 'syz.3.281': attribute type 2 has an invalid length.
[  161.481573][ T6761] netlink: 'syz.2.284': attribute type 10 has an invalid length.
[  162.239314][ T6774] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.288'.
[  163.182970][ T6789] netlink: 'syz.2.295': attribute type 10 has an invalid length.
[  163.289307][ T6792] syz.3.293[6792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  163.317324][ T6792] syz.3.293[6792] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  164.074386][ T6804] wg2: entered promiscuous mode
[  164.134582][ T6804] wg2: entered allmulticast mode
[  164.880744][ T6824] netlink: 'syz.2.302': attribute type 25 has an invalid length.
[  164.923737][ T6824] netlink: 'syz.2.302': attribute type 9 has an invalid length.
[  164.931686][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.302'.
[  165.057537][ T6823] delete_channel: no stack
[  165.765126][ T6845] FAULT_INJECTION: forcing a failure.
[  165.765126][ T6845] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  165.820260][ T6845] CPU: 1 PID: 6845 Comm: syz.0.307 Not tainted syzkaller #0
[  165.827643][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  165.837742][ T6845] Call Trace:
[  165.841056][ T6845]  <TASK>
[  165.844017][ T6845]  dump_stack_lvl+0x18c/0x250
[  165.848755][ T6845]  ? show_regs_print_info+0x20/0x20
[  165.854146][ T6845]  ? load_image+0x420/0x420
[  165.858803][ T6845]  ? __might_fault+0xaa/0x120
[  165.863530][ T6845]  ? __lock_acquire+0x7eb0/0x7eb0
[  165.868606][ T6845]  should_fail_ex+0x394/0x4c0
[  165.873338][ T6845]  _copy_from_user+0x2f/0xe0
[  165.878009][ T6845]  ___sys_sendmsg+0x1c7/0x360
[  165.882808][ T6845]  ? get_pid_task+0x20/0x1e0
[  165.887425][ T6845]  ? __sys_sendmsg+0x2b0/0x2b0
[  165.892223][ T6845]  ? __lock_acquire+0x7eb0/0x7eb0
[  165.897297][ T6845]  __se_sys_sendmsg+0x1d0/0x2c0
[  165.902177][ T6845]  ? __x64_sys_sendmsg+0x80/0x80
[  165.907147][ T6845]  ? lockdep_hardirqs_on+0x98/0x150
[  165.912363][ T6845]  do_syscall_64+0x55/0xb0
[  165.916829][ T6845]  ? clear_bhb_loop+0x40/0x90
[  165.921607][ T6845]  ? clear_bhb_loop+0x40/0x90
[  165.926302][ T6845]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.932228][ T6845] RIP: 0033:0x7fe236f9e1d9
[  165.936658][ T6845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.956367][ T6845] RSP: 002b:00007fe237e54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.964801][ T6845] RAX: ffffffffffffffda RBX: 00007fe237226090 RCX: 00007fe236f9e1d9
[  165.972869][ T6845] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b
[  165.980935][ T6845] RBP: 00007fe237e54090 R08: 0000000000000000 R09: 0000000000000000
[  165.988922][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.996903][ T6845] R13: 00007fe237226128 R14: 00007fe237226090 R15: 00007ffe0f0605a8
[  166.004934][ T6845]  </TASK>
[  166.037637][ T6842] netlink: 'syz.0.307': attribute type 10 has an invalid length.
[  166.225963][ T6854] netlink: 'syz.2.308': attribute type 10 has an invalid length.
[  166.465334][ T6859] netlink: 'syz.0.311': attribute type 10 has an invalid length.
[  166.595310][ T6864] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.312'.
[  168.315395][ T6891] FAULT_INJECTION: forcing a failure.
[  168.315395][ T6891] name failslab, interval 1, probability 0, space 0, times 1
[  168.358779][ T6891] CPU: 1 PID: 6891 Comm: syz.0.320 Not tainted syzkaller #0
[  168.366160][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  168.376361][ T6891] Call Trace:
[  168.379691][ T6891]  <TASK>
[  168.382663][ T6891]  dump_stack_lvl+0x18c/0x250
[  168.387409][ T6891]  ? show_regs_print_info+0x20/0x20
[  168.392671][ T6891]  ? load_image+0x420/0x420
[  168.397242][ T6891]  ? __might_sleep+0xe0/0xe0
[  168.401890][ T6891]  ? __lock_acquire+0x7eb0/0x7eb0
[  168.406975][ T6891]  should_fail_ex+0x394/0x4c0
[  168.411809][ T6891]  should_failslab+0x9/0x20
[  168.416424][ T6891]  slab_pre_alloc_hook+0x59/0x300
[  168.421509][ T6891]  ? __lock_acquire+0x7eb0/0x7eb0
[  168.426598][ T6891]  kmem_cache_alloc_node+0x5e/0x310
[  168.431955][ T6891]  ? __alloc_skb+0x103/0x2c0
[  168.436629][ T6891]  __alloc_skb+0x103/0x2c0
[  168.439396][ T6898] netlink: 'syz.0.320': attribute type 10 has an invalid length.
[  168.441088][ T6891]  netlink_sendmsg+0x66a/0xbf0
[  168.453730][ T6891]  ? netlink_getsockopt+0x590/0x590
[  168.459087][ T6891]  ? apparmor_socket_sendmsg+0x8e/0x330
[  168.464694][ T6891]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  168.470046][ T6891]  ? security_socket_sendmsg+0x80/0xa0
[  168.475567][ T6891]  ? netlink_getsockopt+0x590/0x590
[  168.480851][ T6891]  ____sys_sendmsg+0x61b/0x980
[  168.485887][ T6891]  ? __asan_memset+0x22/0x40
[  168.490550][ T6891]  ? __sys_sendmsg_sock+0x30/0x30
[  168.495647][ T6891]  ? __import_iovec+0x5f2/0x850
[  168.500588][ T6891]  ? import_iovec+0x73/0xa0
[  168.505165][ T6891]  ___sys_sendmsg+0x2a6/0x360
[  168.509913][ T6891]  ? get_pid_task+0x20/0x1e0
[  168.514568][ T6891]  ? __sys_sendmsg+0x2b0/0x2b0
[  168.519480][ T6891]  ? __lock_acquire+0x7eb0/0x7eb0
[  168.524565][ T6891]  __se_sys_sendmsg+0x1d0/0x2c0
[  168.529443][ T6891]  ? __x64_sys_sendmsg+0x80/0x80
[  168.534507][ T6891]  ? lockdep_hardirqs_on+0x98/0x150
[  168.539732][ T6891]  do_syscall_64+0x55/0xb0
[  168.544160][ T6891]  ? clear_bhb_loop+0x40/0x90
[  168.548852][ T6891]  ? clear_bhb_loop+0x40/0x90
[  168.553544][ T6891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  168.559462][ T6891] RIP: 0033:0x7fe236f9e1d9
[  168.563983][ T6891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  168.584041][ T6891] RSP: 002b:00007fe237e54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  168.592914][ T6891] RAX: ffffffffffffffda RBX: 00007fe237226090 RCX: 00007fe236f9e1d9
[  168.600903][ T6891] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  168.608982][ T6891] RBP: 00007fe237e54090 R08: 0000000000000000 R09: 0000000000000000
[  168.617061][ T6891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  168.625046][ T6891] R13: 00007fe237226128 R14: 00007fe237226090 R15: 00007ffe0f0605a8
[  168.633082][ T6891]  </TASK>
[  168.671232][ T6896] netlink: 'syz.1.322': attribute type 10 has an invalid length.
[  168.717171][ T6901] netlink: 'syz.2.323': attribute type 10 has an invalid length.
[  168.849751][ T6899] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.321'.
[  170.648066][ T6937] netlink: 'syz.3.332': attribute type 10 has an invalid length.
[  170.863105][ T6940] netlink: 'syz.0.335': attribute type 10 has an invalid length.
[  171.034038][ T6941] netlink: 'syz.2.334': attribute type 10 has an invalid length.
[  172.030544][ T6967] FAULT_INJECTION: forcing a failure.
[  172.030544][ T6967] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.085399][ T6973] netlink: 'syz.0.344': attribute type 10 has an invalid length.
[  172.093142][ T6967] CPU: 0 PID: 6967 Comm: syz.0.344 Not tainted syzkaller #0
[  172.100694][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  172.110800][ T6967] Call Trace:
[  172.114121][ T6967]  <TASK>
[  172.117086][ T6967]  dump_stack_lvl+0x18c/0x250
[  172.121812][ T6967]  ? show_regs_print_info+0x20/0x20
[  172.127051][ T6967]  ? load_image+0x420/0x420
[  172.131604][ T6967]  ? __might_fault+0xaa/0x120
[  172.136387][ T6967]  ? __lock_acquire+0x7eb0/0x7eb0
[  172.141428][ T6967]  ? perf_trace_preemptirq_template+0x269/0x330
[  172.147689][ T6967]  should_fail_ex+0x394/0x4c0
[  172.152403][ T6967]  _copy_from_iter+0x1cd/0x1290
[  172.157372][ T6967]  ? copyout_mc+0x70/0x70
[  172.161746][ T6967]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  172.167921][ T6967]  ? __check_object_size+0x4fc/0xa40
[  172.173330][ T6967]  netlink_sendmsg+0x76b/0xbf0
[  172.178127][ T6967]  ? netlink_getsockopt+0x590/0x590
[  172.183352][ T6967]  ? netlink_getsockopt+0x590/0x590
[  172.188600][ T6967]  ____sys_sendmsg+0x61b/0x980
[  172.193416][ T6967]  ? __asan_memset+0x22/0x40
[  172.198084][ T6967]  ? __sys_sendmsg_sock+0x30/0x30
[  172.203280][ T6967]  ? __import_iovec+0x5f2/0x850
[  172.208191][ T6967]  ? import_iovec+0x73/0xa0
[  172.212714][ T6967]  ___sys_sendmsg+0x2a6/0x360
[  172.217415][ T6967]  ? __sys_sendmsg+0x2b0/0x2b0
[  172.222238][ T6967]  __se_sys_sendmsg+0x1d0/0x2c0
[  172.227281][ T6967]  ? __x64_sys_sendmsg+0x80/0x80
[  172.232248][ T6967]  ? syscall_enter_from_user_mode+0x2e/0x80
[  172.238163][ T6967]  do_syscall_64+0x55/0xb0
[  172.242585][ T6967]  ? clear_bhb_loop+0x40/0x90
[  172.247285][ T6967]  ? clear_bhb_loop+0x40/0x90
[  172.251979][ T6967]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.257894][ T6967] RIP: 0033:0x7fe236f9e1d9
[  172.262323][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.281941][ T6967] RSP: 002b:00007fe237e75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.290367][ T6967] RAX: ffffffffffffffda RBX: 00007fe237225fa0 RCX: 00007fe236f9e1d9
[  172.298521][ T6967] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b
[  172.306502][ T6967] RBP: 00007fe237e75090 R08: 0000000000000000 R09: 0000000000000000
[  172.314491][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.322512][ T6967] R13: 00007fe237226038 R14: 00007fe237225fa0 R15: 00007ffe0f0605a8
[  172.330533][ T6967]  </TASK>
[  172.478649][ T6972] netlink: 'syz.3.345': attribute type 5 has an invalid length.
[  172.994240][ T6984] netlink: 'syz.0.348': attribute type 10 has an invalid length.
[  174.375814][ T7007] FAULT_INJECTION: forcing a failure.
[  174.375814][ T7007] name failslab, interval 1, probability 0, space 0, times 0
[  174.412662][ T7007] CPU: 1 PID: 7007 Comm: syz.0.358 Not tainted syzkaller #0
[  174.420094][ T7007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  174.430367][ T7007] Call Trace:
[  174.433716][ T7007]  <TASK>
[  174.436862][ T7007]  dump_stack_lvl+0x18c/0x250
[  174.441612][ T7007]  ? show_regs_print_info+0x20/0x20
[  174.446969][ T7007]  ? load_image+0x420/0x420
[  174.451820][ T7007]  ? verify_lock_unused+0x140/0x140
[  174.457090][ T7007]  should_fail_ex+0x394/0x4c0
[  174.461926][ T7007]  should_failslab+0x9/0x20
[  174.466486][ T7007]  slab_pre_alloc_hook+0x59/0x300
[  174.471658][ T7007]  kmem_cache_alloc+0x5a/0x2c0
[  174.476659][ T7007]  ? skb_clone+0x1eb/0x370
[  174.481154][ T7007]  skb_clone+0x1eb/0x370
[  174.485469][ T7007]  __netlink_deliver_tap+0x411/0x7f0
[  174.490932][ T7007]  ? netlink_deliver_tap+0x2e/0x1b0
[  174.496203][ T7007]  netlink_deliver_tap+0x19c/0x1b0
[  174.501382][ T7007]  netlink_unicast+0x77b/0x930
[  174.506310][ T7007]  netlink_sendmsg+0x8d0/0xbf0
[  174.511156][ T7007]  ? netlink_getsockopt+0x590/0x590
[  174.516432][ T7007]  ? apparmor_socket_sendmsg+0x8e/0x330
[  174.522057][ T7007]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  174.527431][ T7007]  ? security_socket_sendmsg+0x80/0xa0
[  174.532949][ T7007]  ? netlink_getsockopt+0x590/0x590
[  174.538216][ T7007]  ____sys_sendmsg+0x61b/0x980
[  174.543066][ T7007]  ? __asan_memset+0x22/0x40
[  174.547765][ T7007]  ? __sys_sendmsg_sock+0x30/0x30
[  174.552847][ T7007]  ? __import_iovec+0x5f2/0x850
[  174.557766][ T7007]  ? import_iovec+0x73/0xa0
[  174.562328][ T7007]  ___sys_sendmsg+0x2a6/0x360
[  174.567075][ T7007]  ? get_pid_task+0x20/0x1e0
[  174.571716][ T7007]  ? __sys_sendmsg+0x2b0/0x2b0
[  174.576690][ T7007]  ? __lock_acquire+0x7eb0/0x7eb0
[  174.581939][ T7007]  __se_sys_sendmsg+0x1d0/0x2c0
[  174.586913][ T7007]  ? __x64_sys_sendmsg+0x80/0x80
[  174.591904][ T7007]  ? lockdep_hardirqs_on+0x98/0x150
[  174.597265][ T7007]  do_syscall_64+0x55/0xb0
[  174.601722][ T7007]  ? clear_bhb_loop+0x40/0x90
[  174.606450][ T7007]  ? clear_bhb_loop+0x40/0x90
[  174.611157][ T7007]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  174.617082][ T7007] RIP: 0033:0x7fe236f9e1d9
[  174.621544][ T7007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  174.641202][ T7007] RSP: 002b:00007fe237e54028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  174.649727][ T7007] RAX: ffffffffffffffda RBX: 00007fe237226090 RCX: 00007fe236f9e1d9
[  174.657837][ T7007] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000a
[  174.658662][ T7014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.361'.
[  174.665920][ T7007] RBP: 00007fe237e54090 R08: 0000000000000000 R09: 0000000000000000
[  174.665952][ T7007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  174.665965][ T7007] R13: 00007fe237226128 R14: 00007fe237226090 R15: 00007ffe0f0605a8
[  174.665997][ T7007]  </TASK>
[  174.730974][ T7005] netlink: 'syz.0.358': attribute type 10 has an invalid length.
[  175.150464][ T7021] netlink: 'syz.2.364': attribute type 10 has an invalid length.
[  176.132157][ T7046] FAULT_INJECTION: forcing a failure.
[  176.132157][ T7046] name failslab, interval 1, probability 0, space 0, times 0
[  176.155718][ T7046] CPU: 1 PID: 7046 Comm: syz.3.371 Not tainted syzkaller #0
[  176.163081][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  176.173184][ T7046] Call Trace:
[  176.176592][ T7046]  <TASK>
[  176.179582][ T7046]  dump_stack_lvl+0x18c/0x250
[  176.184391][ T7046]  ? show_regs_print_info+0x20/0x20
[  176.189718][ T7046]  ? load_image+0x420/0x420
[  176.194322][ T7046]  ? __might_sleep+0xe0/0xe0
[  176.199130][ T7046]  ? __lock_acquire+0x7eb0/0x7eb0
[  176.204352][ T7046]  should_fail_ex+0x394/0x4c0
[  176.209078][ T7046]  should_failslab+0x9/0x20
[  176.213631][ T7046]  slab_pre_alloc_hook+0x59/0x300
[  176.218802][ T7046]  kmem_cache_alloc_node+0x5e/0x310
[  176.224071][ T7046]  ? __alloc_skb+0x103/0x2c0
[  176.228721][ T7046]  __alloc_skb+0x103/0x2c0
[  176.233196][ T7046]  netlink_dump+0x1ee/0xec0
[  176.237747][ T7046]  ? rcu_is_watching+0x15/0xb0
[  176.242551][ T7046]  ? __mutex_lock+0x30d/0xc80
[  176.247327][ T7046]  ? netlink_lookup+0x200/0x200
[  176.252243][ T7046]  ? __local_bh_enable_ip+0x13a/0x1c0
[  176.257751][ T7046]  ? verify_lock_unused+0x140/0x140
[  176.263010][ T7046]  ? netlink_lookup+0x30/0x200
[  176.268007][ T7046]  ? netlink_lookup+0x30/0x200
[  176.272840][ T7046]  __netlink_dump_start+0x57c/0x7a0
[  176.278181][ T7046]  packet_diag_handler_dump+0x1da/0x2a0
[  176.283814][ T7046]  ? sock_diag_lock_handler+0x19/0x280
[  176.289312][ T7046]  ? packet_sendmsg_spkt+0x1150/0x1150
[  176.294831][ T7046]  ? packet_diag_handler_dump+0x2a0/0x2a0
[  176.300623][ T7046]  ? sock_diag_lock_handler+0x19/0x280
[  176.306134][ T7046]  ? packet_sendmsg_spkt+0x1150/0x1150
[  176.311636][ T7046]  sock_diag_rcv_msg+0x3d3/0x5f0
[  176.316618][ T7046]  netlink_rcv_skb+0x235/0x4c0
[  176.321429][ T7046]  ? sock_diag_bind+0xb0/0xb0
[  176.326148][ T7046]  ? netlink_ack+0x1160/0x1160
[  176.330973][ T7046]  ? __lock_acquire+0x7eb0/0x7eb0
[  176.336050][ T7046]  ? netlink_deliver_tap+0x2e/0x1b0
[  176.341565][ T7046]  sock_diag_rcv+0x2a/0x40
[  176.346025][ T7046]  netlink_unicast+0x7b1/0x930
[  176.350845][ T7046]  netlink_sendmsg+0x8d0/0xbf0
[  176.355668][ T7046]  ? netlink_getsockopt+0x590/0x590
[  176.360908][ T7046]  ? apparmor_socket_sendmsg+0x8e/0x330
[  176.366493][ T7046]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  176.371817][ T7046]  ? security_socket_sendmsg+0x80/0xa0
[  176.377315][ T7046]  ? netlink_getsockopt+0x590/0x590
[  176.382556][ T7046]  ____sys_sendmsg+0x61b/0x980
[  176.387370][ T7046]  ? __asan_memset+0x22/0x40
[  176.392007][ T7046]  ? __sys_sendmsg_sock+0x30/0x30
[  176.397161][ T7046]  ? __import_iovec+0x5f2/0x850
[  176.402065][ T7046]  ? import_iovec+0x73/0xa0
[  176.406712][ T7046]  ___sys_sendmsg+0x2a6/0x360
[  176.411427][ T7046]  ? get_pid_task+0x20/0x1e0
[  176.416065][ T7046]  ? __sys_sendmsg+0x2b0/0x2b0
[  176.420900][ T7046]  ? __lock_acquire+0x7eb0/0x7eb0
[  176.425997][ T7046]  __se_sys_sendmsg+0x1d0/0x2c0
[  176.430898][ T7046]  ? __x64_sys_sendmsg+0x80/0x80
[  176.435894][ T7046]  ? lockdep_hardirqs_on+0x98/0x150
[  176.441147][ T7046]  do_syscall_64+0x55/0xb0
[  176.445592][ T7046]  ? clear_bhb_loop+0x40/0x90
[  176.450483][ T7046]  ? clear_bhb_loop+0x40/0x90
[  176.455283][ T7046]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  176.461232][ T7046] RIP: 0033:0x7fef9e79e1d9
[  176.465682][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  176.485421][ T7046] RSP: 002b:00007fef9c9d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  176.494053][ T7046] RAX: ffffffffffffffda RBX: 00007fef9ea26180 RCX: 00007fef9e79e1d9
[  176.502158][ T7046] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b
[  176.510165][ T7046] RBP: 00007fef9c9d5090 R08: 0000000000000000 R09: 0000000000000000
[  176.518269][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.526382][ T7046] R13: 00007fef9ea26218 R14: 00007fef9ea26180 R15: 00007fff57063d18
[  176.534494][ T7046]  </TASK>
[  176.567988][ T7046] netlink: 'syz.3.371': attribute type 10 has an invalid length.
[  178.507758][ T7067] netlink: 'syz.1.378': attribute type 10 has an invalid length.
[  179.326985][ T7077] FAULT_INJECTION: forcing a failure.
[  179.326985][ T7077] name failslab, interval 1, probability 0, space 0, times 0
[  179.352844][ T7077] CPU: 0 PID: 7077 Comm: syz.0.382 Not tainted syzkaller #0
[  179.360315][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  179.370507][ T7077] Call Trace:
[  179.373912][ T7077]  <TASK>
[  179.376887][ T7077]  dump_stack_lvl+0x18c/0x250
[  179.381895][ T7077]  ? show_regs_print_info+0x20/0x20
[  179.387260][ T7077]  ? load_image+0x420/0x420
[  179.391900][ T7077]  ? __might_sleep+0xe0/0xe0
[  179.396536][ T7077]  ? __lock_acquire+0x7eb0/0x7eb0
[  179.401618][ T7077]  should_fail_ex+0x394/0x4c0
[  179.406438][ T7077]  should_failslab+0x9/0x20
[  179.410981][ T7077]  slab_pre_alloc_hook+0x59/0x300
[  179.416075][ T7077]  ? kernfs_fop_write_iter+0x158/0x520
[  179.421577][ T7077]  ? kernfs_fop_write_iter+0x158/0x520
[  179.427082][ T7077]  __kmem_cache_alloc_node+0x53/0x250
[  179.432504][ T7077]  ? kernfs_fop_write_iter+0x158/0x520
[  179.438052][ T7077]  __kmalloc+0xa7/0x240
[  179.442272][ T7077]  kernfs_fop_write_iter+0x158/0x520
[  179.447645][ T7077]  vfs_write+0x474/0x9a0
[  179.451953][ T7077]  ? file_end_write+0x250/0x250
[  179.456953][ T7077]  ? __fget_files+0x3fc/0x460
[  179.461715][ T7077]  ? __fdget_pos+0x2a3/0x330
[  179.466437][ T7077]  ? ksys_write+0x74/0x260
[  179.471516][ T7077]  ksys_write+0x151/0x260
[  179.475903][ T7077]  ? __ia32_sys_read+0x90/0x90
[  179.480724][ T7077]  ? syscall_enter_from_user_mode+0x2e/0x80
[  179.486676][ T7077]  do_syscall_64+0x55/0xb0
[  179.491143][ T7077]  ? clear_bhb_loop+0x40/0x90
[  179.495869][ T7077]  ? clear_bhb_loop+0x40/0x90
[  179.500589][ T7077]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  179.506652][ T7077] RIP: 0033:0x7fe236f9e1d9
[  179.511136][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  179.530892][ T7077] RSP: 002b:00007fe237e75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  179.539380][ T7077] RAX: ffffffffffffffda RBX: 00007fe237225fa0 RCX: 00007fe236f9e1d9
[  179.547479][ T7077] RDX: 0000000000000031 RSI: 00002000000002c0 RDI: 0000000000000007
[  179.555576][ T7077] RBP: 00007fe237e75090 R08: 0000000000000000 R09: 0000000000000000
[  179.563762][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  179.571769][ T7077] R13: 00007fe237226038 R14: 00007fe237225fa0 R15: 00007ffe0f0605a8
[  179.579890][ T7077]  </TASK>
[  180.846328][ T7100] netlink: 'syz.2.388': attribute type 10 has an invalid length.
[  181.225759][ T7104] netlink: 'syz.0.390': attribute type 10 has an invalid length.
[  181.428630][ T7108] netlink: 'syz.2.392': attribute type 10 has an invalid length.
[  182.656319][ T7121] netlink: 'syz.3.395': attribute type 21 has an invalid length.
[  182.685509][ T7121] netlink: 156 bytes leftover after parsing attributes in process `syz.3.395'.
[  183.386952][ T7124] sit0: entered allmulticast mode
[  183.508987][ T7126] sit0: entered promiscuous mode
[  185.749214][ T7146] netlink: 'syz.0.402': attribute type 16 has an invalid length.
[  185.767080][ T7146] netlink: 'syz.0.402': attribute type 25 has an invalid length.
[  185.788411][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.402'.
[  186.155731][ T7152] netlink: 'syz.2.404': attribute type 10 has an invalid length.
[  187.659984][ T7189] netlink: 'syz.2.413': attribute type 21 has an invalid length.
[  187.668888][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz.2.413'.
[  187.680953][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'.
[  188.384046][ T7203] netlink: 'syz.0.418': attribute type 21 has an invalid length.
[  188.415781][ T7203] netlink: 156 bytes leftover after parsing attributes in process `syz.0.418'.
[  188.449092][ T7208] netlink: 'syz.1.422': attribute type 21 has an invalid length.
[  188.485401][ T7203] sit0: entered allmulticast mode
[  188.597350][ T7206] sit0: entered promiscuous mode
[  189.288120][ T7225] netlink: 'syz.1.428': attribute type 10 has an invalid length.
[  190.047246][ T7225] team0 (unregistering): Port device team_slave_0 removed
[  190.110694][ T7225] team0 (unregistering): Port device team_slave_1 removed
[  190.146624][ T7225] team0 (unregistering): Port device wlan1 removed
[  190.474076][ T7247] netlink: 'syz.3.431': attribute type 46 has an invalid length.
[  190.482737][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.431'.
[  193.762504][ T7269] netlink: 'syz.3.436': attribute type 10 has an invalid length.
[  193.784526][ T7269] netlink: 40 bytes leftover after parsing attributes in process `syz.3.436'.
[  193.812509][ T7269] ipvlan1: entered promiscuous mode
[  193.819639][ T7269] ipvlan1: entered allmulticast mode
[  194.020694][ T7269] bridge0: port 3(ipvlan1) entered blocking state
[  194.034964][ T7269] bridge0: port 3(ipvlan1) entered disabled state
[  194.124715][ T7269] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  194.162666][ T7272] netlink: 'syz.2.437': attribute type 10 has an invalid length.
[  194.186086][ T7272] netlink: 40 bytes leftover after parsing attributes in process `syz.2.437'.
[  194.202887][ T7272] veth0_vlan: entered allmulticast mode
[  194.210185][ T7272] bridge0: port 3(veth0_vlan) entered blocking state
[  194.226357][ T7272] bridge0: port 3(veth0_vlan) entered disabled state
[  194.241778][ T7272] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  194.660769][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  194.672054][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  195.059373][ T7286] netlink: 'syz.2.440': attribute type 10 has an invalid length.
[  195.327949][ T7293] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.443'.
[  195.369976][ T7293] tun0: tun_chr_ioctl cmd 1074025678
[  195.375893][ T7293] tun0: group set to 0
[  195.576590][ T7295] netlink: 'syz.3.443': attribute type 11 has an invalid length.
[  195.614279][ T7295] netlink: 126292 bytes leftover after parsing attributes in process `syz.3.443'.
[  196.846000][ T7299] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.444'.
[  197.338108][ T7316] netlink: 10 bytes leftover after parsing attributes in process `syz.2.449'.
[  197.369855][ T7319] netlink: 'syz.1.450': attribute type 21 has an invalid length.
[  197.395691][ T7319] netlink: 'syz.1.450': attribute type 12 has an invalid length.
[  197.409272][ T7319] netlink: 'syz.1.450': attribute type 13 has an invalid length.
[  197.420573][ T7319] netlink: 'syz.1.450': attribute type 14 has an invalid length.
[  197.428853][ T7319] netlink: 'syz.1.450': attribute type 15 has an invalid length.
[  197.437208][ T7319] netlink: 'syz.1.450': attribute type 16 has an invalid length.
[  197.445174][ T7319] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.450'.
[  197.895406][ T7331] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.454'.
[  197.926439][ T7331] tun0: tun_chr_ioctl cmd 1074025678
[  197.953894][ T7331] tun0: group set to 0
[  198.046782][ T7336] netlink: 126292 bytes leftover after parsing attributes in process `syz.0.454'.
[  198.104064][ T7339] netlink: 156 bytes leftover after parsing attributes in process `syz.1.456'.
[  201.432835][ T7361] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  201.441166][ T7361] syzkaller0: entered promiscuous mode
[  201.447318][ T7361] syzkaller0: entered allmulticast mode
[  201.670295][ T7366] validate_nla: 3 callbacks suppressed
[  201.670336][ T7366] netlink: 'syz.0.464': attribute type 10 has an invalid length.
[  201.904643][ T7374] netlink: 'syz.3.466': attribute type 10 has an invalid length.
[  201.933825][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  201.941893][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  201.949956][ T5791] Bluetooth: hci0: command 0x0406 tx timeout
[  201.949986][ T5782] Bluetooth: hci1: command 0x0406 tx timeout
[  201.956120][ T5791] Bluetooth: hci3: command 0x0406 tx timeout
[  201.956178][ T5791] Bluetooth: hci2: command 0x0406 tx timeout
[  201.956498][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  201.982995][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  201.991231][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  202.010152][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  202.039124][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  202.063073][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  202.063952][ T7383] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.469'.
[  202.086442][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  202.102736][ T7374] netlink: 'syz.3.466': attribute type 11 has an invalid length.
[  202.120906][ T7374] netlink: 'syz.3.466': attribute type 4 has an invalid length.
[  202.130201][ T7374] netlink: 'syz.3.466': attribute type 5 has an invalid length.
[  202.139126][ T7374] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.466'.
[  202.172827][ T7383] tun0: tun_chr_ioctl cmd 1074025678
[  202.180239][ T7383] tun0: group set to 0
[  202.268173][ T7387] netlink: 'syz.2.469': attribute type 11 has an invalid length.
[  202.297619][ T7387] netlink: 126292 bytes leftover after parsing attributes in process `syz.2.469'.
[  202.617060][ T7393] netlink: 'syz.3.473': attribute type 7 has an invalid length.
[  205.850920][ T7408] netlink: 'syz.0.477': attribute type 10 has an invalid length.
[  206.106377][ T7417] netlink: 'syz.3.480': attribute type 9 has an invalid length.
[  206.153648][ T7417] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.480'.
[  206.499896][ T7429] : port 1(bond0) entered blocking state
[  206.530725][ T7429] : port 1(bond0) entered disabled state
[  206.560832][ T7429] bond0: entered allmulticast mode
[  206.566504][ T7429] bond_slave_0: entered allmulticast mode
[  206.572486][ T7429] bond_slave_1: entered allmulticast mode
[  206.581605][ T7429] bond0: entered promiscuous mode
[  206.591750][ T7429] bond_slave_0: entered promiscuous mode
[  206.599356][ T7429] bond_slave_1: entered promiscuous mode
[  206.858494][ T7439] netlink: 'syz.0.487': attribute type 10 has an invalid length.
[  207.764616][ T7453] netlink: 'syz.2.491': attribute type 10 has an invalid length.
[  207.789890][ T7453] netlink: 40 bytes leftover after parsing attributes in process `syz.2.491'.
[  207.843802][ T7453] bridge0: port 3(dummy0) entered blocking state
[  207.864624][ T7453] bridge0: port 3(dummy0) entered disabled state
[  207.889304][ T7453] dummy0: entered allmulticast mode
[  207.911751][ T7453] dummy0: entered promiscuous mode
[  207.925613][ T7453] bridge0: port 3(dummy0) entered blocking state
[  207.933867][ T7453] bridge0: port 3(dummy0) entered forwarding state
[  207.961655][ T7454] netlink: 164 bytes leftover after parsing attributes in process `syz.2.491'.
[  208.292746][ T7468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.495'.
[  208.827014][ T7485] netlink: 'syz.1.497': attribute type 10 has an invalid length.
[  208.841760][ T7485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.497'.
[  208.880997][ T7485] bridge0: port 3(ipvlan1) entered blocking state
[  208.909502][ T7485] bridge0: port 3(ipvlan1) entered disabled state
[  208.985221][ T7485] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  209.011659][ T7484] netlink: 'syz.0.500': attribute type 10 has an invalid length.
[  209.526446][ T7507] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.505'.
[  212.093019][ T7526] netlink: 'syz.3.511': attribute type 10 has an invalid length.
[  212.101083][ T7526] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.511'.
[  212.329807][ T7544] netlink: 'syz.3.512': attribute type 10 has an invalid length.
[  212.352624][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.512'.
[  212.433968][ T7544] bridge0: port 3(ipvlan1) entered blocking state
[  212.451433][ T7544] bridge0: port 3(ipvlan1) entered disabled state
[  212.551651][ T7544] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  213.750076][ T7582] netlink: 142180 bytes leftover after parsing attributes in process `syz.1.524'.
[  213.797120][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.524'.
[  214.194460][ T7593] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.528'.
[  214.214482][ T7593] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes.
[  214.480556][ T7601] netlink: 'syz.3.532': attribute type 10 has an invalid length.
[  214.566974][ T7604] netlink: 'syz.2.533': attribute type 10 has an invalid length.
[  214.591134][ T7604] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.533'.
[  214.996187][ T7614] netlink: 'syz.2.536': attribute type 46 has an invalid length.
[  215.029807][ T7614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.536'.
[  215.068734][ T7615] netlink: 830 bytes leftover after parsing attributes in process `syz.0.537'.
[  215.305934][ T7614] netlink: 188 bytes leftover after parsing attributes in process `syz.2.536'.
[  215.389267][ T7621] netlink: 'syz.2.536': attribute type 46 has an invalid length.
[  215.478514][ T7621] netlink: 36 bytes leftover after parsing attributes in process `syz.2.536'.
[  215.619599][ T7626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.539'.
[  215.658811][ T7626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.539'.
[  215.915700][ T7633] can: request_module (can-proto-5) failed.
[  220.064988][ T7702] netlink: 'syz.3.558': attribute type 10 has an invalid length.
[  221.300423][ T7723] netlink: 'syz.3.565': attribute type 4 has an invalid length.
[  221.384905][ T7723] __nla_validate_parse: 64 callbacks suppressed
[  221.384925][ T7723] netlink: 152 bytes leftover after parsing attributes in process `syz.3.565'.
[  221.523289][ T7723] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  221.568294][ T7725] netlink: 'syz.2.566': attribute type 39 has an invalid length.
[  222.920874][ T7736] netlink: 'syz.0.569': attribute type 10 has an invalid length.
[  223.547228][ T7760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.576'.
[  223.989683][ T7769] netlink: 'syz.0.580': attribute type 10 has an invalid length.
[  224.577592][ T7781] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.584'.
[  225.461151][ T7800] netlink: 'syz.0.591': attribute type 10 has an invalid length.
[  225.940202][ T7816] netlink: 'syz.2.595': attribute type 10 has an invalid length.
[  226.211704][ T7816] team0: Device wg1 is of different type
[  227.285259][ T7839] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.604'.
[  227.300813][ T7839] netlink: zone id is out of range
[  227.311125][ T7839] netlink: zone id is out of range
[  227.320907][ T7839] netlink: zone id is out of range
[  227.338468][ T7839] netlink: zone id is out of range
[  227.346865][ T7839] netlink: zone id is out of range
[  227.352195][ T7839] netlink: zone id is out of range
[  227.360072][ T7839] netlink: zone id is out of range
[  227.370689][ T7843] syz.3.604[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  227.377498][ T7843] syz.3.604[7843] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  227.383516][ T7839] netlink: zone id is out of range
[  227.418208][ T7845] netlink: 'syz.1.603': attribute type 41 has an invalid length.
[  227.433773][ T7841] netlink: 'syz.1.603': attribute type 41 has an invalid length.
[  227.437095][ T7845] netlink: 'syz.1.603': attribute type 41 has an invalid length.
[  227.442158][ T7839] netlink: zone id is out of range
[  227.455656][ T7847] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.603'.
[  227.474753][ T7839] netlink: zone id is out of range
[  231.843843][ T7888] netlink: 'syz.2.616': attribute type 29 has an invalid length.
[  232.169297][ T7898] netlink: 'syz.1.617': attribute type 33 has an invalid length.
[  232.270491][ T7888] netlink: 'syz.2.616': attribute type 29 has an invalid length.
[  232.283605][ T7898] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.617'.
[  232.308488][ T7896] netlink: 128 bytes leftover after parsing attributes in process `syz.1.617'.
[  232.343976][ T7899] netlink: 'syz.1.617': attribute type 33 has an invalid length.
[  232.367569][ T7899] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.617'.
[  232.377931][ T7896] net_ratelimit: 238 callbacks suppressed
[  232.377946][ T7896] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.509384][ T7892] -1: renamed from syzkaller0
[  232.826413][ T7907] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.618'.
[  233.129648][ T7908] netlink: 'syz.1.619': attribute type 10 has an invalid length.
[  233.415479][ T7908] veth1_macvtap: left promiscuous mode
[  233.685760][ T7922] netlink: 'syz.3.622': attribute type 16 has an invalid length.
[  233.733407][ T7918] netlink: 'syz.3.622': attribute type 10 has an invalid length.
[  233.763658][ T7922] netlink: 132 bytes leftover after parsing attributes in process `syz.3.622'.
[  233.790454][ T7918] veth1_vlan: left allmulticast mode
[  233.880825][ T7933] raw_sendmsg: syz.0.626 forgot to set AF_INET. Fix it!
[  233.892848][ T7918] bond0: (slave macvlan0): Releasing backup interface
[  233.927925][ T7918] macvlan0: left promiscuous mode
[  233.935015][ T7918] macvlan0: left allmulticast mode
[  233.940773][ T7936] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  233.940813][ T7936] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.627'.
[  234.016709][ T7918] team0: Port device macvlan0 added
[  234.695758][ T7960] netlink: 'syz.1.632': attribute type 21 has an invalid length.
[  234.708773][ T7960] netlink: 'syz.1.632': attribute type 13 has an invalid length.
[  234.723700][ T7960] netlink: 6188 bytes leftover after parsing attributes in process `syz.1.632'.
[  234.757170][ T7959] netlink: 132 bytes leftover after parsing attributes in process `syz.0.634'.
[  234.850878][ T7959] netlink: 28 bytes leftover after parsing attributes in process `syz.0.634'.
[  236.281315][ T7980] syzkaller0: entered promiscuous mode
[  236.290551][ T7980] syzkaller0: entered allmulticast mode
[  237.407160][ T5084] Bluetooth: hci0: unknown advertising packet type: 0x24
[  237.407243][ T5084] Bluetooth: hci0: Malformed LE Event: 0x02
[  238.291835][ T8017] validate_nla: 2 callbacks suppressed
[  238.291854][ T8017] netlink: 'syz.2.647': attribute type 21 has an invalid length.
[  238.305884][ T8017] IPv6: NLM_F_CREATE should be specified when creating new route
[  238.314502][ T8017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.322174][ T8017] IPv6: NLM_F_CREATE should be set when creating new route
[  238.329633][ T8017] IPv6: NLM_F_CREATE should be set when creating new route
[  238.337020][ T8017] IPv6: NLM_F_CREATE should be set when creating new route
[  238.852847][ T8020] netlink: 'syz.1.649': attribute type 17 has an invalid length.
[  238.862909][ T8020] netlink: 'syz.1.649': attribute type 16 has an invalid length.
[  238.871263][ T8020] netlink: 152 bytes leftover after parsing attributes in process `syz.1.649'.
[  239.162223][ T8032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.650'.
[  239.173083][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'.
[  239.208106][ T8029] netlink: 'syz.2.650': attribute type 33 has an invalid length.
[  239.222905][ T8029] netlink: 152 bytes leftover after parsing attributes in process `syz.2.650'.
[  239.236227][ T8029] `: renamed from ip6tnl0 (while UP)
[  239.249731][ T8029] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check.
[  239.404820][ T8034] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.652'.
[  239.428408][ T8038] netlink: 152 bytes leftover after parsing attributes in process `syz.0.654'.
[  239.448625][ T8038] netlink: 6 bytes leftover after parsing attributes in process `syz.0.654'.
[  239.552825][ T8042] netlink: 152 bytes leftover after parsing attributes in process `syz.0.654'.
[  239.615700][ T8042] netlink: 6 bytes leftover after parsing attributes in process `syz.0.654'.
[  240.879784][ T8061] netlink: 'syz.0.656': attribute type 10 has an invalid length.
[  241.371025][ T8066] netlink: 'syz.1.660': attribute type 3 has an invalid length.
[  241.446467][ T8066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.660'.
[  243.022640][ T8093] netlink: 'syz.1.669': attribute type 10 has an invalid length.
[  244.408390][ T8131] netlink: 'syz.3.680': attribute type 1 has an invalid length.
[  244.420979][ T8131] __nla_validate_parse: 3 callbacks suppressed
[  244.420998][ T8131] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.680'.
[  244.538083][ T8129] netlink: 'syz.2.679': attribute type 21 has an invalid length.
[  244.569305][ T8129] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.679'.
[  246.673912][ T8174] netlink: 'syz.1.691': attribute type 21 has an invalid length.
[  246.684705][ T8174] netlink: 156 bytes leftover after parsing attributes in process `syz.1.691'.
[  246.912496][ T8174] bridge0: port 3(syz_tun) entered blocking state
[  246.922421][ T8174] bridge0: port 3(syz_tun) entered disabled state
[  246.932443][ T8174] syz_tun: entered allmulticast mode
[  246.982624][ T8174] syz_tun: entered promiscuous mode
[  247.008451][ T8174] bridge0: port 3(syz_tun) entered blocking state
[  247.016205][ T8174] bridge0: port 3(syz_tun) entered forwarding state
[  247.037761][ T8182] netlink: 'syz.3.693': attribute type 10 has an invalid length.
[  247.052625][ T8182] veth1_macvtap: left promiscuous mode
[  251.979524][ T8223] netlink: 'syz.0.703': attribute type 4 has an invalid length.
[  256.097934][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  256.104847][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  256.549348][ T8308] netlink: 'syz.1.724': attribute type 1 has an invalid length.
[  256.563905][ T8307] netlink: 'syz.1.724': attribute type 1 has an invalid length.
[  256.669408][ T8303] sit0: left promiscuous mode
[  256.824976][ T8304] sit0: entered promiscuous mode
[  259.459139][ T8343] netlink: 188 bytes leftover after parsing attributes in process `syz.0.734'.
[  266.270416][ T8406] netlink: 6 bytes leftover after parsing attributes in process `syz.0.749'.
[  268.053819][ T8435] netlink: 'syz.1.756': attribute type 10 has an invalid length.
[  269.726363][ T8463] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.764'.
[  270.085482][ T8463] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.764'.
[  270.210990][ T8468] netlink: 'syz.2.765': attribute type 2 has an invalid length.
[  270.223728][ T8468] netlink: 'syz.2.765': attribute type 1 has an invalid length.
[  270.243760][ T8468] netlink: 9 bytes leftover after parsing attributes in process `syz.2.765'.
[  271.073300][ T8478] netlink: 'syz.3.767': attribute type 8 has an invalid length.
[  271.111817][ T8478] netlink: 'syz.3.767': attribute type 6 has an invalid length.
[  271.143321][ T8478] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.767'.
[  273.985647][ T8490] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.770'.
[  274.825812][ T8505] netlink: 132 bytes leftover after parsing attributes in process `syz.0.775'.
[  274.903586][ T8509] netlink: 'syz.1.776': attribute type 1 has an invalid length.
[  274.911313][ T8509] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.776'.
[  275.459411][ T8521] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.779'.
[  275.598552][ T8521] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.779'.
[  276.674298][ T8541] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.785'.
[  277.409449][ T8558] sctp: [Deprecated]: syz.3.791 (pid 8558) Use of int in maxseg socket option.
[  277.409449][ T8558] Use struct sctp_assoc_value instead
[  277.525191][ T8558] netlink: 112 bytes leftover after parsing attributes in process `syz.3.791'.
[  277.848067][ T8572] netlink: 'syz.2.795': attribute type 9 has an invalid length.
[  277.866570][ T8572] netlink: 399 bytes leftover after parsing attributes in process `syz.2.795'.
[  277.991408][ T8572] netlink: 'syz.2.795': attribute type 4 has an invalid length.
[  278.023789][ T8572] netlink: 152 bytes leftover after parsing attributes in process `syz.2.795'.
[  278.445062][ T8572] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  279.651827][ T8589] netlink: 'syz.0.801': attribute type 10 has an invalid length.
[  279.665258][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.673626][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.729519][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.737034][ T8589] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.745836][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.753092][ T8589] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.864527][ T8589] team0: Port device bridge0 added
[  280.243187][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.346214][ T8604] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.806'.
[  280.363985][ T8604] netlink: 'syz.2.806': attribute type 1 has an invalid length.
[  280.371823][ T8604] netlink: 'syz.2.806': attribute type 2 has an invalid length.
[  280.400838][ T8604] netlink: 'syz.2.806': attribute type 3 has an invalid length.
[  280.417389][ T8596] bridge_slave_1 (unregistering): left allmulticast mode
[  280.433987][ T8604] netlink: 'syz.2.806': attribute type 4 has an invalid length.
[  280.449851][ T8596] bridge_slave_1 (unregistering): left promiscuous mode
[  280.463908][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.878440][ T8620] netlink: 'syz.3.812': attribute type 9 has an invalid length.
[  280.893877][ T8620] netlink: 399 bytes leftover after parsing attributes in process `syz.3.812'.
[  280.989956][ T8616] netlink: 'syz.1.811': attribute type 10 has an invalid length.
[  281.063641][ T8616] netlink: 40 bytes leftover after parsing attributes in process `syz.1.811'.
[  281.116634][ T8616] bridge0: port 4(dummy0) entered blocking state
[  281.136625][ T8616] bridge0: port 4(dummy0) entered disabled state
[  281.184206][ T8616] dummy0: entered allmulticast mode
[  281.197577][ T8616] dummy0: entered promiscuous mode
[  281.252732][ T8620] netlink: 'syz.3.812': attribute type 4 has an invalid length.
[  281.270339][ T8620] netlink: 152 bytes leftover after parsing attributes in process `syz.3.812'.
[  281.290949][ T8620] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  281.341509][ T8618] netlink: 164 bytes leftover after parsing attributes in process `syz.1.811'.
[  281.796233][ T8631] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.814'.
[  282.194005][ T8635] netlink: 22 bytes leftover after parsing attributes in process `syz.3.817'.
[  283.457825][ T8647] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.819'.
[  283.884076][ T8647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  283.891612][ T8647] IPv6: NLM_F_CREATE should be set when creating new route
[  283.900296][ T8647] IPv6: NLM_F_CREATE should be set when creating new route
[  283.908037][ T8647] IPv6: NLM_F_CREATE should be set when creating new route
[  286.926281][ T8691] netlink: 'syz.1.827': attribute type 6 has an invalid length.
[  286.941993][ T8691] netlink: 164 bytes leftover after parsing attributes in process `syz.1.827'.
[  287.431987][ T8706] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.832'.
[  287.452781][ T8708] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.832'.
[  288.009022][ T8722] netlink: 14 bytes leftover after parsing attributes in process `syz.3.838'.
[  289.646365][ T8752] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.845'.
[  290.094429][ T8764] netlink: 'syz.2.846': attribute type 33 has an invalid length.
[  290.151535][ T8764] netlink: 160 bytes leftover after parsing attributes in process `syz.2.846'.
[  290.161871][ T8763] netlink: 'syz.3.849': attribute type 10 has an invalid length.
[  290.447368][ T8763] team0: Port device geneve1 added
[  294.334194][ T8813] netlink: 'syz.1.860': attribute type 10 has an invalid length.
[  294.355827][ T8811] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.861'.
[  294.372973][ T8813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.860'.
[  294.399024][ T8813] bridge0: port 5(veth0_vlan) entered blocking state
[  294.473804][ T8813] bridge0: port 5(veth0_vlan) entered disabled state
[  294.496682][ T8813] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  294.938597][ T8825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'.
[  294.977343][ T8825] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'.
[  295.008611][ T8824] netlink: 60 bytes leftover after parsing attributes in process `syz.2.865'.
[  295.369544][ T8837] netlink: 'syz.2.868': attribute type 29 has an invalid length.
[  295.458221][ T8834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.868'.
[  295.534650][ T8837] netlink: 'syz.2.868': attribute type 29 has an invalid length.
[  295.638831][ T8838] netlink: 'syz.2.868': attribute type 29 has an invalid length.
[  295.692870][ T8840] netlink: 'syz.2.868': attribute type 29 has an invalid length.
[  295.708708][ T8841] netlink: 'syz.2.868': attribute type 29 has an invalid length.
[  300.530773][ T8899] netlink: 'syz.3.883': attribute type 4 has an invalid length.
[  300.580227][ T8899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.883'.
[  302.284278][ T8915] netlink: 'syz.2.888': attribute type 39 has an invalid length.
[  303.556374][ T5084] Bluetooth: hci3: unexpected event 0x07 length: 151 < 255
[  305.968219][ T8972] netlink: 'syz.2.907': attribute type 10 has an invalid length.
[  305.988544][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.907'.
[  306.000089][ T8972] team0: entered promiscuous mode
[  306.010381][ T8972] team_slave_0: entered promiscuous mode
[  306.029202][ T8972] team_slave_1: entered promiscuous mode
[  306.114828][ T8972] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  306.190066][ T8972] team0: entered allmulticast mode
[  306.303738][ T8972] team_slave_0: entered allmulticast mode
[  306.324872][ T8972] team_slave_1: entered allmulticast mode
[  306.343541][ T8972] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  306.367032][ T8972] bridge0: port 4(team0) entered blocking state
[  306.379739][ T8972] bridge0: port 4(team0) entered disabled state
[  306.408914][ T8972] bridge0: port 4(team0) entered blocking state
[  306.415653][ T8972] bridge0: port 4(team0) entered forwarding state
[  306.499509][ T8982] netlink: 'syz.3.910': attribute type 2 has an invalid length.
[  306.511052][ T8982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.910'.
[  306.556783][ T8983] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.910'.
[  306.592622][ T8988] netlink: 2 bytes leftover after parsing attributes in process `syz.0.911'.
[  307.524576][ T9003] : renamed from bond0 (while UP)
[  307.713191][ T9015] netlink: 'syz.3.918': attribute type 29 has an invalid length.
[  307.725763][ T9015] netlink: 'syz.3.918': attribute type 29 has an invalid length.
[  309.956790][ T9067] netlink: 'syz.0.932': attribute type 21 has an invalid length.
[  309.982206][ T9067] netlink: 156 bytes leftover after parsing attributes in process `syz.0.932'.
[  310.006890][ T9064] netlink: 'syz.2.931': attribute type 3 has an invalid length.
[  310.020880][ T9064] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.931'.
[  312.044355][ T9104] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  312.842314][ T9134] netlink: 128 bytes leftover after parsing attributes in process `syz.1.951'.
[  312.972229][ T9134] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.185771][ T9166] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  314.224077][ T9166] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  314.424187][ T9168] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  314.699408][ T9187] netlink: 'syz.2.963': attribute type 29 has an invalid length.
[  314.936728][ T9192] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.966'.
[  315.070234][ T9192] netlink: 'syz.1.966': attribute type 29 has an invalid length.
[  315.090219][ T9192] netlink: 'syz.1.966': attribute type 29 has an invalid length.
[  315.274284][ T9206] netlink: 'syz.1.966': attribute type 39 has an invalid length.
[  316.789310][ T9221] netlink: 132 bytes leftover after parsing attributes in process `syz.0.975'.
[  317.209115][ T9233] netlink: 'syz.2.980': attribute type 10 has an invalid length.
[  317.285472][ T9233] bridge0: port 4(team0) entered disabled state
[  317.406909][ T9233] bridge0: port 4(team0) entered disabled state
[  317.450324][ T9233] team_slave_0: left promiscuous mode
[  317.470029][ T9233] team_slave_0: left allmulticast mode
[  317.522956][ T9233] team0 (unregistering): Port device team_slave_0 removed
[  317.554116][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  317.560556][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  317.598453][ T9233] team_slave_1: left promiscuous mode
[  317.615179][ T9233] team_slave_1: left allmulticast mode
[  317.695885][ T9233] team0 (unregistering): Port device team_slave_1 removed
[  317.752726][ T9233] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  317.763997][ T9233] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  317.789673][ T9233] team0 (unregistering): Port device wlan1 removed
[  318.301085][ T9253] netlink: 'syz.2.987': attribute type 21 has an invalid length.
[  318.324561][ T9253] netlink: 128 bytes leftover after parsing attributes in process `syz.2.987'.
[  318.345970][ T9256] netlink: 'syz.3.988': attribute type 29 has an invalid length.
[  318.358478][ T9253] netlink: 3 bytes leftover after parsing attributes in process `syz.2.987'.
[  318.566611][ T9256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.988'.
[  322.911557][ T9297] syz.3.1000 (9297) used obsolete PPPIOCDETACH ioctl
[  323.016320][ T9295] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.998'.
[  323.042180][ T9295] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  323.963049][ T9308] validate_nla: 3 callbacks suppressed
[  323.963068][ T9308] netlink: 'syz.0.1002': attribute type 29 has an invalid length.
[  324.025336][ T9308] netlink: 'syz.0.1002': attribute type 29 has an invalid length.
[  324.102542][ T9308] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1002'.
[  324.332419][ T9321] netlink: 'syz.0.1006': attribute type 21 has an invalid length.
[  324.531336][ T9329] netlink: 'syz.1.1015': attribute type 29 has an invalid length.
[  324.545139][ T9329] netlink: 'syz.1.1015': attribute type 29 has an invalid length.
[  324.595746][ T9329] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1015'.
[  325.122289][ T9336] netlink: 'syz.1.1010': attribute type 3 has an invalid length.
[  325.170495][ T9336] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1010'.
[  325.991241][ T9349] netlink: 'syz.0.1014': attribute type 8 has an invalid length.
[  326.021782][ T9349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1014'.
[  326.117612][ T9349] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1014'.
[  329.741182][ T9377] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1022'.
[  329.807666][ T9377] netlink: 'syz.0.1022': attribute type 29 has an invalid length.
[  329.825656][ T9377] netlink: 'syz.0.1022': attribute type 29 has an invalid length.
[  330.000624][ T9382] netlink: 'syz.0.1022': attribute type 39 has an invalid length.
[  330.619873][ T9381] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  330.632256][ T9383] netlink: 'syz.3.1024': attribute type 3 has an invalid length.
[  330.664230][ T9383] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1024'.
[  330.962615][ T9391] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1026'.
[  331.021368][ T9391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  331.096659][ T9389] netlink: 'syz.2.1025': attribute type 6 has an invalid length.
[  331.146449][ T9389] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1025'.
[  331.729212][ T9407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1031'.
[  331.759410][ T9407] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1031'.
[  334.733667][ T9425] 
€Â: renamed from vlan1 (while UP)
[  335.345366][ T9443] netlink: 'syz.0.1040': attribute type 1 has an invalid length.
[  335.347452][ T9444] netlink: 'syz.0.1040': attribute type 1 has an invalid length.
[  335.384717][ T9443] netlink: 'syz.0.1040': attribute type 3 has an invalid length.
[  335.395432][ T9443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1040'.
[  335.418250][ T9450] netlink: 'syz.0.1040': attribute type 10 has an invalid length.
[  335.423402][ T9444] netlink: 'syz.0.1040': attribute type 3 has an invalid length.
[  335.446079][ T9450] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1040'.
[  335.459591][ T9444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1040'.
[  336.514889][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.515099][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.537841][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.574851][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.626241][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.663769][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.707313][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.728966][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.742708][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.768804][ T9471] syz.3.1049[9471] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  338.867820][ T9488] netlink: 'syz.3.1054': attribute type 9 has an invalid length.
[  338.935085][ T9488] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1054'.
[  342.041395][ T9575] netlink: 'syz.0.1079': attribute type 39 has an invalid length.
[  342.060570][ T9577] netlink: 'syz.0.1079': attribute type 39 has an invalid length.
[  342.103839][ T9579] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1077'.
[  342.135567][ T9579] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1077'.
[  342.244400][ T9587] netlink: set zone limit has 8 unknown bytes
[  344.097725][ T9616] netlink: 'syz.3.1085': attribute type 4 has an invalid length.
[  344.129487][ T9616] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.1085'.
[  344.628652][ T9629] netlink: 'syz.3.1092': attribute type 3 has an invalid length.
[  344.651826][ T9629] netlink: 'syz.3.1092': attribute type 1 has an invalid length.
[  345.268061][ T9653] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1097'.
[  345.307816][ T9655] netlink: set zone limit has 8 unknown bytes
[  345.755427][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1098'.
[  349.421574][ T9666] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1098'.
[  349.611912][ T9729] netlink: 'syz.3.1105': attribute type 10 has an invalid length.
[  349.697425][ T9729] team0: Device hsr_slave_0 failed to register rx_handler
[  349.812173][ T9732] netlink: 'syz.0.1108': attribute type 15 has an invalid length.
[  349.823477][ T9736] netlink: 'syz.2.1106': attribute type 3 has an invalid length.
[  349.832684][ T9736] netlink: 'syz.2.1106': attribute type 1 has an invalid length.
[  349.834045][ T9738] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.1108'.
[  350.891765][ T9758] netlink: 'syz.1.1113': attribute type 6 has an invalid length.
[  350.915115][ T9758] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1113'.
[  351.667562][ T5084] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3
[  352.492468][ T9780] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1119'.
[  352.624851][ T9764] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  352.693652][ T9780] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  355.075934][ T9791] netlink: 'syz.0.1119': attribute type 10 has an invalid length.
[  355.453652][ T9800] netlink: 'syz.3.1125': attribute type 29 has an invalid length.
[  355.511421][ T9800] netlink: 'syz.3.1125': attribute type 29 has an invalid length.
[  355.949381][ T9805] netlink: 'syz.2.1126': attribute type 39 has an invalid length.
[  356.649594][ T9816] netlink: 'syz.1.1127': attribute type 3 has an invalid length.
[  356.673758][ T9816] netlink: 'syz.1.1127': attribute type 1 has an invalid length.
[  357.108377][ T9826] netlink: 'syz.0.1131': attribute type 29 has an invalid length.
[  357.214768][ T9832] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1132'.
[  357.216443][ T9824] netlink: 'syz.0.1131': attribute type 29 has an invalid length.
[  357.359375][ T9826] netlink: 'syz.0.1131': attribute type 29 has an invalid length.
[  357.632016][ T9828] netlink: 'syz.0.1131': attribute type 29 has an invalid length.
[  362.653182][ T9885] validate_nla: 3 callbacks suppressed
[  362.653231][ T9885] netlink: 'syz.1.1144': attribute type 19 has an invalid length.
[  362.687812][ T9885] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1144'.
[  363.013277][ T9893] sit0: left promiscuous mode
[  363.201219][ T9899] netlink: 'syz.1.1146': attribute type 10 has an invalid length.
[  363.221588][ T9899] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1146'.
[  363.271355][ T9899] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  363.301061][ T9880] sit0: entered promiscuous mode
[  363.620309][ T9903] sock: sock_set_timeout: `syz.1.1148' (pid 9903) tries to set negative timeout
[  363.823704][ T9905] sock: sock_set_timeout: `syz.1.1148' (pid 9905) tries to set negative timeout
[  364.201131][ T9912] netlink: 'syz.3.1149': attribute type 10 has an invalid length.
[  365.772183][ T9932] netlink: 'syz.3.1155': attribute type 64 has an invalid length.
[  365.795091][ T9925] ¥: port 1(team0) entered blocking state
[  365.801068][ T9925] ¥: port 1(team0) entered disabled state
[  365.829497][ T9925] team0: entered allmulticast mode
[  365.835471][ T9925] team_slave_0: entered allmulticast mode
[  365.853637][ T9925] team_slave_1: entered allmulticast mode
[  365.859530][ T9925] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  365.873482][ T9925] bridge0: entered allmulticast mode
[  365.882670][ T9925] team0: entered promiscuous mode
[  365.905265][ T9925] team_slave_0: entered promiscuous mode
[  365.911290][ T9925] team_slave_1: entered promiscuous mode
[  365.940008][ T9925] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  365.950664][ T9925] bridge0: entered promiscuous mode
[  365.963263][ T9933] team0: left allmulticast mode
[  366.006303][ T9933] team_slave_0: left allmulticast mode
[  366.011847][ T9933] team_slave_1: left allmulticast mode
[  366.021988][ T9933] mac80211_hwsim hwsim9 wlan1: left allmulticast mode
[  366.029121][ T9933] bridge0: left allmulticast mode
[  366.039818][ T9933] team0: left promiscuous mode
[  366.045159][ T9933] team_slave_0: left promiscuous mode
[  366.050764][ T9933] team_slave_1: left promiscuous mode
[  366.083965][ T9933] mac80211_hwsim hwsim9 wlan1: left promiscuous mode
[  366.101522][ T9933] bridge0: left promiscuous mode
[  366.108052][ T9933] ¥: port 1(team0) entered disabled state
[  366.545638][ T9946] syzkaller0: entered promiscuous mode
[  366.563784][ T9946] syzkaller0: entered allmulticast mode
[  369.756006][ T9970] netlink: 'syz.1.1164': attribute type 10 has an invalid length.
[  369.767312][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state
[  369.779253][ T9970] bridge_slave_1: left allmulticast mode
[  369.788399][ T9970] bridge_slave_1: left promiscuous mode
[  369.797472][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.244362][ T9985] netlink: 'syz.0.1170': attribute type 19 has an invalid length.
[  374.012621][T10015] syzkaller0: entered promiscuous mode
[  374.018720][T10015] syzkaller0: entered allmulticast mode
[  374.100119][T10022] ¥: port 1(team0) entered blocking state
[  374.119261][T10022] ¥: port 1(team0) entered disabled state
[  374.125478][T10022] team0: entered allmulticast mode
[  374.130768][T10022] team_slave_0: entered allmulticast mode
[  374.156906][T10022] team_slave_1: entered allmulticast mode
[  374.163172][T10022] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode
[  374.171335][T10022] macvlan0: entered allmulticast mode
[  374.177326][T10022] veth1_vlan: entered allmulticast mode
[  374.183169][T10022] geneve1: entered allmulticast mode
[  374.209625][T10022] team0: entered promiscuous mode
[  374.211166][T10025] netlink: 'syz.2.1181': attribute type 3 has an invalid length.
[  374.227753][T10025] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1181'.
[  374.250490][T10022] team_slave_0: entered promiscuous mode
[  374.261580][T10022] team_slave_1: entered promiscuous mode
[  374.267611][T10022] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode
[  374.275912][T10022] macvlan0: entered promiscuous mode
[  374.281585][T10022] geneve1: entered promiscuous mode
[  374.305088][T10018] netlink: 'syz.0.1177': attribute type 10 has an invalid length.
[  374.335775][T10018] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.349851][T10018] bridge_slave_1: left allmulticast mode
[  374.356980][T10018] bridge_slave_1: left promiscuous mode
[  374.368682][T10018] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.190680][T10023] team0: left allmulticast mode
[  376.198283][T10023] team_slave_0: left allmulticast mode
[  376.204105][T10023] team_slave_1: left allmulticast mode
[  376.209753][T10023] mac80211_hwsim hwsim7 wlan1: left allmulticast mode
[  376.218222][T10023] macvlan0: left allmulticast mode
[  376.223626][T10023] veth1_vlan: left allmulticast mode
[  376.229029][T10023] geneve1: left allmulticast mode
[  376.234359][T10023] team0: left promiscuous mode
[  376.239182][T10023] team_slave_0: left promiscuous mode
[  376.244969][T10023] team_slave_1: left promiscuous mode
[  376.250686][T10023] mac80211_hwsim hwsim7 wlan1: left promiscuous mode
[  376.258182][T10023] macvlan0: left promiscuous mode
[  376.263792][T10023] geneve1: left promiscuous mode
[  376.269706][T10023] ¥: port 1(team0) entered disabled state
[  377.511769][T10070] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1190'.
[  378.994808][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  379.001383][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  380.421021][T10075] syzkaller0: entered promiscuous mode
[  380.429191][T10075] syzkaller0: entered allmulticast mode
[  380.442255][T10070] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô'
[  380.451359][T10070] CPU: 0 PID: 10070 Comm: syz.3.1190 Not tainted syzkaller #0
[  380.458987][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  380.469093][T10070] Call Trace:
[  380.472505][T10070]  <TASK>
[  380.475525][T10070]  dump_stack_lvl+0x18c/0x250
[  380.480506][T10070]  ? show_regs_print_info+0x20/0x20
[  380.485876][T10070]  ? load_image+0x420/0x420
[  380.490488][T10070]  sysfs_warn_dup+0x8e/0xa0
[  380.495117][T10070]  sysfs_do_create_link_sd+0xc0/0x110
[  380.500639][T10070]  device_add_class_symlinks+0x1cf/0x240
[  380.506400][T10070]  device_add+0x4f9/0xc40
[  380.511147][T10070]  wiphy_register+0x1d99/0x2ac0
[  380.516152][T10070]  ? cfg80211_event_work+0x40/0x40
[  380.521305][T10070]  ? minstrel_ht_alloc+0x88a/0x990
[  380.526733][T10070]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  380.533078][T10070]  ieee80211_register_hw+0x2f3d/0x3cb0
[  380.538699][T10070]  ? ieee80211_register_hw+0xfb1/0x3cb0
[  380.544356][T10070]  ? ieee80211_tasklet_handler+0x20/0x20
[  380.550099][T10070]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  380.556095][T10070]  ? __debug_object_init+0xec/0x450
[  380.561444][T10070]  ? __asan_memset+0x22/0x40
[  380.566098][T10070]  ? __hrtimer_init+0x189/0x270
[  380.571101][T10070]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  380.576969][T10070]  ? mac80211_hwsim_free+0x220/0x220
[  380.582303][T10070]  ? rcu_is_watching+0x15/0xb0
[  380.587088][T10070]  ? kstrndup+0xbd/0x140
[  380.591431][T10070]  hwsim_new_radio_nl+0xdad/0x1a70
[  380.596660][T10070]  ? __nla_validate+0x50/0x50
[  380.601374][T10070]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  380.607747][T10070]  ? __nla_parse+0x40/0x50
[  380.612358][T10070]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  380.618814][T10070]  genl_family_rcv_msg_doit+0x21a/0x310
[  380.624666][T10070]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  380.630687][T10070]  ? bpf_lsm_capable+0x9/0x10
[  380.635423][T10070]  ? security_capable+0x89/0xb0
[  380.640332][T10070]  genl_rcv_msg+0x611/0x7a0
[  380.644868][T10070]  ? genl_bind+0x360/0x360
[  380.649303][T10070]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  380.655739][T10070]  ? trace_event_raw_event_lock_acquire+0x290/0x290
[  380.662344][T10070]  ? perf_trace_lock+0xfc/0x3b0
[  380.667393][T10070]  netlink_rcv_skb+0x235/0x4c0
[  380.672184][T10070]  ? genl_bind+0x360/0x360
[  380.676719][T10070]  ? netlink_ack+0x1160/0x1160
[  380.681607][T10070]  ? __lock_acquire+0x7eb0/0x7eb0
[  380.686713][T10070]  ? down_read+0x1ac/0x2e0
[  380.691158][T10070]  genl_rcv+0x28/0x40
[  380.695197][T10070]  netlink_unicast+0x7b1/0x930
[  380.700009][T10070]  netlink_sendmsg+0x8d0/0xbf0
[  380.704897][T10070]  ? netlink_getsockopt+0x590/0x590
[  380.710208][T10070]  ? apparmor_socket_sendmsg+0x8e/0x330
[  380.715808][T10070]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  380.721126][T10070]  ? security_socket_sendmsg+0x80/0xa0
[  380.726881][T10070]  ? netlink_getsockopt+0x590/0x590
[  380.732108][T10070]  ____sys_sendmsg+0x61b/0x980
[  380.736988][T10070]  ? __asan_memset+0x22/0x40
[  380.741787][T10070]  ? __sys_sendmsg_sock+0x30/0x30
[  380.747180][T10070]  ? __import_iovec+0x5f2/0x850
[  380.752150][T10070]  ? import_iovec+0x73/0xa0
[  380.756766][T10070]  ___sys_sendmsg+0x2a6/0x360
[  380.761471][T10070]  ? __sys_sendmsg+0x2b0/0x2b0
[  380.766312][T10070]  __se_sys_sendmsg+0x1d0/0x2c0
[  380.771198][T10070]  ? __x64_sys_sendmsg+0x80/0x80
[  380.776175][T10070]  ? lockdep_hardirqs_on+0x98/0x150
[  380.781523][T10070]  do_syscall_64+0x55/0xb0
[  380.785954][T10070]  ? clear_bhb_loop+0x40/0x90
[  380.790988][T10070]  ? clear_bhb_loop+0x40/0x90
[  380.795696][T10070]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  380.801640][T10070] RIP: 0033:0x7fef9e79e1d9
[  380.806106][T10070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  380.826041][T10070] RSP: 002b:00007fef9c9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  380.834565][T10070] RAX: ffffffffffffffda RBX: 00007fef9ea26090 RCX: 00007fef9e79e1d9
[  380.843438][T10070] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  380.851531][T10070] RBP: 00007fef9e835888 R08: 0000000000000000 R09: 0000000000000000
[  380.859701][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  380.867685][T10070] R13: 00007fef9ea26128 R14: 00007fef9ea26090 R15: 00007fff57063d18
[  380.875694][T10070]  </TASK>
[  380.976036][T10086] netlink: 'syz.1.1191': attribute type 21 has an invalid length.
[  381.003827][T10086] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1191'.
[  381.075475][T10086] sit0: left promiscuous mode
[  381.512423][T10091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1193'.
[  386.086796][T10146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1207'.
[  386.500917][T10155] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1211'.
[  386.532742][T10155] bond0: (slave bond_slave_0): Releasing backup interface
[  386.543107][T10159] netlink: 'syz.3.1210': attribute type 1 has an invalid length.
[  386.556458][T10159] netlink: 'syz.3.1210': attribute type 2 has an invalid length.
[  386.567700][T10155] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  386.569977][T10159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1210'.
[  386.631355][T10164] netlink: 'syz.3.1210': attribute type 1 has an invalid length.
[  386.681654][T10150] netlink: 'syz.2.1209': attribute type 10 has an invalid length.
[  386.683718][T10164] netlink: 'syz.3.1210': attribute type 2 has an invalid length.
[  386.700537][T10150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1209'.
[  386.719836][T10164] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1210'.
[  386.741129][T10150] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  386.755420][T10150] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  386.786466][T10157] netlink: 'syz.2.1209': attribute type 3 has an invalid length.
[  386.786500][T10157] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1209'.
[  386.812113][T10150] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  386.840488][T10170] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[  387.313244][T10182] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1215'.
[  390.389296][T10204] netlink: 'syz.0.1226': attribute type 10 has an invalid length.
[  390.404048][T10204] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1226'.
[  391.115020][T10216] netlink: 'syz.0.1230': attribute type 10 has an invalid length.
[  391.144130][T10216] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1230'.
[  391.174407][T10216] hsr0: entered promiscuous mode
[  391.181989][T10216] bridge0: port 2(hsr0) entered blocking state
[  391.204452][T10216] bridge0: port 2(hsr0) entered disabled state
[  391.212372][T10216] hsr0: entered allmulticast mode
[  391.234460][T10216] hsr_slave_0: entered allmulticast mode
[  391.252952][T10216] hsr_slave_1: entered allmulticast mode
[  391.351203][T10216] bridge0: port 2(hsr0) entered blocking state
[  391.358500][T10216] bridge0: port 2(hsr0) entered forwarding state
[  392.502218][T10241] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1236'.
[  396.154585][T10266] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1245'.
[  396.191957][T10266] netlink: 8446 bytes leftover after parsing attributes in process `syz.1.1245'.
[  396.226733][T10270] netlink: 'syz.0.1246': attribute type 2 has an invalid length.
[  396.673214][T10278] syzkaller0: entered promiscuous mode
[  396.678995][T10278] syzkaller0: entered allmulticast mode
[  396.707677][T10275] netlink: 'syz.3.1248': attribute type 10 has an invalid length.
[  396.724549][T10275] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1248'.
[  396.761167][T10275] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  396.783187][T10279] netlink: 'syz.3.1248': attribute type 3 has an invalid length.
[  396.793156][T10275] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  396.845903][T10279] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.1248'.
[  396.881060][T10275] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  397.156419][T10292] netlink: 'syz.2.1252': attribute type 1 has an invalid length.
[  397.166488][T10292] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1252'.
[  397.470829][T10304] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1255'.
[  397.496342][T10304] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  399.496579][T10313] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1256'.
[  400.843481][T10306] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1255'.
[  401.603069][T10335] netlink: 'syz.3.1264': attribute type 10 has an invalid length.
[  401.612248][T10335] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1264'.
[  401.622178][T10335] hsr0: entered promiscuous mode
[  401.635477][T10335] bridge0: port 2(hsr0) entered blocking state
[  401.642771][T10335] bridge0: port 2(hsr0) entered disabled state
[  401.657855][T10335] hsr0: entered allmulticast mode
[  401.664124][T10335] hsr_slave_0: entered allmulticast mode
[  401.677127][T10335] hsr_slave_1: entered allmulticast mode
[  401.717632][T10335] bridge0: port 2(hsr0) entered blocking state
[  401.725182][T10335] bridge0: port 2(hsr0) entered forwarding state
[  401.739828][T10338] netlink: 'syz.0.1265': attribute type 10 has an invalid length.
[  401.872608][T10338] team0: Cannot enslave team device to itself
[  402.687602][T10359] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1270'.
[  403.290460][T10364] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1271'.
[  403.316101][T10364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  403.344896][T10366] netlink: 'syz.1.1271': attribute type 21 has an invalid length.
[  403.352956][T10366] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.1271'.
[  404.204696][T10392] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1280'.
[  404.277244][T10392] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1280'.
[  404.383353][T10394] netlink: 'syz.3.1280': attribute type 21 has an invalid length.
[  404.401784][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1280'.
[  404.411974][T10386] netlink: 'syz.2.1278': attribute type 10 has an invalid length.
[  404.441450][T10386] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1278'.
[  404.468077][T10386] hsr0: entered promiscuous mode
[  404.481018][T10386] bridge0: port 4(hsr0) entered blocking state
[  404.511141][T10386] bridge0: port 4(hsr0) entered disabled state
[  404.520174][T10386] hsr0: entered allmulticast mode
[  404.540442][T10386] hsr_slave_0: entered allmulticast mode
[  404.555467][T10386] hsr_slave_1: entered allmulticast mode
[  404.629944][T10386] bridge0: port 4(hsr0) entered blocking state
[  404.637079][T10386] bridge0: port 4(hsr0) entered forwarding state
[  404.922377][T10404] syzkaller0: entered promiscuous mode
[  404.955426][T10404] syzkaller0: entered allmulticast mode
[  407.012950][T10416] netlink: 'syz.3.1289': attribute type 6 has an invalid length.
[  407.022033][T10416] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1289'.
[  407.033520][T10423] netlink: 14546 bytes leftover after parsing attributes in process `syz.2.1291'.
[  407.489623][T10440] netlink: 'syz.3.1298': attribute type 7 has an invalid length.
[  407.922454][T10451] netlink: 'syz.3.1302': attribute type 33 has an invalid length.
[  407.936378][T10451] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1302'.
[  407.951213][T10451] netlink: 6783 bytes leftover after parsing attributes in process `syz.3.1302'.
[  408.173942][T10469] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1308'.
[  408.364642][T10473] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1309'.
[  408.437237][T10474] netlink: 'syz.1.1309': attribute type 10 has an invalid length.
[  408.448321][T10474] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1309'.
[  408.465129][T10474] openvswitch: netlink: Message has 4 unknown bytes.
[  408.522636][T10484] : port 1(ip6gretap0) entered blocking state
[  408.531969][T10484] : port 1(ip6gretap0) entered disabled state
[  408.542505][T10484] ip6gretap0: entered allmulticast mode
[  408.561499][T10484] ip6gretap0: entered promiscuous mode
[  408.627811][T10491] lo: entered allmulticast mode
[  408.660846][T10491] lo: entered promiscuous mode
[  408.670972][T10491] lo: left allmulticast mode
[  408.931390][T10497] FAULT_INJECTION: forcing a failure.
[  408.931390][T10497] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  408.950794][T10497] CPU: 0 PID: 10497 Comm: syz.3.1316 Not tainted syzkaller #0
[  408.958359][T10497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  408.968467][T10497] Call Trace:
[  408.971790][T10497]  <TASK>
[  408.974758][T10497]  dump_stack_lvl+0x18c/0x250
[  408.979590][T10497]  ? show_regs_print_info+0x20/0x20
[  408.984840][T10497]  ? load_image+0x420/0x420
[  408.989565][T10497]  ? __might_fault+0xaa/0x120
[  408.994344][T10497]  ? __lock_acquire+0x7eb0/0x7eb0
[  408.999436][T10497]  should_fail_ex+0x394/0x4c0
[  409.004272][T10497]  _copy_from_user+0x2f/0xe0
[  409.008917][T10497]  __sys_bpf+0x23e/0x890
[  409.013304][T10497]  ? bpf_link_show_fdinfo+0x560/0x560
[  409.018749][T10497]  ? lock_chain_count+0x20/0x20
[  409.023689][T10497]  __x64_sys_bpf+0x7c/0x90
[  409.028271][T10497]  do_syscall_64+0x55/0xb0
[  409.032754][T10497]  ? clear_bhb_loop+0x40/0x90
[  409.037492][T10497]  ? clear_bhb_loop+0x40/0x90
[  409.042222][T10497]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  409.048177][T10497] RIP: 0033:0x7fef9e79e1d9
[  409.052649][T10497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  409.072405][T10497] RSP: 002b:00007fef9f593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  409.080963][T10497] RAX: ffffffffffffffda RBX: 00007fef9ea25fa0 RCX: 00007fef9e79e1d9
[  409.088985][T10497] RDX: 0000000000000031 RSI: 0000200000000600 RDI: 000000000000000a
[  409.097006][T10497] RBP: 00007fef9f593090 R08: 0000000000000000 R09: 0000000000000000
[  409.105030][T10497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  409.113053][T10497] R13: 00007fef9ea26038 R14: 00007fef9ea25fa0 R15: 00007fff57063d18
[  409.121096][T10497]  </TASK>
[  409.159265][ T5084] Bluetooth: hci2: ISO packet for unknown connection handle 3148
[  409.235752][T10506] netlink: 'syz.1.1319': attribute type 10 has an invalid length.
[  409.305991][T10506] bridge0: port 3(syz_tun) entered disabled state
[  409.313805][T10506] bridge0: port 1(bridge_slave_0) entered disabled state
[  409.424985][T10506] bridge0: port 3(syz_tun) entered blocking state
[  409.432453][T10506] bridge0: port 3(syz_tun) entered forwarding state
[  409.440561][T10506] bridge0: port 1(bridge_slave_0) entered blocking state
[  409.448569][T10506] bridge0: port 1(bridge_slave_0) entered forwarding state
[  409.605567][T10506] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  409.626539][T10512] netlink: 'syz.3.1321': attribute type 39 has an invalid length.
[  410.773848][T10518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1322'.
[  410.796091][T10518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1322'.
[  410.808413][T10518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1322'.
[  410.957718][T10519] netlink: 'syz.2.1322': attribute type 10 has an invalid length.
[  410.969419][T10519] ipvlan1: entered promiscuous mode
[  410.987084][T10519] ipvlan1: entered allmulticast mode
[  411.025344][T10519] bridge0: port 5(ipvlan1) entered blocking state
[  411.049296][T10519] bridge0: port 5(ipvlan1) entered disabled state
[  411.084363][T10519] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  412.796976][T10571] FAULT_INJECTION: forcing a failure.
[  412.796976][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  412.811019][T10571] CPU: 1 PID: 10571 Comm: syz.2.1338 Not tainted syzkaller #0
[  412.818638][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  412.828729][T10571] Call Trace:
[  412.832029][T10571]  <TASK>
[  412.834976][T10571]  dump_stack_lvl+0x18c/0x250
[  412.839677][T10571]  ? show_regs_print_info+0x20/0x20
[  412.844896][T10571]  ? load_image+0x420/0x420
[  412.849417][T10571]  ? __might_fault+0xaa/0x120
[  412.854107][T10571]  ? __lock_acquire+0x7eb0/0x7eb0
[  412.859150][T10571]  ? __virt_addr_valid+0x10c/0x380
[  412.864319][T10571]  should_fail_ex+0x394/0x4c0
[  412.869021][T10571]  _copy_from_user+0x2f/0xe0
[  412.873629][T10571]  memdup_user+0x64/0xc0
[  412.877893][T10571]  bpf_prog_test_run_raw_tp+0x341/0x680
[  412.883496][T10571]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  412.888983][T10571]  ? trace_bpf_test_finish+0x1a0/0x1a0
[  412.894463][T10571]  bpf_prog_test_run+0x31f/0x390
[  412.899460][T10571]  __sys_bpf+0x49d/0x890
[  412.903750][T10571]  ? bpf_link_show_fdinfo+0x560/0x560
[  412.909272][T10571]  ? lock_chain_count+0x20/0x20
[  412.914151][T10571]  __x64_sys_bpf+0x7c/0x90
[  412.918580][T10571]  do_syscall_64+0x55/0xb0
[  412.923082][T10571]  ? clear_bhb_loop+0x40/0x90
[  412.927783][T10571]  ? clear_bhb_loop+0x40/0x90
[  412.932505][T10571]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  412.938420][T10571] RIP: 0033:0x7fd429d9e1d9
[  412.942849][T10571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  412.962820][T10571] RSP: 002b:00007fd427ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  412.971253][T10571] RAX: ffffffffffffffda RBX: 00007fd42a025fa0 RCX: 00007fd429d9e1d9
[  412.979510][T10571] RDX: 0000000000000031 RSI: 0000200000000600 RDI: 000000000000000a
[  412.987521][T10571] RBP: 00007fd427ff6090 R08: 0000000000000000 R09: 0000000000000000
[  412.995519][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  413.003503][T10571] R13: 00007fd42a026038 R14: 00007fd42a025fa0 R15: 00007fffba510088
[  413.011518][T10571]  </TASK>
[  414.658470][T10601] FAULT_INJECTION: forcing a failure.
[  414.658470][T10601] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  414.711430][T10601] CPU: 1 PID: 10601 Comm: syz.3.1348 Not tainted syzkaller #0
[  414.719002][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  414.729189][T10601] Call Trace:
[  414.732513][T10601]  <TASK>
[  414.735474][T10601]  dump_stack_lvl+0x18c/0x250
[  414.740201][T10601]  ? show_regs_print_info+0x20/0x20
[  414.745454][T10601]  ? load_image+0x420/0x420
[  414.750027][T10601]  ? __lock_acquire+0x7eb0/0x7eb0
[  414.755107][T10601]  ? snprintf+0xe9/0x140
[  414.759575][T10601]  should_fail_ex+0x394/0x4c0
[  414.764314][T10601]  _copy_to_user+0x2f/0xa0
[  414.768789][T10601]  simple_read_from_buffer+0xe7/0x150
[  414.774334][T10601]  proc_fail_nth_read+0x1e8/0x260
[  414.779426][T10601]  ? proc_fault_inject_write+0x360/0x360
[  414.785120][T10601]  ? fsnotify_perm+0x271/0x5e0
[  414.789945][T10601]  ? proc_fault_inject_write+0x360/0x360
[  414.795639][T10601]  vfs_read+0x298/0x990
[  414.799892][T10601]  ? kernel_read+0x1e0/0x1e0
[  414.804648][T10601]  ? __fget_files+0x28/0x460
[  414.809308][T10601]  ? __fget_files+0x3fc/0x460
[  414.814053][T10601]  ? __fdget_pos+0x2a3/0x330
[  414.818707][T10601]  ? ksys_read+0x74/0x260
[  414.823102][T10601]  ksys_read+0x151/0x260
[  414.827486][T10601]  ? vfs_write+0x9a0/0x9a0
[  414.832055][T10601]  ? lockdep_hardirqs_on+0x98/0x150
[  414.837307][T10601]  do_syscall_64+0x55/0xb0
[  414.841846][T10601]  ? clear_bhb_loop+0x40/0x90
[  414.846562][T10601]  ? clear_bhb_loop+0x40/0x90
[  414.851283][T10601]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  414.857220][T10601] RIP: 0033:0x7fef9e75ea0e
[  414.861677][T10601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  414.881423][T10601] RSP: 002b:00007fef9f592fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  414.889896][T10601] RAX: ffffffffffffffda RBX: 00007fef9f5936c0 RCX: 00007fef9e75ea0e
[  414.897924][T10601] RDX: 000000000000000f RSI: 00007fef9f5930a0 RDI: 0000000000000005
[  414.906036][T10601] RBP: 00007fef9f593090 R08: 0000000000000000 R09: 0000000000000000
[  414.914059][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  414.922425][T10601] R13: 00007fef9ea26038 R14: 00007fef9ea25fa0 R15: 00007fff57063d18
[  414.930577][T10601]  </TASK>
[  415.378955][T10627] netlink: 'syz.1.1358': attribute type 12 has an invalid length.
[  415.408778][T10627] __nla_validate_parse: 4 callbacks suppressed
[  415.408843][T10627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1358'.
[  415.519776][T10633] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.1359'.
[  415.687630][T10627] netlink: 'syz.1.1358': attribute type 1 has an invalid length.
[  415.716205][T10627] netlink: 13854 bytes leftover after parsing attributes in process `syz.1.1358'.
[  415.821993][T10638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  417.449519][T10663] netlink: 'syz.1.1369': attribute type 33 has an invalid length.
[  417.477664][T10663] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1369'.
[  419.874070][T10686] netlink: 'syz.2.1376': attribute type 9 has an invalid length.
[  419.903449][T10686] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1376'.
[  420.610870][T10677] netlink: 'syz.3.1375': attribute type 21 has an invalid length.
[  420.621528][T10677] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1375'.
[  420.638699][T10677] netlink: 'syz.3.1375': attribute type 5 has an invalid length.
[  420.649457][T10677] netlink: 'syz.3.1375': attribute type 6 has an invalid length.
[  420.661777][T10677] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1375'.
[  420.696031][T10683] netlink: 'syz.2.1376': attribute type 46 has an invalid length.
[  420.927478][T10691] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1379'.
[  421.902172][T10698] netlink: 'syz.1.1378': attribute type 10 has an invalid length.
[  423.903293][T10698] hsr0: entered promiscuous mode
[  423.944055][T10698] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  423.983823][T10698] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  423.996684][T10698] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  424.009742][T10698] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  427.984493][T10756] netlink: 'syz.0.1394': attribute type 10 has an invalid length.
[  430.803096][T10756] bridge0: port 2(hsr0) entered disabled state
[  430.810565][T10756] hsr0: left allmulticast mode
[  430.815639][T10756] hsr_slave_0: left allmulticast mode
[  430.821301][T10756] hsr_slave_1: left allmulticast mode
[  430.828557][T10756] bridge0: port 2(hsr0) entered disabled state
[  430.840479][T10756] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  430.852930][T10756] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  430.863859][T10756] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  430.880333][T10756] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  430.887356][T10759] netlink: 'syz.1.1397': attribute type 4 has an invalid length.
[  431.063950][T10775] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1399'.
[  431.093955][T10775] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  431.315868][T10784] netlink: 'syz.2.1400': attribute type 29 has an invalid length.
[  431.354850][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'.
[  431.382087][T10784] netlink: 'syz.2.1400': attribute type 29 has an invalid length.
[  431.438420][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'.
[  434.170629][T10781] ------------[ cut here ]------------
[  434.176542][T10781] WARNING: CPU: 1 PID: 10781 at kernel/events/core.c:6808 perf_pending_task+0x357/0x480
[  434.186527][T10781] Modules linked in:
[  434.190474][T10781] CPU: 1 PID: 10781 Comm: syz.3.1401 Not tainted syzkaller #0
[  434.198072][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  434.209105][T10781] RIP: 0010:perf_pending_task+0x357/0x480
[  434.214945][T10781] Code: e8 0e 75 d5 ff 84 db 75 10 e8 75 72 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 65 72 d5 ff e8 e0 7e 4e ff eb e9 e8 59 72 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  434.235122][T10781] RSP: 0018:ffffc900033c79c8 EFLAGS: 00010293
[  434.241337][T10781] RAX: ffffffff81b21e57 RBX: ffff88804690ec00 RCX: ffff8880206a3c00
[  434.249442][T10781] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  434.257909][T10781] RBP: ffff88804690e9c0 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d
[  434.266165][T10781] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: ffff8880206a3c00
[  434.274400][T10781] R13: ffff888027038d30 R14: 0000000000000000 R15: 1ffff11008d21d38
[  434.282853][T10781] FS:  0000000000000000(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000
[  434.291919][T10781] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  434.298661][T10781] CR2: 000000110e22fff6 CR3: 000000004c1bf000 CR4: 00000000003506e0
[  434.306737][T10781] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  434.314828][T10781] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  434.322853][T10781] Call Trace:
[  434.326228][T10781]  <TASK>
[  434.329225][T10781]  task_work_run+0x1d4/0x260
[  434.333979][T10781]  ? task_work_cancel+0x220/0x220
[  434.339261][T10781]  do_exit+0x986/0x2530
[  434.343645][T10781]  ? put_task_struct+0xc0/0xc0
[  434.348647][T10781]  ? preempt_schedule_common+0x82/0xc0
[  434.354256][T10781]  ? preempt_schedule+0xc0/0xd0
[  434.359249][T10781]  ? schedule_preempt_disabled+0x20/0x20
[  434.365169][T10781]  do_group_exit+0x22d/0x2f0
[  434.369830][T10781]  get_signal+0x12a6/0x1390
[  434.374494][T10781]  arch_do_signal_or_restart+0xc2/0x7b0
[  434.380150][T10781]  ? lock_chain_count+0x20/0x20
[  434.385282][T10781]  ? get_sigframe_size+0x20/0x20
[  434.390519][T10781]  exit_to_user_mode_loop+0x70/0x110
[  434.395974][T10781]  exit_to_user_mode_prepare+0xee/0x180
[  434.401687][T10781]  syscall_exit_to_user_mode+0x1a/0x50
[  434.408188][T10781]  do_syscall_64+0x61/0xb0
[  434.412751][T10781]  ? clear_bhb_loop+0x40/0x90
[  434.417555][T10781]  ? clear_bhb_loop+0x40/0x90
[  434.422284][T10781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.428312][T10781] RIP: 0033:0x7fef9e79e1d9
[  434.432775][T10781] Code: Unable to access opcode bytes at 0x7fef9e79e1af.
[  434.440161][T10781] RSP: 002b:00007fef9f593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  434.448863][T10781] RAX: 0000000000000012 RBX: 00007fef9ea25fa0 RCX: 00007fef9e79e1d9
[  434.456991][T10781] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 000000000000000e
[  434.465331][T10781] RBP: 00007fef9e835888 R08: 0000000000000000 R09: 0000000000000000
[  434.473474][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.481508][T10781] R13: 00007fef9ea26038 R14: 00007fef9ea25fa0 R15: 00007fff57063d18
[  434.489618][T10781]  </TASK>
[  434.492701][T10781] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  434.500019][T10781] CPU: 1 PID: 10781 Comm: syz.3.1401 Not tainted syzkaller #0
[  434.507519][T10781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  434.517798][T10781] Call Trace:
[  434.521292][T10781]  <TASK>
[  434.524249][T10781]  dump_stack_lvl+0x18c/0x250
[  434.528951][T10781]  ? show_regs_print_info+0x20/0x20
[  434.534163][T10781]  ? load_image+0x420/0x420
[  434.538809][T10781]  panic+0x2ca/0x720
[  434.542814][T10781]  ? bpf_jit_dump+0xd0/0xd0
[  434.547378][T10781]  __warn+0x2e0/0x470
[  434.551470][T10781]  ? perf_pending_task+0x357/0x480
[  434.556599][T10781]  ? perf_pending_task+0x357/0x480
[  434.561808][T10781]  report_bug+0x2be/0x4f0
[  434.566211][T10781]  ? perf_pending_task+0x357/0x480
[  434.571511][T10781]  ? perf_pending_task+0x357/0x480
[  434.576723][T10781]  ? perf_pending_task+0x359/0x480
[  434.581882][T10781]  handle_bug+0xcf/0x120
[  434.586152][T10781]  exc_invalid_op+0x1a/0x50
[  434.590675][T10781]  asm_exc_invalid_op+0x1a/0x20
[  434.595546][T10781] RIP: 0010:perf_pending_task+0x357/0x480
[  434.601802][T10781] Code: e8 0e 75 d5 ff 84 db 75 10 e8 75 72 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 65 72 d5 ff e8 e0 7e 4e ff eb e9 e8 59 72 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff
[  434.621971][T10781] RSP: 0018:ffffc900033c79c8 EFLAGS: 00010293
[  434.628054][T10781] RAX: ffffffff81b21e57 RBX: ffff88804690ec00 RCX: ffff8880206a3c00
[  434.636130][T10781] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  434.644202][T10781] RBP: ffff88804690e9c0 R08: ffffffff8f6c5aef R09: 1ffffffff1ed8b5d
[  434.652211][T10781] R10: dffffc0000000000 R11: fffffbfff1ed8b5e R12: ffff8880206a3c00
[  434.660232][T10781] R13: ffff888027038d30 R14: 0000000000000000 R15: 1ffff11008d21d38
[  434.668243][T10781]  ? perf_pending_task+0x357/0x480
[  434.673395][T10781]  ? perf_pending_task+0x357/0x480
[  434.678526][T10781]  task_work_run+0x1d4/0x260
[  434.683170][T10781]  ? task_work_cancel+0x220/0x220
[  434.688260][T10781]  do_exit+0x986/0x2530
[  434.692493][T10781]  ? put_task_struct+0xc0/0xc0
[  434.697299][T10781]  ? preempt_schedule_common+0x82/0xc0
[  434.702785][T10781]  ? preempt_schedule+0xc0/0xd0
[  434.707650][T10781]  ? schedule_preempt_disabled+0x20/0x20
[  434.713313][T10781]  do_group_exit+0x22d/0x2f0
[  434.717919][T10781]  get_signal+0x12a6/0x1390
[  434.722466][T10781]  arch_do_signal_or_restart+0xc2/0x7b0
[  434.728040][T10781]  ? lock_chain_count+0x20/0x20
[  434.732909][T10781]  ? get_sigframe_size+0x20/0x20
[  434.737892][T10781]  exit_to_user_mode_loop+0x70/0x110
[  434.743287][T10781]  exit_to_user_mode_prepare+0xee/0x180
[  434.748854][T10781]  syscall_exit_to_user_mode+0x1a/0x50
[  434.754333][T10781]  do_syscall_64+0x61/0xb0
[  434.758942][T10781]  ? clear_bhb_loop+0x40/0x90
[  434.763635][T10781]  ? clear_bhb_loop+0x40/0x90
[  434.768416][T10781]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  434.774328][T10781] RIP: 0033:0x7fef9e79e1d9
[  434.778756][T10781] Code: Unable to access opcode bytes at 0x7fef9e79e1af.
[  434.785778][T10781] RSP: 002b:00007fef9f593028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  434.794207][T10781] RAX: 0000000000000012 RBX: 00007fef9ea25fa0 RCX: 00007fef9e79e1d9
[  434.802192][T10781] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 000000000000000e
[  434.810697][T10781] RBP: 00007fef9e835888 R08: 0000000000000000 R09: 0000000000000000
[  434.818768][T10781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.826751][T10781] R13: 00007fef9ea26038 R14: 00007fef9ea25fa0 R15: 00007fff57063d18
[  434.834763][T10781]  </TASK>
[  434.838040][T10781] Kernel Offset: disabled
[  434.842367][T10781] Rebooting in 86400 seconds..