last executing test programs:

3.298768382s ago: executing program 1 (id=3707):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f1eee77be878873206d65bd0b1241fab9139abd7f40febe81fed3684e6b59273da01f1743c6a5df300ec59c65e8174fc2d95a62ca7b937289ad14107333007eab833a5849eb19f18ae41743dfb949377e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x3, 0x1d, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x2, 0x4, 0x2, 0xfffffffffffffff0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf96}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000640)='syzkaller\x00', 0x4, 0x67, &(0x7f0000000680)=""/103, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x4, 0xfffffff7, 0x2}, 0x10, 0x0, r2, 0x2, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000007c0)=[{0x4, 0x3, 0x6, 0x5}, {0x4, 0x4, 0x3, 0x6}], 0x10, 0x6}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x400200, 0x0)
r6 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000940)='syz0\x00', 0x200002, 0x0)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001a80)={0x0, 0x6, 0xd1809a4d59b4d3d6}, 0xc)
r9 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$unix(r3, &(0x7f0000001c40)={&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000300)="f1ee97e06364", 0x6}, {&(0x7f0000000400)="b565b68b50e4bf14115f0f752d29877b1f77d616b2054804743fda05fb4c05510e47ad6764a167e8b8d73df58999e06489fcce8cdc5b791e9d3cf742fc86816ed1fa40dbdfd54a81e3caf29f3cf4cdd89bea42c17b18589d9506e15806448af86f7a0d704740f34521c014989ef2b1bb10084252871f26e150e04090ccc6f69c155b3bb76b0c1818b151d33df8ed70d04c003c46ee53522105b5fd3fb2794b46454470b556f5bd4a183c8aaff6343c4dcd242b82cad102003415b990539f136424c66a16ad6a1b9a60749f3c91d4cd1aa020076bcc8e236e4c3007cc6d485e87c09ba03f", 0xe4}, {&(0x7f00000009c0)="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", 0x1000}], 0x3, &(0x7f0000001ac0)=[@rights={{0x24, 0x1, 0x1, [r1, r2, r1, r1, r2]}}, @rights={{0x34, 0x1, 0x1, [r1, r2, r2, r4, r5, r1, r1, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01}}}, @rights={{0x2c, 0x1, 0x1, [r1, r2, r1, r2, r2, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r1, r2, r1]}}, @rights={{0x20, 0x1, 0x1, [r1, r2, r1, r2]}}, @rights={{0x30, 0x1, 0x1, [r6, r7, r2, r8, r2, r1, r2, r9]}}], 0x148, 0x4000}, 0x40004)
r10 = socket$kcm(0xa, 0x3, 0x3a)
r11 = socket$kcm(0x11, 0x200000000000002, 0x300)
r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000080)=r13, 0x4)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

3.257761935s ago: executing program 0 (id=3709):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x0, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x2a, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x5a}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xea6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x60, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xa, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1], 0x0, 0x10, 0x4}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d80)='ns/time_for_children\x00')
close(r4)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800"/15], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x74589, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value=r5}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r2, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f00000008c0), 0x0, 0x10, &(0x7f0000000900), &(0x7f0000000b40), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xcf, '\x00', r7, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50)
recvmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000200)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)=""/92, 0x5c}, {&(0x7f0000000380)=""/8, 0x8}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000500)=""/31, 0x1f}, {&(0x7f0000000540)=""/20, 0x14}], 0x5}, 0x40000000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a40)={0x5, <r10=>0x0}, 0x8)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x13c, 0x13c, 0x9, [@ptr={0x2, 0x0, 0x0, 0x2, 0x5}, @type_tag={0x6, 0x0, 0x0, 0x12, 0x4}, @union={0x8, 0x6, 0x0, 0x5, 0x1, 0x5, [{0x0, 0x4}, {0x10, 0x5, 0x786}, {0x2, 0x3, 0x2}, {0x10, 0x2, 0xf0000000}, {0x8, 0x0, 0x8}, {0x2, 0x2, 0xffff}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0xf, 0x4}, {0xc, 0xe}, {0xd, 0x2}, {0xe, 0x28}, {0xe}, {0x8, 0x9}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x19, 0x0, 0x23}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}, @enum={0x10, 0x9, 0x0, 0x6, 0x4, [{0x9, 0x3d35}, {0x10}, {0x10, 0x7}, {0xa, 0xfffffff9}, {0x6, 0x9}, {0xb, 0x2}, {0xc, 0xb}, {0x10, 0x3}, {0xb, 0x2}]}, @typedef={0xe, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f, 0x5f, 0x5f, 0x5f, 0x61, 0x2e]}}, &(0x7f0000001080)=""/41, 0x15d, 0x29, 0x0, 0xffffffff, 0x10000, @value=r5}, 0x28)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0xfcb, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000011c0)={r4, <r15=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="06360200f7ffffff055a0c00100000006a54c0ff04000000ff99e2eeed0ccdb784625f970a8f1e8c3bc078d60b1e958f5d4e45feb82c2c9a9531109d942c90cc12ab86e866a41231c4855b7bd62b4b2494f6"], &(0x7f0000000dc0)='GPL\x00', 0x80, 0xd6, &(0x7f0000000e00)=""/214, 0x40f00, 0x2, '\x00', r7, 0x17, r11, 0x8, &(0x7f0000001100)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1302, 0xffffffffffffffff, 0x3, &(0x7f0000001200)=[r6, r12, r1, r8, r1, r13, r8, r14, r15, r0], &(0x7f0000001240)=[{0x1, 0x2, 0xd, 0x1}, {0x3, 0x5, 0x2, 0x4}, {0x1, 0x4, 0xe, 0x1}], 0x10, 0x2cd5db37}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x17, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0xdd6, 0x18, &(0x7f0000000980)=""/24, 0x0, 0x0, '\x00', r9, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x0, 0xe, 0x3}, 0x10, r10, 0xffffffffffffffff, 0x6, &(0x7f0000000a80)=[0xffffffffffffffff, r6], &(0x7f0000000ac0)=[{0x3, 0x5, 0x4, 0x93800382a6105433}, {0x3, 0x5, 0xc, 0xa}, {0x4, 0x2, 0x0, 0x1}, {0x0, 0x2, 0xb, 0xa}, {0x3, 0x2, 0xd, 0xc}, {0x1, 0x2, 0x10000, 0xc}], 0x10, 0x9}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1e, 0x4, 0x8, 0xfffffffd, 0x0, 0xffffffffffffffff, 0x728, '\x00', r9}, 0x50)
r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r16, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.153695827s ago: executing program 2 (id=3710):
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0xa6d}, 0x0, 0xa, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x8e0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002340)='pids.current\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x2005, 0x0, 0x51, 0x3, 0x0, 0x4, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6349363006"], 0xfdef) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x200000000000006, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5452, &(0x7f00000006c0))
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) (async)
recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@ax25={{0x3, @default}, [@rose, @rose, @remote, @remote, @remote, @netrom, @rose, @bcast]}, 0x80, &(0x7f0000001780)=[{&(0x7f00000003c0)=""/4095, 0xfff}, {&(0x7f00000001c0)=""/215, 0xd7}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/32, 0x20}, {&(0x7f00000014c0)=""/221, 0xdd}, {&(0x7f00000015c0)=""/214, 0xd6}, {&(0x7f0000002280)=""/186, 0xba}], 0x1ac2e15d3024dac0, &(0x7f00000021c0)=""/148, 0x94}, 0x2) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000001980)}, 0x10) (async)
r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x80, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async)
r6 = socket$kcm(0xa, 0x2, 0x0)
close(r6) (async)
socket$kcm(0xa, 0x3, 0x73) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffed1}, 0x70)
setsockopt$sock_attach_bpf(r6, 0x29, 0x37, &(0x7f0000000100)=r7, 0x120) (async)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000002600)=@l2tp6={0xa, 0x0, 0x8, @loopback, 0x2, 0x1}, 0x80, 0x0}, 0x4008040)

2.929958087s ago: executing program 1 (id=3713):
r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x70, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f0000000580)=""/250, 0x40f00}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100))
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000d62c005401000000000000005aa7b755cbdbeb0300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3db00f6b8267e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f01000e97", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r5)
ioctl$SIOCSIFHWADDR(r5, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast})
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={0x0, 0x0, <r6=>0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r6, 0x4)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x200003}, 0x50)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000800)=r2}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, <r10=>0xffffffffffffffff}, 0x4)
r11 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r12=>0xffffffffffffffff})
recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r13=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r11, 0x84, 0x17, &(0x7f0000000000)=r13, 0x10)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
write$cgroup_pid(r14, &(0x7f0000000000), 0x2a979d)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50)
r16 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r16)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xf, 0x0, 0x2, 0x3, 0x10000}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x5, 0x1, 0x2, 0x1}, 0x10, r6, 0x0, 0x1, &(0x7f0000000940)=[r7, r8, r9, r4, r10, r3, r13, r14, r15, r16], &(0x7f0000000980)=[{0x5, 0x3, 0x7, 0x5}], 0x10, 0x6}, 0x94)

2.460747974s ago: executing program 3 (id=3715):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1ff, 0x7}, 0x806, 0x4, 0x8, 0x0, 0x40000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], <r2=>0x0, 0x20, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYRES16=r0, @ANYRES32=r1, @ANYRES8=r3, @ANYBLOB="855fa245092608215109b5bcce6e7ce05ef4e1814cf476abb50f48d8f2304e40c8fc9167d2bcb6a632fa85c738069649de09752efca938422ba2c6e1841adc3a6d15b8b765976eb3e31dcb1ffda33ae2e3d5ad1125353e709295cf327c682f4a7c81cfe7057781be67e7fefbe38c263225cbc293837132b780bad5e8c14d08b1d99538d35a79ea0740f8b0570db2b480833cf79584d32df94561b7e40356e2788dc20bf90bf3b355024149c0a666351002da7ab656e8d966e20f7c7a66f18899a5e869c4f5714b6ebcff0cdbfeebe96ded7f6185c2d23269e40c2196068f24cb3db11466d07259cb1c8d94bb412a8114", @ANYRES64=r2, @ANYRES64=r3], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.390518282s ago: executing program 0 (id=3716):
perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2}, 0xc1a2, 0x1000000, 0xc, 0x5, 0x0, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pB    \x00'}, 0x20) (async)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), &(0x7f0000000280)='%pB    \x00'}, 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r0, 0x37, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=<r1=>r0, 0x37, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0]}, 0x40)
perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x2018, 0xf0, 0x80000000, 0x4, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1e00000000000000ca0000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES64=r1, @ANYRES32, @ANYBLOB="00000000000000daf9adb826a11b00000000"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYBLOB="49f0302ebfb9cd510b9ec5d37a46088fb60f9cb9a24e71ae01254f86aa36ea5a93a0e48e36080000000000000013", @ANYBLOB="00000000000000002702000014000000b7030000ffff0000850000009c000000bf0900000000000155090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x86}, 0x94) (async)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYBLOB="49f0302ebfb9cd510b9ec5d37a46088fb60f9cb9a24e71ae01254f86aa36ea5a93a0e48e36080000000000000013", @ANYBLOB="00000000000000002702000014000000b7030000ffff0000850000009c000000bf0900000000000155090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x86}, 0x94)
r3 = socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6753, 0x8}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r2, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000880), &(0x7f00000008c0)=[0x0, 0x0], <r4=>0x0, 0xf6, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000380), &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x4, 0x9, 0x7}, 0x10, r4}, 0x94)
r5 = getpid()
r6 = perf_event_open$cgroup(&(0x7f0000000600)={0x2, 0x80, 0x1b, 0xc, 0xfa, 0x7, 0x0, 0x3962, 0x40401, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_config_ext={0x2e9a7c09, 0xfffffffffffffffd}, 0x802, 0x3, 0xfffffffe, 0x7, 0x172, 0x5, 0x8000, 0x0, 0x7}, r1, 0xd, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r5, r6, 0x0, 0x3, &(0x7f0000000100)='\x00\x00\x00'}, 0x30)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x8010)
socket$kcm(0x10, 0x2, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r8 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10061) (async)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10061)
syz_clone(0x400c0000, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f"], 0xfe33) (async)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005f00071b189da80400008000000000af1f"], 0xfe33)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) (async)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff5000009000000000000000000ff003b00000011cd4540", 0x30}], 0x1}, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c25a6d5b02f3af865fe8007000000007afefff5000009000000000000000000ff003b00000011cd4540", 0x30}], 0x1}, 0x0)

2.389067282s ago: executing program 2 (id=3717):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x1e, 0x12, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x67a, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@alu={0x0, 0x0, 0x1, 0x5, 0xe52d9648b3ddfe60, 0x2, 0xffffffffffffffff}, @generic={0x7, 0x7, 0x7, 0x7fff, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xcf, '\x00', 0x0, 0x24}, 0x94)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000780)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea6f464160af36514001ac00800020004000200060006000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x248, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000, 0x10001}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$kcm(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, 0xfffffffffffffffe, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sched_cls}, 0x94)
socketpair(0x23, 0x1, 0x0, &(0x7f0000000000))
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000060000001000000006000084ffff00000600000003000000050000001000000000000000000c00000100000005000000000001000f00000003000000020000000b0000000500000001000000010000000500000046430000090000000000000c030000000c0000000300000500fcffff0800000001000000ff0300000000000001000000400000001000000005000000040000000800000000008adfb043e81d7d2f90f449000a03000000000000000000000a01000000005f2e"], &(0x7f00000003c0)=""/30, 0xc6, 0x1e, 0x1, 0xa72}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005e1e6e71000000009500000000000000bf91000000000000b7020000010000008500005e10000000b70000000000000095000000000000001e4f42d51e3d8e46f9cda63704c292c621e3841a45bd23a9aaccf4334d4f81e0dc188a3e5939007db60a33c798cb2ab06a7075aadbf85b761ade61735dcbcc743510a9661369ae7827fd6ee8bc246be6a5a2937ef5"], &(0x7f0000000280)='GPL\x00', 0x11, 0xb1, &(0x7f0000000880)=""/177, 0x41000, 0x40, '\x00', 0x0, @cgroup_sysctl, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a40), 0x0, 0x10, 0xff}, 0x94)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="644f68aa53587974172e1dcb11d313570f149becd088a0c4da68e18ef4ad7d1ec2175579ff60d0333e202c2b342f123649e59575deedc2a624740ea45868aa3068a7234a88efbd11db0cff0de1cf113f07e95638414d35e5a1ed3f5370f8963ee11ccde9b43b21e79f04021a87b42d224b11679fc33816e691bbbeea17a28100c013c3d5d64d4c3f545adb9a118ab44e2de54d111451d28d", 0x98}, {&(0x7f0000000340)="8164882ecf555b902cde3b5a1cc107f07cb6caf234e0e7d22f84d1d3c4315085d0a92de758b9bd67c59fba3e8f3fe8ba7f21fa1658310465fcdacc247f6ad94b85bd150600038491d149016fc3fda1b432d53b94", 0x54}], 0x2, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xb0}, 0x4000080)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000800)=""/209, 0xd1, <r6=>0x0, &(0x7f0000000740)}}, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x29, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x730c, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x5, 0x8, 0x2, 0x1, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80000000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0xff, 0x6f, &(0x7f0000000580)=""/111, 0x41000, 0x2, '\x00', 0x0, 0x1b, r5, 0x8, &(0x7f0000000640)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, 0x0, 0x7, &(0x7f0000000980)=[r2, r2, r2, r2, r2], &(0x7f00000009c0)=[{0x5, 0x4, 0xe, 0xa}, {0x4, 0x3, 0x3, 0x9}, {0x3, 0x5, 0xa, 0x3}, {0x4, 0x2, 0x8, 0x9}, {0x3, 0x2, 0x1, 0x9}, {0x1, 0x5, 0x4, 0x5}, {0x3, 0x1, 0x4}], 0x10, 0x10001}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpu.max.burst\x00', 0x2, 0x0)

2.296128126s ago: executing program 3 (id=3718):
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
openat$cgroup_subtree(r1, &(0x7f0000000140), 0x2, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
r2 = socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x6, 0x1e, &(0x7f0000000500)=r4, 0x4) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000180)={'lo\x00', @multicast}) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000ef00000073802cef0aabb5e600000f97615f00610000"], &(0x7f0000000800)=""/147, 0x21, 0xfffffffffffffe2e, 0x1, 0xffffffff}, 0x28)
perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (rerun: 32)
ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000080))

2.113374333s ago: executing program 0 (id=3719):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='\b', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x810, 0x400000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000003c0)={&(0x7f0000000940)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000800)=""/260, 0x104}], 0x1}, 0x40011f02)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1400, 0x8, 0x80, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x18345fb3, 0x0, 0x4000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x40, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x3, 0x0, 0x1, 0x767, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10002, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0}, 0x300080c1)
recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12)
socket$kcm(0xa, 0x1, 0x106)
sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='>', 0x1}], 0x1}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000002d0000008500000023000000950000000000000040a125a183ef2a4bf09cec985cb2b93abfe8c42e88bce57c110ecf2dbb30bdf7c8b9a63f326f8f1c5684d5e2c4ccc9ddb5a08acb9524e96efeeff7ff1d00b75235edd5932ec62389b1334213cc341bdb1e81a133f2b44e002c0300000000000000eda577ba1b8f8f22437bacd89a49b0b8fb1fe3bfe02e95143fce"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc)
sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}, 0x41)
r5 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff)

1.908584067s ago: executing program 1 (id=3720):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0x9, 0x6c4bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r2, 0x2e, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)}, 0x40)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000791000000028b700c3000000000000009500000000000000f31bcbf547ddbfc88fb22384b622548874025df1026755c83b884844f2df23ca8e5e6119d174eed04aa12d5e8ad3da7547c6"], &(0x7f0000000100)='GPL\x00', 0x2}, 0x94)

1.907579187s ago: executing program 2 (id=3721):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000180)}, 0xffffffffffffff6e)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\v\x00'], 0x50)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
close(r5)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180))
ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f00000002c0))
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7)
r8 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000003640)={0x5, 0xb, &(0x7f0000003580)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x98b}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)=ANY=[])
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x80, 0xc, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x2f9, 0x5865, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28)
setsockopt$sock_attach_bpf(r0, 0x107, 0xa, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4020000000000006111480000000000850000008b0000009500000000bd158c"], &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21)

1.803060769s ago: executing program 0 (id=3722):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x6, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x10, 0x0, r0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0xe, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea1", 0x0, 0xefdf, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0xfffffdfd, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000002c0), 0xc}, 0x10c002, 0x89, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x200000000000002, 0x300)
socket$kcm(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x3, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4)
sendmsg$inet(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040)
sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x19, &(0x7f00000000c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0xc0c1)
r5 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x1, 0x0, 0x0, 0x8, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x95, 0xb}, 0x0, 0x32, 0x43a1bd76, 0x7, 0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
r7 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x4, 0x8, 0xc0, 0x0, 0x25f, 0x4000, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xe1a, 0x6, @perf_bp={&(0x7f0000000140), 0x4}, 0x2ac04, 0x0, 0x0, 0x8, 0x8000000000000001, 0xa, 0x1400, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xc, r1, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r7, 0x4008240b, &(0x7f00000003c0)={0x4, 0x80, 0x5, 0x7, 0x6, 0x6c, 0x0, 0x4, 0x80400, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x7, 0x100000000}, 0x10000, 0x5e44, 0xdedf, 0x6, 0xc, 0x4, 0x3, 0x0, 0x0, 0x0, 0x18e})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x3, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)

1.734707867s ago: executing program 1 (id=3723):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0xfffffcf4}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x3}, 0x12022)
recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
r3 = openat$cgroup_ro(r2, &(0x7f0000000d00)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000010000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000060000000000000000000000185a000006000000000000000000000085100000080000001d7268d7f0ffffff8520000002000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000d40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xd, 0x6}, 0x10, 0x10f2e, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000dc0)=[{0x5, 0x3, 0x2, 0x1}, {0x3, 0x5, 0x10, 0x6}, {0x3, 0x1, 0x1, 0xf}, {0x5, 0x1, 0x7, 0x4}], 0x10, 0x1}, 0x94)
r4 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x80, 0x7, 0xf, 0x0, 0x1, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x40, 0x6}, 0x1042, 0x9, 0x1, 0x9, 0xbc, 0x10001, 0x2, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0xb)
perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x7, 0x6, 0x1f, 0x8, 0x0, 0xfffffffffffffffa, 0x800, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x2, 0x3}, 0x1000, 0x7fffffff, 0x8, 0x5, 0x3c412b40, 0x0, 0x577, 0x0, 0xfff, 0x0, 0xffff}, r3, 0x11, r4, 0x1)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x364, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x10, 0x400000002, 0x0) (async)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4113, 0xfffffcf4}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000000340)=""/176, 0xb0}], 0x3}, 0x12022) (async)
recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) (async)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) (async)
socket$kcm(0x2, 0x200000000000001, 0x106) (async)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) (async)
openat$cgroup_ro(r2, &(0x7f0000000d00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000010000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000060000000000000000000000185a000006000000000000000000000085100000080000001d7268d7f0ffffff8520000002000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000d40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xd, 0x6}, 0x10, 0x10f2e, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000dc0)=[{0x5, 0x3, 0x2, 0x1}, {0x3, 0x5, 0x10, 0x6}, {0x3, 0x1, 0x1, 0xf}, {0x5, 0x1, 0x7, 0x4}], 0x10, 0x1}, 0x94) (async)
perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x2, 0x80, 0x7, 0xf, 0x0, 0x1, 0x80, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x40, 0x6}, 0x1042, 0x9, 0x1, 0x9, 0xbc, 0x10001, 0x2, 0x0, 0x10000, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0xb) (async)
perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x7, 0x6, 0x1f, 0x8, 0x0, 0xfffffffffffffffa, 0x800, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x2, 0x3}, 0x1000, 0x7fffffff, 0x8, 0x5, 0x3c412b40, 0x0, 0x577, 0x0, 0xfff, 0x0, 0xffff}, r3, 0x11, r4, 0x1) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a33120800", 0x0, 0xbffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)

1.274945086s ago: executing program 3 (id=3724):
r0 = socket$kcm(0x2, 0x5, 0x2)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"})
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000100)={r0})
sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1411e0000001000000002400000000000000000000000700000044140771ac1414aa00000000ac14141d000000050000000014000000000000001b00000001000000090000000000000052dcc72f4c52da05e95d5184bdcd9130bc132aa4795cac23fb9dc9bf9b751589905b85a1ab7708872357fd28ca22fd3547e7481fb1ee4ef42aecf7b2b2a4a433b47e4f49a344e7a4ed576fb733b72297ce08ca711508a426a794980514e7f0"], 0x60}, 0x200040c4)
bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8)

1.274240765s ago: executing program 1 (id=3725):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESDEC], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f00000001c0)="ff214b", &(0x7f00000006c0)=""/159}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x38, 0x0, 0x0, 0x32, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRESDEC=r2, @ANYRES8], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000040040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x3)
perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0xd, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5)
syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000500)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d0300000000000000000000011000000080000000000000000000000300000000010000"], 0x0, 0x4e}, 0x28)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[], 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x0, 0x0)
r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000600)=ANY=[@ANYBLOB="2b63707520f1796a0a96b5aaa356499c67417858ac6abf8e4908bb3d87ba9bd4d216e181830d1af715eefa10b586114b5272a603f7f95caa2a74f1376e25f8468513e1a3ed32ee8ec5b69aa1a1c7614922bba3ac897c2857e2578d82e94668a0e9f827ccff9cf0abf53206930079645c2371009970608c87cc7a67de8e8fbcd205df2a0fea90ea091fae"], 0x5)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000400)={r2, 0x0, 0xc6, 0x0, &(0x7f00000008c0)="791b5cbd9543057476c254d749681eef9f656db2a9cf9f90d654c5991694441c8886b8396706aeef006d2703aaebde6c6f7873ac70fd9eb6478a0dcab75f12228adbf869803175a3bf4972d0b171579ba9a9f2775ac8db72a646b987f875d32133079bdb95d35e8fcfda4edf2f1122cf2f21d3a52766c9a10a500057b142d04cb964060dbadba46f22e6946dae898777011e6eec21b522d0d7acbe6022be51daefd34643760c86cfecc00cde21e063b7e4501e5e552c4bde80d8d944418fe01521c3c633d07d", 0x0, 0x8001, 0x0, 0xce, 0x0, &(0x7f00000009c0)="261339ae52644e3f43a5209fd4fe0eded2f9b85e4b0b6371d62ce3390057c349efa1c5d8df7603d42c97ffd784310e79d58e6683b849c640bacbbcbe9fe537d3e3e8e9cf761ed6b96b07cb4142ba450666ecee67b92be9b78763d11d78d6fdc9923dba54d05f049f144b9dff1e5b822fc45cd45d0a9a6fbaa17b8cf99bab77f1b163cac26156b229c4bfc4330fc53a8e42386f89911060b8da8be5226a00a226ff29bc678a82ee2fb1c127090e31b215ee7eb5b6025cfdb4f677dd5fa2060691a6bb9bb516584436142e91ae1005", 0x0, 0x2, 0x0, 0x4}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r8, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="2d63707520a2fbfdbd963e6d6d64aa34d4236f3a28a3c4cecafd11885981b6388708f0789613be46592d079c548d64"], 0x5)

1.155750634s ago: executing program 3 (id=3726):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x2f, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94)
ioctl$TUNSETIFF(r3, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
socket$kcm(0xa, 0x3, 0x3a) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
r5 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x2000003, @local, 0x1}, 0x80, &(0x7f0000002540)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x48044)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async)
r7 = socket$kcm(0x10, 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=0xffffffffffffffff, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) (async)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a02000000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000009ffffef00000000000024", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00), 0x0, 0xf2, &(0x7f0000000680), 0x0, 0x10, &(0x7f00000006c0), &(0x7f0000000840), 0x8, 0x15, 0x8, 0x8, &(0x7f0000000880)}}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000006000000080000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000000000000000000000000cea563ac1a03c65a983374b1558185241e08727a0cc60f6c1a43716355635047b361f4165a26eb35ff29aed7083fb3d98c37cefd2e63876a4e3736090037624d6836dd834679f24d72e824b27d105f5222ab", @ANYRES32=r9, @ANYRES32, @ANYBLOB="fdffffff00"/28], 0x50)

1.132037541s ago: executing program 2 (id=3727):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095", @ANYRESOCT, @ANYRES64=0x0], 0x0, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x4ecb14dfdbcba6a8, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

966.321801ms ago: executing program 2 (id=3728):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) (async)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4)
sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0)

875.457155ms ago: executing program 1 (id=3729):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000700)={&(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/26, 0x1a}, {&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f0000000500)=""/201, 0xc9}, {&(0x7f0000000400)=""/7, 0x7}, {&(0x7f0000000440)}, {&(0x7f0000000600)=""/56, 0x38}], 0x8, &(0x7f00000006c0)=""/6, 0x6}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000300)=""/112, 0x70}, {0x0}, {0x0}], 0x3, &(0x7f0000000a40)=""/190, 0xbe}, 0x2020)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r0}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x29}, 0x94)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x1)
r9 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r9, r8})
sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)

777.031188ms ago: executing program 0 (id=3730):
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) (async)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000049"], 0xfe33) (async)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2d, 'freezer'}]}, 0x9)

693.098523ms ago: executing program 2 (id=3731):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000050d2f6b69800000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d00000000060000000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b87, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5d, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x3b, 0x0, 0xffffffc2}, 0x4000804)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) (async)
recvmsg(0xffffffffffffffff, 0x0, 0x21)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)={'lo\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) (async)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000400000008230000ad00000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0d0000000200000004000000034000fb04000000", @ANYRES32=r4], 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0x28, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/112, 0x70}, 0x42) (async)
r5 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x20000010) (async)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async)
close(0xffffffffffffffff) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x69, 0x7fffffff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb0f}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

606.480188ms ago: executing program 3 (id=3732):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000003600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000080)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="87fc5d85da21530562070095c108", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x42}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x5f, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r1}, 0x8)

601.524596ms ago: executing program 0 (id=3733):
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x11, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180000001b000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000080000000000000055090100000000009500004000000000852000000500000085000000d4000000bf91000000000000b7020000010000008500000000b7000000000000009500000000000000db210b4809b5b048fda1b33355ae9df76daa011d444639481a2de0e41afcd397215eb852756a11e7027938c96a1447f5b4f2a36f2f686dae"], &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0x4, 0x8, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001040)=[0xffffffffffffffff], &(0x7f0000001080)=[{0x5, 0x3, 0x4, 0x8}, {0x1, 0x4, 0x7, 0x6}, {0x3, 0x7, 0x10, 0x4}, {0x2, 0x3, 0x4, 0x7}, {0x5, 0x1, 0x5}, {0x2, 0x0, 0x2, 0x3}, {0x1, 0x2, 0xc}], 0x10, 0x2}, 0x94) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005fc54301291eaf9175cb624fc76d13b3cae6c818c3cba03aef726df5d833052ac1b7d51510bf076aa2101f984166e4726c9255e6b729e6ce680a14b73bea53ccd8ec10d"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async, rerun: 32)
close(0xffffffffffffffff)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000011c0)={r1}, 0xc)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(r4, 0x400454cd, 0x30a) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) (async, rerun: 64)
socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (rerun: 64)
ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) (async)
socket$kcm(0x2, 0xa, 0x2)
close(0x3) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) (async)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000001c0)=""/158, 0x9e}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000b80)=""/226, 0xe2}, {&(0x7f00000002c0)=""/41, 0x29}, {&(0x7f0000000c80)=""/209, 0xd1}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000d80)=""/202, 0xca}], 0x8}, 0x10001)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@bloom_filter={0x1e, 0x1, 0x1, 0xfffffff8, 0xb00, 0xffffffffffffffff, 0x7ab3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x3}, 0x50) (async)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async)
recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0)

0s ago: executing program 3 (id=3734):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000)
recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@sco, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/146, 0x92}, {&(0x7f0000000140)=""/246, 0xf6}], 0x2, &(0x7f0000000440)=""/129, 0x81}, 0x3)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e})
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x90a2, 0xca, 0x1, 0x6, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
close(r3)
r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x8, 0x221, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x80, 0x0, 0x0, 0x4, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1082}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r4], 0x12)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000940)={0x2, &(0x7f0000000340)=[{0x28, 0x7, 0x0, 0xfffff03c}, {0x6, 0x7, 0x5, 0xffffff7f}]})
r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r8, 0x0, 0x33, 0x63, &(0x7f00000003c0)="5d030ff7a99b50373512647ad6e972c01c9859eb2e619febcf948845899b5f85a277cc70425346e27527a5906b72514c819c91", &(0x7f0000000500)=""/99, 0x0, 0x0, 0x85, 0xb2, &(0x7f0000000580)="a4ff212b88b22cf97b838ce876514792c8c4d3c0a50af6df95d34da3c24f7ca274ba69f3afaf73d77ed0c249c2b126ce02785f6cd39625849c2ca9ea8b1df095f4e3206e9a63fe86ee873f20c17ed1b85fb27117c59a7ee4a57839b25f289c39d1254e7dfd20203c6832032e075a8e7b2107d7d143548f57d6b4e25984953cdb1dee603c79", &(0x7f0000000640)="5091011b5bb3f6b6ac706c202fd01bcab3b42ef29c79413e59aa2daf69da62f84ea0ece141f0ce7ab562574663d8e4b0ab2bae408b1e4ee780fe6e7d4c8be12eff9cacdb18572647f2973974713256d7bed8f25f3bc91aa996cbf453067c9ea352e2f3373d895709175a2bdc20edd9af6b82471d4dc88ab059951fdbd041a237982e500a2c9d2e20774ef09f7afd729a2dceb716e7c14356449b63c5f36eb8e9275b9f87474024d4470d2cbab46219d4aed6", 0x66ee13297f8a824e, 0x0, 0xa}, 0x50)

kernel console output (not intermixed with test programs):

length.
[  591.618290][T14596] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2378'.
[  591.638960][T14599] netlink: 'syz.2.2378': attribute type 11 has an invalid length.
[  591.969682][T14605] netlink: 'syz.0.2380': attribute type 21 has an invalid length.
[  592.017620][T14605] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2380'.
[  592.042294][T14609] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2380'.
[  592.052286][T14609] openvswitch: netlink: Tunnel attr 0 has unexpected len 2491 expected 8
[  592.559155][T14621] netlink: 'syz.1.2382': attribute type 21 has an invalid length.
[  592.599519][T14621] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2382'.
[  592.681432][T14621] netlink: 'syz.1.2382': attribute type 4 has an invalid length.
[  592.708480][T14623] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2385'.
[  592.738704][T14621] netlink: 'syz.1.2382': attribute type 5 has an invalid length.
[  592.752048][T14623] openvswitch: netlink: Flow key attr not present in new flow.
[  592.789738][T14621] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2382'.
[  593.400919][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  593.418991][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  593.438083][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  593.476197][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  593.486885][ T5784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  593.495996][ T5784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  594.218339][T14640] netlink: 'syz.3.2390': attribute type 21 has an invalid length.
[  594.570082][T14628] chnl_net:caif_netlink_parms(): no params data found
[  594.629251][T14650] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2393'.
[  595.158910][T14659] netlink: 'syz.3.2395': attribute type 10 has an invalid length.
[  595.188378][T14660] netlink: 'syz.3.2395': attribute type 9 has an invalid length.
[  595.219862][T14660] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2395'.
[  595.246474][T14659] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.275009][T14659] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.285094][T14659] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.308536][T14659] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.596379][ T5784] Bluetooth: hci1: command tx timeout
[  595.902629][T14628] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.920461][T14628] bridge0: port 1(bridge_slave_0) entered disabled state
[  595.939911][T14628] bridge_slave_0: entered allmulticast mode
[  595.955356][T14628] bridge_slave_0: entered promiscuous mode
[  596.032043][T14628] bridge0: port 2(bridge_slave_1) entered blocking state
[  596.042072][T14628] bridge0: port 2(bridge_slave_1) entered disabled state
[  596.058560][T14628] bridge_slave_1: entered allmulticast mode
[  596.082634][T14628] bridge_slave_1: entered promiscuous mode
[  596.124522][T14662] netlink: 'syz.3.2395': attribute type 9 has an invalid length.
[  596.166968][T14628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  596.167871][T14662] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2395'.
[  596.186579][T14628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  596.331963][T14628] team0: Port device team_slave_0 added
[  596.350279][T14628] team0: Port device team_slave_1 added
[  596.445289][T14628] batman_adv: batadv0: Adding interface: batadv_slave_0
[  596.480756][T14628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  596.519303][T14628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  596.562049][T14628] batman_adv: batadv0: Adding interface: batadv_slave_1
[  596.575337][T14628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  596.622640][T14628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  596.685792][   T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.715715][T14685] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2401'.
[  596.815975][   T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.937293][   T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  596.989820][T14628] hsr_slave_0: entered promiscuous mode
[  597.004249][T14628] hsr_slave_1: entered promiscuous mode
[  597.022539][T14628] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  597.033535][T14628] Cannot create hsr debugfs directory
[  597.096691][   T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  597.677601][ T5784] Bluetooth: hci1: command tx timeout
[  597.854992][   T60] tipc: Left network mode
[  598.579858][T14723] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2408'.
[  598.596346][T14723] bridge_slave_1: default FDB implementation only supports local addresses
[  599.374693][T14628] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  599.420337][T14628] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  599.512828][T14628] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  599.531075][T14628] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  599.563395][T14739] netlink: 'syz.2.2412': attribute type 10 has an invalid length.
[  599.605129][T14739] team0: Device veth1_vlan failed to register rx_handler
[  599.756978][ T5784] Bluetooth: hci1: command tx timeout
[  599.899662][T14751] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2414'.
[  600.618786][T14628] 8021q: adding VLAN 0 to HW filter on device bond0
[  600.969737][T14628] 8021q: adding VLAN 0 to HW filter on device team0
[  600.996411][T14769] netlink: 'syz.3.2418': attribute type 21 has an invalid length.
[  601.005117][T14769] netlink: 'syz.3.2418': attribute type 20 has an invalid length.
[  601.124068][ T8007] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.131378][ T8007] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.314672][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.321978][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.499406][T14774] netlink: 'syz.1.2419': attribute type 10 has an invalid length.
[  601.788464][T14796] netlink: 'syz.3.2423': attribute type 153 has an invalid length.
[  601.806337][T14796] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2423'.
[  601.821158][T14774] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  601.835957][ T5784] Bluetooth: hci1: command tx timeout
[  601.865855][T14778] netlink: 'syz.1.2419': attribute type 6 has an invalid length.
[  601.873686][T14778] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2419'.
[  602.052270][T14794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2424'.
[  602.573870][T14809] dummy0: entered promiscuous mode
[  602.579372][T14809] dummy0: entered allmulticast mode
[  602.864547][T14628] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.025036][T14628] veth0_vlan: entered promiscuous mode
[  603.068190][T14628] veth1_vlan: entered promiscuous mode
[  603.180875][T14628] veth0_macvtap: entered promiscuous mode
[  603.202962][T14628] veth1_macvtap: entered promiscuous mode
[  603.252607][T14628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  603.270920][T14628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.284717][T14628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  603.301496][T14628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.314354][T14628] batman_adv: batadv0: Interface activated: batadv_slave_0
[  603.372883][T14628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  603.385260][T14628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.402698][T14628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  603.414016][T14628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  603.432940][T14628] batman_adv: batadv0: Interface activated: batadv_slave_1
[  603.461013][T14628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  603.482002][T14628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  603.493747][T14628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  603.506206][T14628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.076520][   T60] team0: left allmulticast mode
[  604.081988][   T60] C: left allmulticast mode
[  604.105023][   T60] team_slave_1: left allmulticast mode
[  604.121517][   T60] team0: left promiscuous mode
[  604.132942][   T60] C: left promiscuous mode
[  604.142081][   T60] team_slave_1: left promiscuous mode
[  604.151350][   T60] bridge0: port 1(team0) entered disabled state
[  604.189673][   T60] hsr_slave_0: left promiscuous mode
[  604.200671][   T60] hsr_slave_1: left promiscuous mode
[  604.231954][T14823] netlink: 'syz.1.2430': attribute type 1 has an invalid length.
[  604.247447][T14823] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2430'.
[  604.263559][   T60] veth1_macvtap: left allmulticast mode
[  604.280275][   T60] veth0_macvtap: left promiscuous mode
[  604.307513][   T60] veth1_vlan: left promiscuous mode
[  604.313298][   T60] veth0_vlan: left promiscuous mode
[  605.609937][   T60] team0 (unregistering): Port device team_slave_1 removed
[  605.685004][   T60] team0 (unregistering): Port device C removed
[  606.341811][T14826] syzkaller0: entered promiscuous mode
[  606.347440][T14826] syzkaller0: entered allmulticast mode
[  606.538936][ T7286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.547841][ T7286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.990979][T14846] netlink: 'syz.1.2431': attribute type 3 has an invalid length.
[  607.999056][T14846] netlink: 'syz.1.2431': attribute type 1 has an invalid length.
[  608.007557][T14846] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.2431'.
[  609.695422][T14842] netlink: 'syz.3.2433': attribute type 1 has an invalid length.
[  609.706127][T14842] netlink: 'syz.3.2433': attribute type 4 has an invalid length.
[  609.714378][T14842] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2433'.
[  609.795486][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  609.840841][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  610.186995][T14861] netlink: 'syz.3.2437': attribute type 13 has an invalid length.
[  610.205558][T14861] netlink: 'syz.3.2437': attribute type 58 has an invalid length.
[  610.249561][T14861] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2437'.
[  610.318427][T14860] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2386'.
[  610.475912][T14864] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  610.483203][T14864] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode
[  610.966583][T14870] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2440'.
[  611.118470][T14877] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2442'.
[  611.288280][T14275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  611.299549][T14275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  611.309265][T14275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  611.320528][T14275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  611.329851][T14275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  611.337766][T14275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  611.489644][ T8009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.670578][ T8009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.823195][ T8009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  611.994678][ T8009] bond0: (slave netdevsim0): Releasing backup interface
[  612.006653][ T8009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  612.099150][T14892] delete_channel: no stack
[  612.104341][T14892] delete_channel: no stack
[  612.473449][T14882] syzkaller0: entered promiscuous mode
[  612.487541][T14882] syzkaller0: entered allmulticast mode
[  613.453506][ T5784] Bluetooth: hci0: command tx timeout
[  615.518514][ T5784] Bluetooth: hci0: command tx timeout
[  615.772375][T14903] netlink: 'syz.0.2449': attribute type 10 has an invalid length.
[  615.791554][T14903] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  615.838702][T14920] mac80211_hwsim hwsim30 wlan1: entered promiscuous mode
[  616.009229][T14879] chnl_net:caif_netlink_parms(): no params data found
[  616.356495][T14942] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.364187][T14942] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.376215][T14942] bridge0: entered allmulticast mode
[  616.423583][T14943] bridge_slave_1: left allmulticast mode
[  616.433308][T14943] bridge_slave_1: left promiscuous mode
[  616.442886][T14943] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.463693][T14943] bridge_slave_0: left allmulticast mode
[  616.471336][T14943] bridge_slave_0: left promiscuous mode
[  616.478036][T14943] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.570722][T14879] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.578650][T14879] bridge0: port 1(bridge_slave_0) entered disabled state
[  616.586305][T14879] bridge_slave_0: entered allmulticast mode
[  616.593944][T14879] bridge_slave_0: entered promiscuous mode
[  616.622011][T14945] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2458'.
[  616.631663][T14947] netlink: 'syz.2.2459': attribute type 21 has an invalid length.
[  616.641010][T14947] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2459'.
[  616.679732][T14948] netlink: 'syz.2.2459': attribute type 21 has an invalid length.
[  616.695074][T14948] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2459'.
[  616.722468][T14879] bridge0: port 2(bridge_slave_1) entered blocking state
[  616.732459][T14879] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.755970][T14879] bridge_slave_1: entered allmulticast mode
[  616.763499][T14879] bridge_slave_1: entered promiscuous mode
[  617.144719][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.190219][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  617.334063][T14968] C: renamed from team_slave_0 (while UP)
[  617.528322][T14968] netlink: 'syz.2.2464': attribute type 3 has an invalid length.
[  617.562310][T14968] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  617.602719][ T5784] Bluetooth: hci0: command tx timeout
[  617.868872][T14971] netlink: 'syz.0.2465': attribute type 10 has an invalid length.
[  617.976751][T14971] team0: Device ipvlan1 failed to register rx_handler
[  618.043030][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2465'.
[  618.100591][T14879] team0: Port device team_slave_0 added
[  618.188480][T14879] team0: Port device team_slave_1 added
[  618.616285][T14988] netlink: 'syz.2.2467': attribute type 21 has an invalid length.
[  618.625097][T14988] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2467'.
[  618.744456][T14988] netlink: 'syz.2.2467': attribute type 5 has an invalid length.
[  618.796394][T14988] netlink: 'syz.2.2467': attribute type 6 has an invalid length.
[  618.804293][T14988] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2467'.
[  619.290163][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.323134][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.403946][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.505871][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  619.526527][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.642622][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.695935][ T5784] Bluetooth: hci0: command tx timeout
[  620.784444][T14879] hsr_slave_0: entered promiscuous mode
[  620.846816][T14879] hsr_slave_1: entered promiscuous mode
[  620.891873][T14879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  620.926283][T14879] Cannot create hsr debugfs directory
[  624.734021][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  624.740545][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  624.781156][T15039] netlink: 'syz.3.2474': attribute type 41 has an invalid length.
[  625.017027][T15043] �: port 1(vlan0) entered blocking state
[  625.029584][T15043] �: port 1(vlan0) entered disabled state
[  625.060646][T15043] vlan0: entered allmulticast mode
[  625.066126][T15043] veth0_vlan: entered allmulticast mode
[  625.079138][T15043] vlan0: entered promiscuous mode
[  625.435127][ T8009] hsr_slave_0: left promiscuous mode
[  625.463192][ T8009] hsr_slave_1: left promiscuous mode
[  625.507601][ T8009] veth1_vlan: left allmulticast mode
[  625.514222][ T8009] veth1_vlan: left promiscuous mode
[  625.639967][T15056] netlink: 'syz.0.2480': attribute type 3 has an invalid length.
[  625.665881][T15056] netlink: 'syz.0.2480': attribute type 1 has an invalid length.
[  625.673794][T15056] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.2480'.
[  626.234269][ T8009] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  626.303601][ T8009] team0 (unregistering): Port device team_slave_1 removed
[  626.362666][ T8009] team0 (unregistering): Port device C removed
[  626.422627][ T8009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  626.747438][ T8009] team0 (unregistering): Port device dummy0 removed
[  626.815270][ T8009] bond0 (unregistering): Released all slaves
[  626.888288][T15059] netlink: 'syz.3.2481': attribute type 10 has an invalid length.
[  626.936330][T15058] netlink: 'syz.3.2481': attribute type 10 has an invalid length.
[  627.082838][T14879] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  627.139884][T14879] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  627.190613][T14879] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  627.219221][T14879] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  627.266918][ T5784] Bluetooth: hci3: unexpected event for opcode 0x0000
[  627.609327][T14879] 8021q: adding VLAN 0 to HW filter on device bond0
[  627.689562][T14879] 8021q: adding VLAN 0 to HW filter on device team0
[  627.715564][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.722878][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[  627.773977][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.781299][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.002559][T15090] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2489'.
[  628.888014][T15105] netlink: 'syz.3.2492': attribute type 9 has an invalid length.
[  628.940817][T15105] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2492'.
[  629.119912][T15114] netlink: 'syz.2.2494': attribute type 19 has an invalid length.
[  629.166924][T15114] netlink: 12736 bytes leftover after parsing attributes in process `syz.2.2494'.
[  629.785477][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.106664][T15168] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2495'.
[  630.365111][T14879] veth0_vlan: entered promiscuous mode
[  630.425506][T15168] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[  630.508016][T14879] veth1_vlan: entered promiscuous mode
[  630.618881][T14879] veth0_macvtap: entered promiscuous mode
[  630.635303][T14879] veth1_macvtap: entered promiscuous mode
[  630.674538][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.695859][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.713349][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.730206][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.741767][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  630.758115][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.780769][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.864156][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.916003][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.945913][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  630.966190][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  630.986430][T14879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  631.000333][T14879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  631.030580][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  631.064601][T14879] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  631.084915][T14879] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  631.104239][T14879] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  631.136718][T14879] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.277963][ T5784] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  631.287930][ T5784] Bluetooth: hci3: Injecting HCI hardware error event
[  631.296816][T14275] Bluetooth: hci3: hardware error 0x00
[  631.506868][ T9569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.613683][ T9569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.867535][T11937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.906282][T11937] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  632.590890][T15211] delete_channel: no stack
[  633.009234][T15221] netlink: 'syz.0.2504': attribute type 29 has an invalid length.
[  633.056325][T15221] netlink: 'syz.0.2504': attribute type 29 has an invalid length.
[  633.096805][T15221] netlink: 'syz.0.2504': attribute type 29 has an invalid length.
[  633.166730][T15231] netlink: 'syz.1.2506': attribute type 39 has an invalid length.
[  633.446586][T14275] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  633.512350][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  633.524132][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  633.532791][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  633.553295][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  633.561434][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  633.569100][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  634.021726][T15251] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  634.069405][T15251] batman_adv: batadv0: Removing interface: batadv_slave_0
[  634.123657][T15251] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  634.190732][T15251] batman_adv: batadv0: Removing interface: batadv_slave_1
[  634.733036][T15239] chnl_net:caif_netlink_parms(): no params data found
[  635.150799][T15239] bridge0: port 1(bridge_slave_0) entered blocking state
[  635.158253][T15239] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.165573][T15239] bridge_slave_0: entered allmulticast mode
[  635.173726][T15239] bridge_slave_0: entered promiscuous mode
[  635.183609][T15239] bridge0: port 2(bridge_slave_1) entered blocking state
[  635.191285][T15239] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.199536][T15239] bridge_slave_1: entered allmulticast mode
[  635.207561][T15239] bridge_slave_1: entered promiscuous mode
[  635.334260][T15239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  635.362658][T15239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  635.408278][T15239] team0: Port device team_slave_0 added
[  635.420579][T15239] team0: Port device team_slave_1 added
[  635.540728][T15239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  635.566143][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.676378][ T5784] Bluetooth: hci2: command tx timeout
[  635.680589][T15239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  635.704309][T15239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  635.712640][T15239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  635.739653][T15239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  635.770002][T15284] netlink: 'syz.0.2516': attribute type 3 has an invalid length.
[  635.789932][T15284] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2516'.
[  635.882988][T15239] hsr_slave_0: entered promiscuous mode
[  635.889698][T15239] hsr_slave_1: entered promiscuous mode
[  635.896726][T15239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  635.904358][T15239] Cannot create hsr debugfs directory
[  636.033963][T15290] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2518'.
[  636.393243][T15239] bond0: (slave netdevsim0): Releasing backup interface
[  636.541883][T15239] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  636.560189][T15239] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  636.573587][T15239] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  636.589890][T15239] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  636.690626][T15239] 8021q: adding VLAN 0 to HW filter on device bond0
[  636.725164][T15239] 8021q: adding VLAN 0 to HW filter on device team0
[  636.748308][ T9565] bridge0: port 1(bridge_slave_0) entered blocking state
[  636.755500][ T9565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  636.784142][ T9565] bridge0: port 2(bridge_slave_1) entered blocking state
[  636.791419][ T9565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  637.291635][T15239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  637.492108][T15239] veth0_vlan: entered promiscuous mode
[  637.546773][T15239] veth1_vlan: entered promiscuous mode
[  637.684465][T15239] veth0_macvtap: entered promiscuous mode
[  637.728806][T15239] veth1_macvtap: entered promiscuous mode
[  637.757924][ T5784] Bluetooth: hci2: command tx timeout
[  637.824140][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.855606][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.889043][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.912602][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.937713][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  637.948862][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.961354][T15239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  637.972855][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  637.984734][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  637.995225][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.007485][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.017845][T15239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  638.035354][T15239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  638.048021][T15239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  638.115938][T15239] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  638.131941][T15239] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  638.141088][T15239] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  638.150283][T15239] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  638.328104][T11937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.464283][T11937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.759305][ T1344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.866204][ T1344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.654589][T15325] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2526'.
[  639.669830][T15327] netlink: 'syz.3.2527': attribute type 21 has an invalid length.
[  639.699515][T15327] IPv6: NLM_F_CREATE should be specified when creating new route
[  639.836163][ T5784] Bluetooth: hci2: command tx timeout
[  640.211121][T15333] netlink: 'syz.2.2528': attribute type 10 has an invalid length.
[  640.511905][T15333] team0: Device vxcan1 is of different type
[  640.561585][T15310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2524'.
[  641.012566][T15344] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2533'.
[  641.056949][T15344] bridge_slave_1: default FDB implementation only supports local addresses
[  641.636255][T15353] netlink: 'syz.1.2534': attribute type 10 has an invalid length.
[  641.916122][ T5784] Bluetooth: hci2: command tx timeout
[  642.197437][T15353] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.206715][T15353] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.258058][T15353] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.265429][T15353] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.273093][T15353] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.280389][T15353] bridge0: port 1(bridge_slave_0) entered forwarding state
[  642.319223][T15353] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  643.161917][T15378] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2542'.
[  643.229516][T15378] openvswitch: netlink: Key type 29 is not supported
[  643.476532][T15378] pim6reg1: entered allmulticast mode
[  643.597398][T15371] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2541'.
[  643.871605][T15390] netlink: 'syz.1.2544': attribute type 33 has an invalid length.
[  643.912449][T15390] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2544'.
[  643.986278][T15390] `: renamed from team0 (while UP)
[  646.030407][T15415] netlink: 'syz.0.2549': attribute type 10 has an invalid length.
[  646.062653][T15415] bond0: (slave dummy0): Releasing backup interface
[  646.112289][T15415] team0: Port device dummy0 added
[  646.209000][T15420] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  652.094340][T15470] netlink: 'syz.3.2564': attribute type 10 has an invalid length.
[  652.107649][T15470] bridge0: port 2(bridge_slave_1) entered disabled state
[  652.115454][T15470] bridge0: port 1(bridge_slave_0) entered disabled state
[  652.157020][T15470] bridge0: port 2(bridge_slave_1) entered blocking state
[  652.164273][T15470] bridge0: port 2(bridge_slave_1) entered forwarding state
[  652.171968][T15470] bridge0: port 1(bridge_slave_0) entered blocking state
[  652.179267][T15470] bridge0: port 1(bridge_slave_0) entered forwarding state
[  652.215093][T15470] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  652.233178][T15474] netlink: 16174 bytes leftover after parsing attributes in process `syz.2.2565'.
[  652.254932][T15475] netlink: 'syz.2.2565': attribute type 10 has an invalid length.
[  652.282551][T15475] veth0_macvtap: left promiscuous mode
[  652.611588][T15491] netlink: 'syz.2.2570': attribute type 2 has an invalid length.
[  652.645436][T15491] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2570'.
[  652.802646][T15495] netlink: 'syz.2.2570': attribute type 2 has an invalid length.
[  652.837656][T15495] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2570'.
[  652.860081][T15501] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2572'.
[  652.894375][T15503] netlink: 'syz.3.2571': attribute type 11 has an invalid length.
[  652.909064][T15503] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2571'.
[  652.967750][T15482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2567'.
[  653.984874][T15517] netlink: 'syz.1.2575': attribute type 10 has an invalid length.
[  654.004203][T15517] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.011768][T15517] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.043545][T15521] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2575'.
[  654.264941][T15527] netlink: 'syz.2.2577': attribute type 10 has an invalid length.
[  654.280635][T15527] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.305896][T15527] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.580491][T15527] bridge0: port 2(bridge_slave_1) entered blocking state
[  654.591561][T15527] bridge0: port 2(bridge_slave_1) entered forwarding state
[  654.606953][T15527] bridge0: port 1(bridge_slave_0) entered blocking state
[  654.615442][T15527] bridge0: port 1(bridge_slave_0) entered forwarding state
[  654.930776][T15527] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  655.328787][T15541] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.2581'.
[  655.386986][T15541] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.2581'.
[  656.840731][T15562] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2586'.
[  657.229467][T15565] syzkaller0: entered promiscuous mode
[  657.255510][T15565] syzkaller0: entered allmulticast mode
[  660.944478][T15579] netlink: 'syz.0.2591': attribute type 39 has an invalid length.
[  661.070643][T15586] netlink: 'syz.1.2592': attribute type 21 has an invalid length.
[  661.812172][T15603] netlink: 'syz.2.2598': attribute type 29 has an invalid length.
[  661.937380][T15603] netlink: 'syz.2.2598': attribute type 29 has an invalid length.
[  661.958663][T15604] netlink: 'syz.2.2598': attribute type 29 has an invalid length.
[  661.976416][T15609] netlink: 'syz.2.2598': attribute type 29 has an invalid length.
[  661.987589][T15603] netlink: 'syz.2.2598': attribute type 10 has an invalid length.
[  662.070365][T15609] netlink: 'syz.2.2598': attribute type 29 has an invalid length.
[  662.634035][T15617] __nla_validate_parse: 1 callbacks suppressed
[  662.634079][T15617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2599'.
[  662.709862][T15623] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  662.718797][T15623] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode
[  662.736368][T15625] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2603'.
[  662.896783][T15625] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2603'.
[  662.936113][T15626] netdevsim netdevsim2 ������: renamed from netdevsim0 (while UP)
[  663.055633][T15631] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2605'.
[  663.288488][T15636] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.2606'.
[  663.407512][T15644] netlink: 'syz.3.2608': attribute type 8 has an invalid length.
[  663.415376][T15644] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2608'.
[  663.459580][T15645] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2607'.
[  664.341972][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2610'.
[  664.678882][T15663] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2613'.
[  665.201562][ T9565] hsr_slave_0: left promiscuous mode
[  665.224967][ T9565] hsr_slave_1: left promiscuous mode
[  665.232634][T15684] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.2620'.
[  665.296899][ T9565] veth0_macvtap: left promiscuous mode
[  665.302600][ T9565] veth1_vlan: left promiscuous mode
[  665.332844][ T9565] veth0_vlan: left promiscuous mode
[  666.451957][ T9565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  666.518039][ T9565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  666.583758][ T9565] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  666.895371][ T9565] bond0 (unregistering): Released all slaves
[  666.970526][T15697] netlink: 'syz.3.2622': attribute type 2 has an invalid length.
[  666.999926][T15696] mac80211_hwsim hwsim34 wlan0: left promiscuous mode
[  667.010336][T15696] mac80211_hwsim hwsim34 wlan0: left allmulticast mode
[  667.046059][T15699] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode
[  667.053208][T15699] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode
[  668.107054][T15708] �: port 1(vlan0) entered blocking state
[  668.123361][T15708] �: port 1(vlan0) entered disabled state
[  668.158428][T15708] vlan0: entered allmulticast mode
[  668.176555][T15708] veth0_vlan: entered allmulticast mode
[  668.199964][T15708] vlan0: entered promiscuous mode
[  668.208405][T15708] �: port 1(vlan0) entered blocking state
[  668.214668][T15708] �: port 1(vlan0) entered forwarding state
[  668.328054][T15713] netlink: 'syz.1.2628': attribute type 10 has an invalid length.
[  668.545264][T15713] `: Port device geneve1 added
[  669.135578][T15742] __nla_validate_parse: 1 callbacks suppressed
[  669.135597][T15742] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2634'.
[  672.547612][T15766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2644'.
[  672.661325][T15771] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2645'.
[  675.026116][T15793] netlink: 'syz.1.2651': attribute type 39 has an invalid length.
[  675.362928][T15791] netdevsim netdevsim0: Direct firmware load for � failed with error -2
[  675.419519][T15791] netdevsim netdevsim0: Falling back to sysfs fallback for: �
[  675.665123][T15810] netlink: 'syz.1.2655': attribute type 4 has an invalid length.
[  675.834545][T15817] netlink: 'syz.2.2656': attribute type 21 has an invalid length.
[  675.860405][T15817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2656'.
[  676.326562][T15832] netlink: 'syz.0.2660': attribute type 39 has an invalid length.
[  676.694522][T15838] netlink: 'syz.2.2661': attribute type 21 has an invalid length.
[  676.766861][T15838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2661'.
[  677.491601][T15862] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  677.509059][T15862] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  677.524102][T15862] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  677.543035][T15862] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  677.557194][T15862] netlink: 'syz.0.2675': attribute type 29 has an invalid length.
[  684.727382][T15911] netdevsim netdevsim3: Direct firmware load for � failed with error -2
[  684.757326][T15911] netdevsim netdevsim3: Falling back to sysfs fallback for: �
[  685.228037][T15926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2685'.
[  685.242173][T15926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2685'.
[  685.252919][T15925] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2685'.
[  685.269155][T15926] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2685'.
[  686.166585][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  686.173322][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  686.759974][T15963] tap0: tun_chr_ioctl cmd 21731
[  686.771672][T15970] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2695'.
[  686.784182][T15970] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.2695'.
[  686.797085][T15963] tap0: tun_chr_ioctl cmd 1074025675
[  686.803021][T15963] tap0: persist enabled
[  687.253733][T15990] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2700'.
[  688.704054][T16012] netlink: 'syz.1.2706': attribute type 13 has an invalid length.
[  688.733018][T16012] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2706'.
[  688.782257][T16012] erspan0: refused to change device tx_queue_len
[  688.808149][T16012] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  688.858260][T16010] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.245195][T16034] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2713'.
[  689.255297][T16034] openvswitch: netlink: Duplicate key (type 0).
[  689.875945][T16050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2717'.
[  689.969080][T16052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  689.978244][T16052] batman_adv: batadv0: Removing interface: batadv_slave_0
[  689.991196][T16052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  690.002513][T16052] batman_adv: batadv0: Removing interface: batadv_slave_1
[  690.257730][T16061] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2718'.
[  690.328620][T16062] netlink: 'syz.2.2720': attribute type 10 has an invalid length.
[  690.433725][T16063] netlink: 'syz.2.2720': attribute type 10 has an invalid length.
[  690.444009][T16061] debugfs: Directory '!!�!' with parent 'ieee80211' already present!
[  690.614294][T16071] netlink: 'syz.1.2723': attribute type 33 has an invalid length.
[  690.637779][T16071] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2723'.
[  690.687877][T16071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2723'.
[  690.730237][T16071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2723'.
[  690.766782][T16071] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2723'.
[  690.797296][T16075] C: renamed from team_slave_0 (while UP)
[  690.812059][T16075] netlink: 'syz.3.2724': attribute type 3 has an invalid length.
[  690.820650][T16075] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2724'.
[  690.830392][T16075] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  690.872308][T16071] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2723'.
[  690.927402][T16077] pim6reg1: entered allmulticast mode
[  691.682836][T16093] netlink: 'syz.1.2730': attribute type 10 has an invalid length.
[  691.714888][T16093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2730'.
[  691.760631][T16093] `: entered promiscuous mode
[  691.776147][T16093] team_slave_0: entered promiscuous mode
[  691.786676][T16093] team_slave_1: entered promiscuous mode
[  691.812879][T16093] geneve1: entered promiscuous mode
[  691.823090][T16093] `: entered allmulticast mode
[  691.832933][T16093] team_slave_0: entered allmulticast mode
[  691.845846][T16093] team_slave_1: entered allmulticast mode
[  691.857172][T16093] geneve1: entered allmulticast mode
[  691.863632][T16093] bridge0: port 3(`) entered blocking state
[  691.870628][T16093] bridge0: port 3(`) entered disabled state
[  691.889201][T16098] netlink: 'syz.0.2732': attribute type 2 has an invalid length.
[  691.904232][T16098] netlink: 'syz.0.2732': attribute type 4 has an invalid length.
[  691.914655][T16098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2732'.
[  692.490524][T16113] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2737'.
[  698.028658][T16205] netlink: 'syz.2.2761': attribute type 2 has an invalid length.
[  698.040876][T16205] netlink: 'syz.2.2761': attribute type 9 has an invalid length.
[  698.049197][T16205] netlink: 'syz.2.2761': attribute type 10 has an invalid length.
[  698.078446][T16205] netlink: 'syz.2.2761': attribute type 11 has an invalid length.
[  698.087407][T16205] __nla_validate_parse: 3 callbacks suppressed
[  698.087421][T16205] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2761'.
[  698.177070][T16206] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2761'.
[  698.305987][T16215] netlink: 'syz.0.2762': attribute type 21 has an invalid length.
[  698.314190][T16215] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2762'.
[  698.573732][ T5784] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  698.637737][ T5784] Bluetooth: hci4: command 0x0406 tx timeout
[  698.687252][T16223] netlink: 'syz.3.2765': attribute type 2 has an invalid length.
[  698.695076][T16223] netlink: 'syz.3.2765': attribute type 8 has an invalid length.
[  698.735885][T16223] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2765'.
[  699.074921][T16228] netlink: set zone limit has 8 unknown bytes
[  699.379574][T16235] netlink: 'syz.0.2769': attribute type 1 has an invalid length.
[  699.511202][T16249] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2772'.
[  699.563571][T16249] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2772'.
[  699.585675][T16249] netlink: del zone limit has 4 unknown bytes
[  700.717084][T14275] Bluetooth: hci4: command 0x0406 tx timeout
[  701.381679][T16294] IPv6: NLM_F_CREATE should be specified when creating new route
[  701.543080][T16298] netlink: 'syz.3.2783': attribute type 1 has an invalid length.
[  701.588823][T16298] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2783'.
[  701.605154][T16298] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2783'.
[  701.917596][T16304] syzkaller0: entered promiscuous mode
[  701.923274][T16304] syzkaller0: entered allmulticast mode
[  702.650272][T16315] netlink: 'syz.0.2788': attribute type 10 has an invalid length.
[  703.377031][T16333] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2793'.
[  704.047524][T16352] netlink: 'syz.3.2798': attribute type 28 has an invalid length.
[  704.055623][T16352] netlink: 'syz.3.2798': attribute type 4 has an invalid length.
[  704.064509][T16351] netlink: 'syz.1.2799': attribute type 39 has an invalid length.
[  704.109097][T16352] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2798'.
[  704.320736][T16359] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2802'.
[  704.589689][T16372] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2805'.
[  704.641744][T16365] netlink: 'syz.2.2803': attribute type 21 has an invalid length.
[  705.887006][T16401] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2812'.
[  706.021499][T16401] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2812'.
[  706.067148][T16407] netlink: 'syz.3.2815': attribute type 10 has an invalid length.
[  706.075674][T16407] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2815'.
[  706.140112][T16407] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  706.197098][T16407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  707.082043][T16437] netlink: 'syz.1.2825': attribute type 10 has an invalid length.
[  707.471808][T16448] delete_channel: no stack
[  707.898005][T16465] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2831'.
[  707.926401][T16464] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2831'.
[  708.971643][T16493] netlink: 'syz.3.2838': attribute type 29 has an invalid length.
[  709.121643][T16493] netlink: 'syz.3.2838': attribute type 29 has an invalid length.
[  709.355064][T16505] netlink: 'syz.3.2840': attribute type 3 has an invalid length.
[  709.370792][T16505] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2840'.
[  709.723055][T16517] netlink: 'syz.0.2843': attribute type 21 has an invalid length.
[  709.776046][T16517] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2843'.
[  710.954009][T16548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2851'.
[  711.179292][T16550] syzkaller0: entered promiscuous mode
[  711.192108][T16550] syzkaller0: entered allmulticast mode
[  711.408191][T16557] syzkaller0: entered promiscuous mode
[  711.414109][T16557] syzkaller0: entered allmulticast mode
[  712.438231][T16577] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2859'.
[  712.459662][T16577] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  712.489835][T16577] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  712.557887][T16563] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2856'.
[  712.787906][T16584] syzkaller0: entered allmulticast mode
[  716.606860][T16589] netlink: 'syz.1.2863': attribute type 22 has an invalid length.
[  716.614817][T16589] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2863'.
[  716.627889][T16592] netlink: 'syz.1.2863': attribute type 22 has an invalid length.
[  716.635878][T16592] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2863'.
[  716.645475][T16603] netlink: 'syz.3.2867': attribute type 10 has an invalid length.
[  716.661943][T16603] bridge0: port 2(bridge_slave_1) entered disabled state
[  716.669559][T16603] bridge0: port 1(bridge_slave_0) entered disabled state
[  716.710225][T16616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2870'.
[  717.383633][T16644] netlink: 'syz.0.2876': attribute type 10 has an invalid length.
[  717.392350][T16644] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2876'.
[  718.052537][T16650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2877'.
[  718.429762][T16663] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2879'.
[  718.540971][T16667] netlink: 'syz.1.2881': attribute type 1 has an invalid length.
[  718.603760][T16667] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2881'.
[  718.713370][T16676] netlink: 63759 bytes leftover after parsing attributes in process `syz.0.2883'.
[  718.718604][T16675] netlink: 'syz.2.2882': attribute type 1 has an invalid length.
[  718.784622][T16675] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2882'.
[  718.956043][ T5784] Bluetooth: hci1: command 0x0406 tx timeout
[  720.151989][T16712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2893'.
[  723.771582][T16761] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2905'.
[  723.932605][T16761] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2
[  724.822007][T16739] netlink: 'syz.0.2900': attribute type 4 has an invalid length.
[  724.836326][T16739] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2900'.
[  724.980370][T16739] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  725.227349][T16787] netlink: 703 bytes leftover after parsing attributes in process `syz.0.2913'.
[  727.124820][T16827] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2927'.
[  727.237781][T16831] syz.0.2928: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1
[  727.300154][T16831] CPU: 0 PID: 16831 Comm: syz.0.2928 Not tainted syzkaller #0
[  727.307740][T16831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  727.317850][T16831] Call Trace:
[  727.321180][T16831]  <TASK>
[  727.324156][T16831]  dump_stack_lvl+0x18c/0x250
[  727.328912][T16831]  ? show_regs_print_info+0x20/0x20
[  727.334169][T16831]  ? load_image+0x400/0x400
[  727.338736][T16831]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  727.345220][T16831]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  727.351790][T16831]  warn_alloc+0x246/0x340
[  727.356180][T16831]  ? stack_trace_save+0xaa/0x100
[  727.361177][T16831]  ? zone_watermark_ok_safe+0x230/0x230
[  727.366796][T16831]  ? kasan_set_track+0x5f/0x70
[  727.371616][T16831]  ? kasan_set_track+0x4e/0x70
[  727.376449][T16831]  ? __kasan_kmalloc+0x8f/0xa0
[  727.381259][T16831]  ? xsk_init_queue+0xad/0x100
[  727.386075][T16831]  ? xsk_setsockopt+0x4e5/0x760
[  727.390985][T16831]  ? do_sock_setsockopt+0x175/0x1a0
[  727.396226][T16831]  ? __x64_sys_setsockopt+0x182/0x200
[  727.396624][T16835] netlink: 'syz.0.2928': attribute type 16 has an invalid length.
[  727.401635][T16831]  __vmalloc_node_range+0x126/0x1330
[  727.414840][T16831]  ? free_vm_area+0x50/0x50
[  727.419424][T16831]  vmalloc_user+0x74/0x80
[  727.423810][T16831]  ? xskq_create+0xbf/0x170
[  727.428362][T16831]  xskq_create+0xbf/0x170
[  727.432757][T16831]  xsk_init_queue+0xad/0x100
[  727.437414][T16831]  xsk_setsockopt+0x4e5/0x760
[  727.442143][T16831]  ? xsk_poll+0x680/0x680
[  727.446529][T16831]  ? bpf_lsm_socket_getsockopt+0x10/0x10
[  727.452231][T16831]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  727.457840][T16831]  ? security_socket_setsockopt+0x7e/0xa0
[  727.463609][T16831]  ? xsk_poll+0x680/0x680
[  727.467992][T16831]  do_sock_setsockopt+0x175/0x1a0
[  727.473062][T16831]  ? __fdget+0x180/0x210
[  727.477364][T16831]  __x64_sys_setsockopt+0x182/0x200
[  727.482631][T16831]  do_syscall_64+0x55/0xa0
[  727.487111][T16831]  ? clear_bhb_loop+0x40/0x90
[  727.491860][T16831]  ? clear_bhb_loop+0x40/0x90
[  727.496589][T16835] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2928'.
[  727.496585][T16831]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  727.496612][T16831] RIP: 0033:0x7f9f2af9c799
[  727.505587][T16835] veth1_macvtap: entered allmulticast mode
[  727.511487][T16831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.511508][T16831] RSP: 002b:00007f9f2be28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  727.511530][T16831] RAX: ffffffffffffffda RBX: 00007f9f2b215fa0 RCX: 00007f9f2af9c799
[  727.511544][T16831] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a
[  727.511556][T16831] RBP: 00007f9f2b032bd9 R08: 0000000000000004 R09: 0000000000000000
[  727.511569][T16831] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  727.511582][T16831] R13: 00007f9f2b216038 R14: 00007f9f2b215fa0 R15: 00007fff2393c3e8
[  727.511616][T16831]  </TASK>
[  727.667856][T16831] Mem-Info:
[  727.671463][T16831] active_anon:19536 inactive_anon:0 isolated_anon:0
[  727.671463][T16831]  active_file:19337 inactive_file:40182 isolated_file:0
[  727.671463][T16831]  unevictable:768 dirty:47 writeback:0
[  727.671463][T16831]  slab_reclaimable:10953 slab_unreclaimable:96894
[  727.671463][T16831]  mapped:35570 shmem:14309 pagetables:606
[  727.671463][T16831]  sec_pagetables:0 bounce:0
[  727.671463][T16831]  kernel_misc_reclaimable:0
[  727.671463][T16831]  free:1322252 free_pcp:10980 free_cma:0
[  727.691736][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  727.774159][T16841] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2929'.
[  727.805964][T16831] Node 0 active_anon:79644kB inactive_anon:0kB active_file:77348kB inactive_file:160528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142780kB dirty:188kB writeback:0kB shmem:57300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11396kB pagetables:2424kB sec_pagetables:0kB all_unreclaimable? no
[  727.869944][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  727.927150][T16831] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  727.974849][T16841] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2929'.
[  727.985922][T16831] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  728.034590][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  728.058663][T16841] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2929'.
[  728.080726][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  728.086447][T16831] lowmem_reserve[]: 0 2521 2522 2522 2522
[  728.099939][T16841] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2929'.
[  728.100580][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  728.129165][T16831] Node 0 DMA32 free:1382164kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:83208kB inactive_anon:0kB active_file:77348kB inactive_file:159700kB unevictable:1536kB writepending:188kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:17972kB local_pcp:10472kB free_cma:0kB
[  728.142480][T16841] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2929'.
[  728.160699][T16831] lowmem_reserve[]: 0 0 0 0 0
[  728.176290][T16831] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  728.216464][T16831] lowmem_reserve[]: 0 0 0 0 0
[  728.221384][T16831] Node 1 Normal free:3886692kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:25376kB local_pcp:13024kB free_cma:0kB
[  728.266067][T16831] lowmem_reserve[]: 0 0 0 0 0
[  728.271001][T16831] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  728.277069][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  728.300442][T16831] Node 0 DMA32: 2*4kB (E) 387*8kB (UME) 467*16kB (UME) 369*32kB (UME) 359*64kB (UME) 988*128kB (UME) 417*256kB (UM) 132*512kB (UME) 50*1024kB (UME) 14*2048kB (M) 233*4096kB (UM) = 1380400kB
[  728.337518][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  728.342911][T16831] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  728.367785][T16831] Node 1 Normal: 291*4kB (UME) 59*8kB (UME) 56*16kB (UME) 58*32kB (UME) 21*64kB (UME) 4*128kB (UE) 0*256kB 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 946*4096kB (M) = 3886692kB
[  728.376854][T16841] netlink: 'syz.3.2929': attribute type 17 has an invalid length.
[  728.409548][T16831] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  728.438478][T16831] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  728.460983][T16831] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  728.481808][T16831] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  728.505879][T16831] 76743 total pagecache pages
[  728.510729][T16831] 0 pages in swap cache
[  728.522679][T16831] Free swap  = 124996kB
[  728.529751][T16831] Total swap = 124996kB
[  728.545940][T16831] 2097051 pages RAM
[  728.549832][T16831] 0 pages HighMem/MovableOnly
[  728.554543][T16831] 416924 pages reserved
[  728.575336][T16831] 0 pages cma reserved
[  729.842557][T16893] __nla_validate_parse: 13 callbacks suppressed
[  729.842579][T16893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2942'.
[  729.868778][T16893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2942'.
[  729.887085][T16893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2942'.
[  729.985516][T16895] validate_nla: 10 callbacks suppressed
[  729.985537][T16895] netlink: 'syz.2.2943': attribute type 3 has an invalid length.
[  730.004278][T16895] netlink: 109472 bytes leftover after parsing attributes in process `syz.2.2943'.
[  730.198827][T16900] ��
: port 1(gretap0) entered blocking state
[  730.215511][T16900] ��
: port 1(gretap0) entered disabled state
[  730.244378][T16900] gretap0: entered allmulticast mode
[  730.267538][T16900] gretap0: entered promiscuous mode
[  731.037777][T16926] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2950'.
[  731.043979][T16925] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2953'.
[  731.087481][T16926] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2950'.
[  731.124907][T16921] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2950'.
[  731.176681][T16927] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2950'.
[  731.294033][T16929] netlink: 'syz.1.2954': attribute type 10 has an invalid length.
[  731.324471][T16929] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2954'.
[  731.900404][T16951] netlink: 'syz.2.2959': attribute type 10 has an invalid length.
[  731.916278][T16951] bond0: entered promiscuous mode
[  731.926337][T16951] bond_slave_0: entered promiscuous mode
[  731.938913][T16951] bond_slave_1: entered promiscuous mode
[  731.954031][T16951] bridge0: entered promiscuous mode
[  731.967420][T16951] bridge0: port 3(bond0) entered blocking state
[  731.999404][T16951] bridge0: port 3(bond0) entered disabled state
[  732.019247][T16951] bond0: entered allmulticast mode
[  732.024468][T16951] bond_slave_0: entered allmulticast mode
[  732.046207][T16951] bond_slave_1: entered allmulticast mode
[  732.052221][T16951] bridge0: entered allmulticast mode
[  732.062422][T16951] bond0: left allmulticast mode
[  732.070308][T16951] bond_slave_0: left allmulticast mode
[  732.077386][T16951] bond_slave_1: left allmulticast mode
[  732.083324][T16951] bridge0: left allmulticast mode
[  732.381307][T16975] netlink: 'syz.3.2967': attribute type 21 has an invalid length.
[  732.476449][T16977] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  732.901358][T16983] netlink: 'syz.0.2970': attribute type 10 has an invalid length.
[  733.021003][T16988] netlink: 'syz.3.2973': attribute type 4 has an invalid length.
[  733.151401][T16988] netlink: 'syz.3.2973': attribute type 10 has an invalid length.
[  734.315970][ T5784] Bluetooth: hci0: command 0x0406 tx timeout
[  735.200819][ T7285] wlan1: Trigger new scan to find an IBSS to join
[  735.813908][T17036] __nla_validate_parse: 7 callbacks suppressed
[  735.813928][T17036] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2982'.
[  735.959566][T17036] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  736.017806][T17036] CPU: 1 PID: 17036 Comm: syz.3.2982 Not tainted syzkaller #0
[  736.025397][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  736.035542][T17036] Call Trace:
[  736.038906][T17036]  <TASK>
[  736.041922][T17036]  dump_stack_lvl+0x18c/0x250
[  736.046711][T17036]  ? show_regs_print_info+0x20/0x20
[  736.052032][T17036]  ? load_image+0x400/0x400
[  736.056707][T17036]  sysfs_warn_dup+0x8e/0xa0
[  736.061327][T17036]  sysfs_do_create_link_sd+0xc0/0x110
[  736.066819][T17036]  device_add_class_symlinks+0x1cf/0x240
[  736.072573][T17036]  device_add+0x507/0xc20
[  736.077037][T17036]  wiphy_register+0x1dad/0x2ae0
[  736.082071][T17036]  ? cfg80211_event_work+0x40/0x40
[  736.087283][T17036]  ? minstrel_ht_alloc+0x88a/0x990
[  736.092523][T17036]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  736.098706][T17036]  ieee80211_register_hw+0x3464/0x4250
[  736.104360][T17036]  ? ieee80211_tasklet_handler+0x20/0x20
[  736.110107][T17036]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  736.116122][T17036]  ? __debug_object_init+0xec/0x450
[  736.121445][T17036]  ? __asan_memset+0x22/0x40
[  736.126149][T17036]  ? __hrtimer_init+0x186/0x270
[  736.131127][T17036]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  736.137039][T17036]  ? mac80211_hwsim_free+0x220/0x220
[  736.142435][T17036]  ? rcu_is_watching+0x15/0xb0
[  736.147304][T17036]  ? kstrndup+0xbd/0x140
[  736.151761][T17036]  hwsim_new_radio_nl+0xdc9/0x1a90
[  736.157006][T17036]  ? __nla_validate+0x50/0x50
[  736.161843][T17036]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  736.168335][T17036]  ? __nla_parse+0x40/0x50
[  736.172873][T17036]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  736.179326][T17036]  genl_family_rcv_msg_doit+0x211/0x310
[  736.184979][T17036]  ? end_current_label_crit_section+0x170/0x170
[  736.191341][T17036]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  736.197372][T17036]  ? bpf_lsm_capable+0x9/0x10
[  736.202175][T17036]  ? security_capable+0x89/0xb0
[  736.207169][T17036]  genl_rcv_msg+0x619/0x7a0
[  736.211882][T17036]  ? genl_bind+0x360/0x360
[  736.216389][T17036]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  736.222923][T17036]  ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0
[  736.229621][T17036]  ? ref_tracker_free+0x690/0x840
[  736.234786][T17036]  netlink_rcv_skb+0x241/0x4d0
[  736.239676][T17036]  ? genl_bind+0x360/0x360
[  736.244197][T17036]  ? netlink_ack+0x1180/0x1180
[  736.249122][T17036]  ? __lock_acquire+0x7d40/0x7d40
[  736.254287][T17036]  ? down_read+0x1ac/0x2e0
[  736.258815][T17036]  genl_rcv+0x28/0x40
[  736.262878][T17036]  netlink_unicast+0x751/0x8d0
[  736.267784][T17036]  netlink_sendmsg+0x8d0/0xbf0
[  736.272701][T17036]  ? netlink_getsockopt+0x590/0x590
[  736.278011][T17036]  ? aa_sock_msg_perm+0x94/0x150
[  736.283058][T17036]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  736.288438][T17036]  ? security_socket_sendmsg+0x80/0xa0
[  736.293983][T17036]  ? netlink_getsockopt+0x590/0x590
[  736.299300][T17036]  ____sys_sendmsg+0x5ba/0x960
[  736.304185][T17036]  ? __asan_memset+0x22/0x40
[  736.308915][T17036]  ? __sys_sendmsg_sock+0x30/0x30
[  736.314030][T17036]  ? __import_iovec+0x5f2/0x850
[  736.319014][T17036]  ? import_iovec+0x73/0xa0
[  736.323631][T17036]  ___sys_sendmsg+0x2a6/0x360
[  736.328486][T17036]  ? __sys_sendmsg+0x2a0/0x2a0
[  736.333558][T17036]  __se_sys_sendmsg+0x1c2/0x2b0
[  736.338539][T17036]  ? __x64_sys_sendmsg+0x80/0x80
[  736.343647][T17036]  ? lockdep_hardirqs_on+0x98/0x150
[  736.348957][T17036]  do_syscall_64+0x55/0xa0
[  736.353471][T17036]  ? clear_bhb_loop+0x40/0x90
[  736.358240][T17036]  ? clear_bhb_loop+0x40/0x90
[  736.363011][T17036]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  736.369001][T17036] RIP: 0033:0x7f0b4e59c799
[  736.373503][T17036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  736.393227][T17036] RSP: 002b:00007f0b4f4ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  736.401743][T17036] RAX: ffffffffffffffda RBX: 00007f0b4e816090 RCX: 00007f0b4e59c799
[  736.409803][T17036] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  736.417852][T17036] RBP: 00007f0b4e632bd9 R08: 0000000000000000 R09: 0000000000000000
[  736.425896][T17036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  736.433951][T17036] R13: 00007f0b4e816128 R14: 00007f0b4e816090 R15: 00007fffe19d8c38
[  736.442088][T17036]  </TASK>
[  737.831231][T17070] netlink: 'syz.0.2992': attribute type 10 has an invalid length.
[  737.922628][T17073] netlink: 'syz.1.2994': attribute type 7 has an invalid length.
[  738.364158][T17087] netlink: 'syz.1.3000': attribute type 3 has an invalid length.
[  738.383248][T17087] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3000'.
[  738.425259][T17087] netlink: 'syz.1.3000': attribute type 1 has an invalid length.
[  738.441318][T17087] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3000'.
[  738.477944][T17087] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3000'.
[  738.662826][T17102] netlink: 'syz.3.3003': attribute type 1 has an invalid length.
[  738.678869][T17102] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.3003'.
[  738.709963][T17107] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  738.716668][T17107] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  738.952203][T17104] syzkaller0: entered promiscuous mode
[  738.960306][T17104] syzkaller0: entered allmulticast mode
[  739.277532][ T2950] wlan1: Trigger new scan to find an IBSS to join
[  739.337763][T17124] netlink: 'syz.0.3008': attribute type 3 has an invalid length.
[  739.347838][T17124] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3008'.
[  740.304577][T11937] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  743.440156][T17181] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3023'.
[  743.525941][T17177] IPv6: Can't replace route, no match found
[  746.509389][T17208] netlink: 'syz.2.3029': attribute type 10 has an invalid length.
[  746.555957][T17208] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3029'.
[  747.602483][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  747.609342][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  749.222490][T17220] netlink: 'syz.0.3035': attribute type 10 has an invalid length.
[  749.302032][T17222] netlink: 'syz.1.3036': attribute type 13 has an invalid length.
[  749.322244][T17222] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3036'.
[  749.376685][T17222] erspan0: refused to change device tx_queue_len
[  749.433799][T17222] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  750.006936][T17246] netlink: 'syz.1.3043': attribute type 27 has an invalid length.
[  750.035850][T17246] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3043'.
[  750.265284][T17246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3043'.
[  750.578177][T17253] syzkaller0: tun_chr_ioctl cmd 2147767506
[  751.064376][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.096404][T17278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3052'.
[  751.127423][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.140564][T17278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3052'.
[  751.175296][T17283] netlink: 'syz.1.3053': attribute type 39 has an invalid length.
[  751.285458][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.300840][T17278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3052'.
[  751.332378][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.350608][T17281] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3054'.
[  751.360362][T17278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3052'.
[  751.372726][T17281] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.3054'.
[  751.384476][T17281] tipc: Started in network mode
[  751.390588][T17281] tipc: Node identity d, cluster identity 56
[  751.398289][T17281] tipc: Node number set to 13
[  751.408436][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.445896][T17278] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3052'.
[  751.529043][T17278] validate_nla: 10 callbacks suppressed
[  751.529062][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.553869][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.590240][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.618512][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.647602][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.666245][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.688007][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.708964][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.728785][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.761855][T17278] netlink: 'syz.3.3052': attribute type 10 has an invalid length.
[  751.781795][T17297] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  751.788485][T17297] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  752.026609][T17311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  754.075650][T17361] syzkaller0: entered promiscuous mode
[  754.093312][T17364] macsec0: entered promiscuous mode
[  754.103366][T17364] macsec0: entered allmulticast mode
[  754.114745][T17364] veth1_macvtap: entered allmulticast mode
[  757.280975][T17377] syzkaller0: entered promiscuous mode
[  757.286717][T17377] syzkaller0: entered allmulticast mode
[  757.294970][ T9565] syzkaller0: tun_net_xmit 48
[  757.569306][T17400] validate_nla: 43 callbacks suppressed
[  757.569325][T17400] netlink: 'syz.3.3082': attribute type 2 has an invalid length.
[  757.595237][T17400] __nla_validate_parse: 32 callbacks suppressed
[  757.595256][T17400] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3082'.
[  759.917354][ T5784] Bluetooth: hci2: command 0x0406 tx timeout
[  760.383502][T17431] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3088'.
[  760.393085][T17431] netlink: get zone limit has 4 unknown bytes
[  760.404625][T17430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3089'.
[  760.558956][T17435] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3088'.
[  761.411729][T17451] delete_channel: no stack
[  761.906887][T17467] netlink: 'syz.3.3101': attribute type 2 has an invalid length.
[  761.914982][T17467] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3101'.
[  761.952475][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3099'.
[  761.963746][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3099'.
[  762.026036][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3099'.
[  762.051500][T17469] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3099'.
[  762.675725][T17491] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3109'.
[  763.187505][T17500] netlink: 'syz.3.3112': attribute type 10 has an invalid length.
[  763.219165][T17500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  763.378355][T17500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  763.513918][T17500] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  763.988143][T17525] netlink: 'syz.2.3118': attribute type 10 has an invalid length.
[  764.002035][T17525] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3118'.
[  764.259737][T17530] bridge0: port 1(team0) entered blocking state
[  764.269044][T17530] bridge0: port 1(team0) entered disabled state
[  764.280164][T17530] team0: entered allmulticast mode
[  764.285605][T17530] team_slave_0: entered allmulticast mode
[  764.296831][T17530] team_slave_1: entered allmulticast mode
[  764.303396][T17530] dummy0: entered allmulticast mode
[  764.342462][T17530] team0: entered promiscuous mode
[  764.359101][T17530] team_slave_0: entered promiscuous mode
[  764.375951][T17530] team_slave_1: entered promiscuous mode
[  764.382344][T17530] dummy0: entered promiscuous mode
[  764.557128][T17546] netlink: 'syz.1.3124': attribute type 33 has an invalid length.
[  764.565046][T17546] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3124'.
[  765.165388][T17574] netlink: 'syz.3.3133': attribute type 11 has an invalid length.
[  765.874955][T17581] netlink: 'syz.0.3136': attribute type 2 has an invalid length.
[  765.886441][T17581] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3136'.
[  766.106517][T17597] netlink: 'syz.2.3141': attribute type 4 has an invalid length.
[  766.124941][T17597] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3141'.
[  766.178362][T17597] netlink: 'syz.2.3141': attribute type 4 has an invalid length.
[  766.207746][T17597] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3141'.
[  767.644161][T17633] netlink: 'syz.1.3152': attribute type 9 has an invalid length.
[  767.682091][T17633] netlink: 391 bytes leftover after parsing attributes in process `syz.1.3152'.
[  768.120690][T17644] netlink: 'syz.2.3155': attribute type 64 has an invalid length.
[  768.185149][T17644] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3155'.
[  768.240582][T17641] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3154'.
[  768.355961][T17645] �
: port 1(veth1_virt_wifi) entered blocking state
[  768.392122][T17645] �
: port 1(veth1_virt_wifi) entered disabled state
[  768.434651][T17645] veth1_virt_wifi: entered allmulticast mode
[  768.484584][T17645] veth1_virt_wifi: entered promiscuous mode
[  771.619408][T17659] netlink: 'syz.2.3159': attribute type 29 has an invalid length.
[  772.556529][ T7285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  774.666307][T17659] netlink: 'syz.2.3159': attribute type 29 has an invalid length.
[  774.681121][T17669] Q�6�`Ҙ: renamed from lo (while UP)
[  775.560379][T14275] Bluetooth: hci0: ISO packet for unknown connection handle 6
[  775.686127][T17693] netlink: 'syz.3.3170': attribute type 4 has an invalid length.
[  775.720207][T17693] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3170'.
[  779.095900][T17706] �: renamed from pim6reg1
[  779.172642][T17711] netlink: 'syz.0.3175': attribute type 29 has an invalid length.
[  779.193416][T17711] netlink: 'syz.0.3175': attribute type 29 has an invalid length.
[  779.218223][T17711] netlink: 'syz.0.3175': attribute type 29 has an invalid length.
[  779.286204][T17713] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3177'.
[  782.502374][T17713] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  782.512952][T17713] CPU: 1 PID: 17713 Comm: syz.3.3177 Not tainted syzkaller #0
[  782.520464][T17713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  782.530544][T17713] Call Trace:
[  782.533877][T17713]  <TASK>
[  782.536841][T17713]  dump_stack_lvl+0x18c/0x250
[  782.541599][T17713]  ? show_regs_print_info+0x20/0x20
[  782.546854][T17713]  ? load_image+0x400/0x400
[  782.551392][T17713]  sysfs_warn_dup+0x8e/0xa0
[  782.555926][T17713]  sysfs_do_create_link_sd+0xc0/0x110
[  782.561348][T17713]  device_add_class_symlinks+0x1cf/0x240
[  782.567025][T17713]  device_add+0x507/0xc20
[  782.571392][T17713]  wiphy_register+0x1dad/0x2ae0
[  782.576332][T17713]  ? cfg80211_event_work+0x40/0x40
[  782.581517][T17713]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  782.587716][T17713]  ieee80211_register_hw+0x3464/0x4250
[  782.593232][T17713]  ? ieee80211_tasklet_handler+0x20/0x20
[  782.598922][T17713]  ? __asan_memset+0x22/0x40
[  782.603554][T17713]  ? __hrtimer_init+0x186/0x270
[  782.608466][T17713]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  782.614239][T17713]  ? mac80211_hwsim_free+0x220/0x220
[  782.619648][T17713]  ? rcu_is_watching+0x15/0xb0
[  782.624452][T17713]  ? kstrndup+0xbd/0x140
[  782.628724][T17713]  hwsim_new_radio_nl+0xdc9/0x1a90
[  782.633897][T17713]  ? __nla_validate+0x50/0x50
[  782.638633][T17713]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  782.645173][T17713]  ? __nla_parse+0x40/0x50
[  782.649619][T17713]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  782.655983][T17713]  genl_family_rcv_msg_doit+0x211/0x310
[  782.661606][T17713]  ? end_current_label_crit_section+0x170/0x170
[  782.667876][T17713]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  782.673798][T17713]  ? bpf_lsm_capable+0x9/0x10
[  782.678506][T17713]  ? security_capable+0x89/0xb0
[  782.683406][T17713]  genl_rcv_msg+0x619/0x7a0
[  782.687966][T17713]  ? genl_bind+0x360/0x360
[  782.692405][T17713]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  782.698773][T17713]  netlink_rcv_skb+0x241/0x4d0
[  782.703562][T17713]  ? genl_bind+0x360/0x360
[  782.708035][T17713]  ? netlink_ack+0x1180/0x1180
[  782.713002][T17713]  ? __lock_acquire+0x7d40/0x7d40
[  782.718061][T17713]  ? down_read+0x1ac/0x2e0
[  782.722511][T17713]  genl_rcv+0x28/0x40
[  782.726545][T17713]  netlink_unicast+0x751/0x8d0
[  782.731343][T17713]  netlink_sendmsg+0x8d0/0xbf0
[  782.736254][T17713]  ? netlink_getsockopt+0x590/0x590
[  782.741512][T17713]  ? aa_sock_msg_perm+0x94/0x150
[  782.746474][T17713]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  782.751780][T17713]  ? security_socket_sendmsg+0x80/0xa0
[  782.757292][T17713]  ? netlink_getsockopt+0x590/0x590
[  782.762517][T17713]  ____sys_sendmsg+0x5ba/0x960
[  782.767321][T17713]  ? __asan_memset+0x22/0x40
[  782.771973][T17713]  ? __sys_sendmsg_sock+0x30/0x30
[  782.777051][T17713]  ? __import_iovec+0x5f2/0x850
[  782.781981][T17713]  ? import_iovec+0x73/0xa0
[  782.786548][T17713]  ___sys_sendmsg+0x2a6/0x360
[  782.791264][T17713]  ? __sys_sendmsg+0x2a0/0x2a0
[  782.796091][T17713]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  782.802422][T17713]  __se_sys_sendmsg+0x1c2/0x2b0
[  782.807304][T17713]  ? __x64_sys_sendmsg+0x80/0x80
[  782.812314][T17713]  ? lockdep_hardirqs_on+0x98/0x150
[  782.817565][T17713]  do_syscall_64+0x55/0xa0
[  782.822034][T17713]  ? clear_bhb_loop+0x40/0x90
[  782.826754][T17713]  ? clear_bhb_loop+0x40/0x90
[  782.831485][T17713]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  782.837421][T17713] RIP: 0033:0x7f0b4e59c799
[  782.841862][T17713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  782.861600][T17713] RSP: 002b:00007f0b4f4cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  782.870059][T17713] RAX: ffffffffffffffda RBX: 00007f0b4e815fa0 RCX: 00007f0b4e59c799
[  782.878057][T17713] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009
[  782.886398][T17713] RBP: 00007f0b4e632bd9 R08: 0000000000000000 R09: 0000000000000000
[  782.894415][T17713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  782.902452][T17713] R13: 00007f0b4e816038 R14: 00007f0b4e815fa0 R15: 00007fffe19d8c38
[  782.910456][T17713]  </TASK>
[  782.920921][T17741] ��
: port 2(veth0_to_team) entered blocking state
[  782.928040][T17741] ��
: port 2(veth0_to_team) entered disabled state
[  782.934888][T17741] veth0_to_team: entered allmulticast mode
[  782.944625][T17741] veth0_to_team: entered promiscuous mode
[  783.293711][T17755] netlink: 'syz.1.3187': attribute type 3 has an invalid length.
[  783.307281][T17755] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3187'.
[  783.320408][T17762] : renamed from veth0_to_bond (while UP)
[  786.681846][T17842] netlink: 'syz.1.3211': attribute type 12 has an invalid length.
[  786.713809][T17842] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.3211'.
[  786.791353][T17842] netlink: 'syz.1.3211': attribute type 10 has an invalid length.
[  786.929147][T17853] netlink: 56855 bytes leftover after parsing attributes in process `syz.0.3213'.
[  787.002771][T17842] veth1_macvtap (unregistering): left allmulticast mode
[  787.383628][T17851] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.3213'.
[  787.766031][T17865] netlink: 'syz.1.3218': attribute type 13 has an invalid length.
[  788.006838][T17870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3220'.
[  788.161212][T17876] netlink: 'syz.1.3223': attribute type 3 has an invalid length.
[  788.171143][T17876] netlink: 'syz.1.3223': attribute type 1 has an invalid length.
[  788.181825][T17876] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3223'.
[  788.485071][T17889] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3227'.
[  788.501422][T17889] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3227'.
[  788.512894][T17889] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3227'.
[  788.528240][T17889] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3227'.
[  789.226466][T17914] netlink: 'syz.3.3235': attribute type 16 has an invalid length.
[  789.235177][T17914] netlink: 'syz.3.3235': attribute type 3 has an invalid length.
[  789.265943][T17914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3235'.
[  789.374882][T17923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3239'.
[  790.193096][T17939] dvmrp1: tun_chr_ioctl cmd 1074812118
[  790.503615][T17950] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3248'.
[  790.561389][T17950] team_slave_0: left promiscuous mode
[  790.581617][T17950] team_slave_0: left allmulticast mode
[  790.648829][T17953] netlink: 668 bytes leftover after parsing attributes in process `syz.3.3246'.
[  790.710235][T17953] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  790.768041][T17953] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  790.874081][T17950] team0: Port device team_slave_0 removed
[  790.903401][T17950] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  790.945559][T17924] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3240'.
[  791.068301][T17924] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  791.085999][T17924] CPU: 1 PID: 17924 Comm: syz.2.3240 Not tainted syzkaller #0
[  791.093560][T17924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  791.103674][T17924] Call Trace:
[  791.107021][T17924]  <TASK>
[  791.110002][T17924]  dump_stack_lvl+0x18c/0x250
[  791.114772][T17924]  ? show_regs_print_info+0x20/0x20
[  791.120036][T17924]  ? load_image+0x400/0x400
[  791.124615][T17924]  sysfs_warn_dup+0x8e/0xa0
[  791.129188][T17924]  sysfs_do_create_link_sd+0xc0/0x110
[  791.134625][T17924]  device_add_class_symlinks+0x1cf/0x240
[  791.140329][T17924]  device_add+0x507/0xc20
[  791.144718][T17924]  wiphy_register+0x1dad/0x2ae0
[  791.149623][T17924]  ? cfg80211_event_work+0x40/0x40
[  791.154803][T17924]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  791.161019][T17924]  ? ieee80211_register_hw+0x3049/0x4250
[  791.166812][T17924]  ieee80211_register_hw+0x3464/0x4250
[  791.172353][T17924]  ? ieee80211_tasklet_handler+0x20/0x20
[  791.178034][T17924]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  791.183982][T17924]  ? __debug_object_init+0xec/0x450
[  791.189264][T17924]  ? __asan_memset+0x22/0x40
[  791.193903][T17924]  ? __hrtimer_init+0x186/0x270
[  791.198797][T17924]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  791.204624][T17924]  ? mac80211_hwsim_free+0x220/0x220
[  791.209960][T17924]  ? rcu_is_watching+0x15/0xb0
[  791.214776][T17924]  ? kstrndup+0xbd/0x140
[  791.219071][T17924]  hwsim_new_radio_nl+0xdc9/0x1a90
[  791.224249][T17924]  ? __nla_validate+0x50/0x50
[  791.228978][T17924]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  791.235352][T17924]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  791.241679][T17924]  ? __nla_parse+0x40/0x50
[  791.246138][T17924]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  791.252513][T17924]  genl_family_rcv_msg_doit+0x211/0x310
[  791.258108][T17924]  ? end_current_label_crit_section+0x170/0x170
[  791.264403][T17924]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  791.270352][T17924]  ? bpf_lsm_capable+0x9/0x10
[  791.275074][T17924]  ? security_capable+0x89/0xb0
[  791.279978][T17924]  genl_rcv_msg+0x619/0x7a0
[  791.284536][T17924]  ? genl_bind+0x360/0x360
[  791.288994][T17924]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  791.295384][T17924]  netlink_rcv_skb+0x241/0x4d0
[  791.300243][T17924]  ? genl_bind+0x360/0x360
[  791.304710][T17924]  ? netlink_ack+0x1180/0x1180
[  791.309540][T17924]  ? __lock_acquire+0x7d40/0x7d40
[  791.314613][T17924]  ? net_generic+0x1e/0x240
[  791.319199][T17924]  ? down_read+0x1ac/0x2e0
[  791.323665][T17924]  genl_rcv+0x28/0x40
[  791.327686][T17924]  netlink_unicast+0x751/0x8d0
[  791.332508][T17924]  netlink_sendmsg+0x8d0/0xbf0
[  791.337323][T17924]  ? lockdep_hardirqs_on+0x98/0x150
[  791.342569][T17924]  ? netlink_getsockopt+0x590/0x590
[  791.347810][T17924]  ? security_socket_sendmsg+0x45/0xa0
[  791.353316][T17924]  ? security_socket_sendmsg+0x80/0xa0
[  791.358812][T17924]  ? netlink_getsockopt+0x590/0x590
[  791.364055][T17924]  ____sys_sendmsg+0x5ba/0x960
[  791.368862][T17924]  ? __asan_memset+0x22/0x40
[  791.373495][T17924]  ? __sys_sendmsg_sock+0x30/0x30
[  791.378550][T17924]  ? __import_iovec+0x5f2/0x850
[  791.383452][T17924]  ? import_iovec+0x73/0xa0
[  791.388023][T17924]  ___sys_sendmsg+0x2a6/0x360
[  791.392744][T17924]  ? __sys_sendmsg+0x2a0/0x2a0
[  791.397548][T17924]  ? perf_trace_preemptirq_template+0x269/0x330
[  791.403875][T17924]  __se_sys_sendmsg+0x1c2/0x2b0
[  791.408771][T17924]  ? __x64_sys_sendmsg+0x80/0x80
[  791.413772][T17924]  ? syscall_enter_from_user_mode+0x2e/0x80
[  791.419802][T17924]  do_syscall_64+0x55/0xa0
[  791.424279][T17924]  ? clear_bhb_loop+0x40/0x90
[  791.428996][T17924]  ? clear_bhb_loop+0x40/0x90
[  791.433707][T17924]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  791.439722][T17924] RIP: 0033:0x7f698cd9c799
[  791.444171][T17924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  791.463810][T17924] RSP: 002b:00007f698dc80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  791.472280][T17924] RAX: ffffffffffffffda RBX: 00007f698d015fa0 RCX: 00007f698cd9c799
[  791.480297][T17924] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  791.488304][T17924] RBP: 00007f698ce32bd9 R08: 0000000000000000 R09: 0000000000000000
[  791.496305][T17924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  791.504308][T17924] R13: 00007f698d016038 R14: 00007f698d015fa0 R15: 00007ffd6f9b7f58
[  791.512329][T17924]  </TASK>
[  793.646451][T17981] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3254'.
[  793.656923][T17981] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  794.918179][T18007] team_slave_0: left promiscuous mode
[  794.950064][T18007] team_slave_0: left allmulticast mode
[  795.560800][T18007] `: Port device team_slave_0 removed
[  795.576428][T18007] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  795.983233][T18015] netlink: 'syz.1.3264': attribute type 2 has an invalid length.
[  796.058475][T18021] netlink: 'syz.2.3265': attribute type 3 has an invalid length.
[  796.090462][T18021] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3265'.
[  796.287375][T18031] netlink: 'syz.1.3268': attribute type 10 has an invalid length.
[  796.342878][T18031] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  796.457012][T18034] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3270'.
[  796.923609][T18041] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3272'.
[  797.001247][T18041] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  797.016978][T18041] CPU: 1 PID: 18041 Comm: syz.2.3272 Not tainted syzkaller #0
[  797.024534][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  797.034644][T18041] Call Trace:
[  797.037965][T18041]  <TASK>
[  797.040930][T18041]  dump_stack_lvl+0x18c/0x250
[  797.045670][T18041]  ? show_regs_print_info+0x20/0x20
[  797.050922][T18041]  ? load_image+0x400/0x400
[  797.055476][T18041]  sysfs_warn_dup+0x8e/0xa0
[  797.060044][T18041]  sysfs_do_create_link_sd+0xc0/0x110
[  797.065471][T18041]  device_add_class_symlinks+0x1cf/0x240
[  797.071152][T18041]  device_add+0x507/0xc20
[  797.075523][T18041]  wiphy_register+0x1dad/0x2ae0
[  797.080432][T18041]  ? cfg80211_event_work+0x40/0x40
[  797.085578][T18041]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  797.091773][T18041]  ? rtnl_unlock+0x9/0x10
[  797.096169][T18041]  ieee80211_register_hw+0x3464/0x4250
[  797.101722][T18041]  ? ieee80211_tasklet_handler+0x20/0x20
[  797.107401][T18041]  ? lockdep_hardirqs_on+0x98/0x150
[  797.112642][T18041]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  797.118844][T18041]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  797.124630][T18041]  ? mac80211_hwsim_free+0x220/0x220
[  797.129968][T18041]  ? rcu_is_watching+0x15/0xb0
[  797.134772][T18041]  ? kstrndup+0xbd/0x140
[  797.139055][T18041]  hwsim_new_radio_nl+0xdc9/0x1a90
[  797.144217][T18041]  ? mark_lock+0x94/0x320
[  797.148597][T18041]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  797.154973][T18041]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  797.161163][T18041]  ? lockdep_hardirqs_on+0x98/0x150
[  797.166392][T18041]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  797.172591][T18041]  genl_family_rcv_msg_doit+0x211/0x310
[  797.178180][T18041]  ? end_current_label_crit_section+0x170/0x170
[  797.184461][T18041]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  797.190395][T18041]  ? bpf_lsm_capable+0x9/0x10
[  797.195110][T18041]  ? security_capable+0x89/0xb0
[  797.200000][T18041]  genl_rcv_msg+0x619/0x7a0
[  797.204537][T18041]  ? genl_bind+0x360/0x360
[  797.208982][T18041]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  797.215530][T18041]  ? kasan_check_range+0x59/0x290
[  797.220601][T18041]  netlink_rcv_skb+0x241/0x4d0
[  797.225413][T18041]  ? genl_bind+0x360/0x360
[  797.229887][T18041]  ? netlink_ack+0x1180/0x1180
[  797.234711][T18041]  ? __lock_acquire+0x7d40/0x7d40
[  797.239775][T18041]  ? net_generic+0x1e/0x240
[  797.244313][T18041]  ? down_read+0x1ac/0x2e0
[  797.248760][T18041]  genl_rcv+0x28/0x40
[  797.252775][T18041]  netlink_unicast+0x751/0x8d0
[  797.257590][T18041]  netlink_sendmsg+0x8d0/0xbf0
[  797.262398][T18041]  ? lockdep_hardirqs_on+0x98/0x150
[  797.267636][T18041]  ? netlink_getsockopt+0x590/0x590
[  797.272876][T18041]  ? bpf_lsm_socket_accept+0x10/0x10
[  797.278205][T18041]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  797.283521][T18041]  ? security_socket_sendmsg+0x80/0xa0
[  797.289008][T18041]  ? netlink_getsockopt+0x590/0x590
[  797.294246][T18041]  ____sys_sendmsg+0x5ba/0x960
[  797.299051][T18041]  ? __asan_memset+0x22/0x40
[  797.303687][T18041]  ? __sys_sendmsg_sock+0x30/0x30
[  797.308749][T18041]  ? __import_iovec+0x5f2/0x850
[  797.313656][T18041]  ? import_iovec+0x73/0xa0
[  797.318192][T18041]  ___sys_sendmsg+0x2a6/0x360
[  797.322904][T18041]  ? __sys_sendmsg+0x2a0/0x2a0
[  797.327730][T18041]  ? seqcount_lockdep_reader_access+0x17b/0x1d0
[  797.334026][T18041]  __se_sys_sendmsg+0x1c2/0x2b0
[  797.339444][T18041]  ? __x64_sys_sendmsg+0x80/0x80
[  797.344472][T18041]  ? syscall_enter_from_user_mode+0x2e/0x80
[  797.350417][T18041]  do_syscall_64+0x55/0xa0
[  797.354880][T18041]  ? clear_bhb_loop+0x40/0x90
[  797.359595][T18041]  ? clear_bhb_loop+0x40/0x90
[  797.364319][T18041]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  797.370258][T18041] RIP: 0033:0x7f698cd9c799
[  797.374740][T18041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.394390][T18041] RSP: 002b:00007f698dc80028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  797.402845][T18041] RAX: ffffffffffffffda RBX: 00007f698d015fa0 RCX: 00007f698cd9c799
[  797.410852][T18041] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  797.418903][T18041] RBP: 00007f698ce32bd9 R08: 0000000000000000 R09: 0000000000000000
[  797.426929][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  797.434963][T18041] R13: 00007f698d016038 R14: 00007f698d015fa0 R15: 00007ffd6f9b7f58
[  797.442994][T18041]  </TASK>
[  797.876492][T18062] -1: renamed from syzkaller0
[  798.749256][T18079] netlink: 'syz.0.3283': attribute type 10 has an invalid length.
[  800.004726][T18118] netlink: 'syz.1.3293': attribute type 2 has an invalid length.
[  800.025828][T18118] netlink: 'syz.1.3293': attribute type 3 has an invalid length.
[  800.036416][T18110] netlink: 12286 bytes leftover after parsing attributes in process `syz.0.3291'.
[  800.057249][T18121] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3291'.
[  800.076304][T18118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3293'.
[  800.097730][T18121] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3291'.
[  800.149796][T18110] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3291'.
[  801.165335][T18145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3301'.
[  801.225976][T18145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3301'.
[  801.972181][T18161] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3305'.
[  802.082182][T18169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3306'.
[  804.557231][ T7285] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  804.600045][T18164] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  804.608820][T18164] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode
[  804.618192][T18169] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3306'.
[  805.568470][T18184] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3311'.
[  805.947117][T18184] netlink: 'syz.1.3311': attribute type 10 has an invalid length.
[  806.320566][T18199] pim6reg1: entered promiscuous mode
[  806.335773][T18199] pim6reg1: entered allmulticast mode
[  806.429582][T18205] netlink: 'syz.3.3316': attribute type 5 has an invalid length.
[  806.572223][T18206] netlink: 'syz.3.3316': attribute type 3 has an invalid length.
[  807.625346][T18236] netlink: 'syz.0.3325': attribute type 29 has an invalid length.
[  807.656392][T18236] netlink: 'syz.0.3325': attribute type 29 has an invalid length.
[  808.344601][T18257] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3330'.
[  809.054385][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  809.060921][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  809.716750][T18286] netlink: 'syz.1.3339': attribute type 21 has an invalid length.
[  809.733941][T18286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3339'.
[  809.744893][T18286] netlink: 'syz.1.3339': attribute type 1 has an invalid length.
[  810.145578][T18289] netlink: 'syz.3.3341': attribute type 21 has an invalid length.
[  810.180388][T18292] netlink: 'syz.3.3341': attribute type 10 has an invalid length.
[  811.447041][T18333] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3352'.
[  811.521177][T18333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3352'.
[  811.556094][T18333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3352'.
[  811.571350][T18333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3352'.
[  811.872160][T18343] netlink: 'syz.2.3357': attribute type 1 has an invalid length.
[  812.309495][T18353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  813.282637][T18380] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3365'.
[  813.325789][T18380] openvswitch: netlink: Tunnel attr 13157 out of range max 16
[  813.680408][T18394] netlink: 'syz.0.3368': attribute type 21 has an invalid length.
[  814.249568][T18405] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.3372'.
[  815.627122][T18454] netlink: 'syz.0.3385': attribute type 4 has an invalid length.
[  817.202051][T18475] netlink: 'syz.1.3394': attribute type 10 has an invalid length.
[  817.219752][T18475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3394'.
[  817.258910][T18475] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3394'.
[  817.720148][T18491] netlink: 'syz.2.3397': attribute type 4 has an invalid length.
[  817.864738][T18493] netlink: 'syz.2.3399': attribute type 21 has an invalid length.
[  817.885846][T18493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3399'.
[  817.895429][T18493] netlink: 'syz.2.3399': attribute type 1 has an invalid length.
[  821.246019][T18506] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.3401'.
[  821.536143][T18512] syzkaller0: entered promiscuous mode
[  821.542257][T18512] syzkaller0: entered allmulticast mode
[  821.568320][T18506] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.3401'.
[  821.582065][T18506] tipc: Started in network mode
[  821.589449][T18506] tipc: Node identity b, cluster identity 73
[  821.602006][T18506] tipc: Node number set to 11
[  822.269160][T18535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3410'.
[  825.058047][T18535] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3410'.
[  825.075015][T18538] ��
: port 1(gretap0) entered blocking state
[  825.081962][T18538] ��
: port 1(gretap0) entered disabled state
[  825.098498][T18538] gretap0: entered allmulticast mode
[  825.110413][T18538] gretap0: entered promiscuous mode
[  825.241200][T18550] netlink: 'syz.3.3411': attribute type 21 has an invalid length.
[  825.257860][T18550] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3411'.
[  825.305932][T18550] netlink: 'syz.3.3411': attribute type 1 has an invalid length.
[  825.333923][T18546] netpci0: tun_chr_ioctl cmd 2147767517
[  825.570106][T18556] wg2: entered promiscuous mode
[  825.576731][T18556] wg2: entered allmulticast mode
[  826.003981][T18569] wg2: entered promiscuous mode
[  826.025542][T18569] wg2: entered allmulticast mode
[  826.739369][T18578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3422'.
[  826.919945][T18578] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3422'.
[  826.961330][T18587] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3422'.
[  827.045381][T18598] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3426'.
[  827.062722][T18598] veth0_to_bond: entered promiscuous mode
[  827.394313][T18596] netlink: 'syz.3.3425': attribute type 2 has an invalid length.
[  827.402924][T18596] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3425'.
[  828.227548][T18616] wg2: entered promiscuous mode
[  828.239064][T18616] wg2: entered allmulticast mode
[  829.131810][T18647] netlink: 'syz.0.3441': attribute type 1 has an invalid length.
[  829.141946][T18647] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3441'.
[  829.176263][T18648] netlink: 'syz.0.3441': attribute type 1 has an invalid length.
[  829.269223][T18648] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3441'.
[  829.379005][T18653] IPv6: Can't replace route, no match found
[  829.400926][T18653] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  829.626077][T18660] netlink: 'syz.2.3446': attribute type 3 has an invalid length.
[  829.661337][T18660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3446'.
[  830.406642][T18683] netlink: 'syz.2.3455': attribute type 46 has an invalid length.
[  830.414634][T18683] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3455'.
[  830.472322][T18685] netlink: 'syz.3.3454': attribute type 29 has an invalid length.
[  830.481006][T18685] netlink: 'syz.3.3454': attribute type 29 has an invalid length.
[  833.302262][T18685] �: port 1(vlan0) entered disabled state
[  833.399162][T18690] �: port 1(vlan0) entered blocking state
[  833.405232][T18690] �: port 1(vlan0) entered forwarding state
[  833.670816][T18718] netlink: 'syz.0.3464': attribute type 41 has an invalid length.
[  833.706114][T18718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3464'.
[  834.520519][T18741] netlink: 'syz.0.3468': attribute type 22 has an invalid length.
[  834.546212][T18741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3468'.
[  834.799604][T18749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3471'.
[  834.812698][T18749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3471'.
[  834.824947][T18749] netlink: 13 bytes leftover after parsing attributes in process `syz.2.3471'.
[  836.556267][ T9565] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  837.223907][T18787] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3480'.
[  837.506088][T18792] IPv6: NLM_F_CREATE should be specified when creating new route
[  837.537138][T18792] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3483'.
[  838.596010][T18815] netlink: 'syz.0.3487': attribute type 17 has an invalid length.
[  838.614506][T18815] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3487'.
[  841.685313][T18830] syzkaller0: entered allmulticast mode
[  841.695464][T18838] netlink: 'syz.0.3492': attribute type 2 has an invalid length.
[  841.725778][T18838] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3492'.
[  841.774183][T18840] netlink: 'syz.2.3494': attribute type 3 has an invalid length.
[  841.777164][T18830] syzkaller0: entered promiscuous mode
[  841.796559][T18840] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3494'.
[  841.836756][T18830] syzkaller0: left allmulticast mode
[  841.870984][T18836] syzkaller0: left promiscuous mode
[  843.715475][T18876] netlink: 'syz.0.3503': attribute type 10 has an invalid length.
[  843.794422][T18876] bond0: (slave bond_slave_0): Releasing backup interface
[  843.948083][T18881] netlink: 'syz.3.3505': attribute type 1 has an invalid length.
[  843.961554][T18881] netlink: 'syz.3.3505': attribute type 10 has an invalid length.
[  844.032603][T18881] team0: Device vxcan1 is of different type
[  844.069732][T18882] netlink: 'syz.3.3505': attribute type 10 has an invalid length.
[  844.093416][T18882] team0: Device vxcan1 is of different type
[  844.317510][T18890] netlink: 'syz.3.3508': attribute type 29 has an invalid length.
[  844.337363][T18890] netlink: 'syz.3.3508': attribute type 29 has an invalid length.
[  844.424315][T18895] ip6_vti0: mtu greater than device maximum
[  844.611555][T18899] netlink: 'syz.3.3512': attribute type 1 has an invalid length.
[  844.643560][T18899] netlink: 'syz.3.3512': attribute type 3 has an invalid length.
[  844.684436][T18899] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3512'.
[  845.010943][T18911] netlink: 'syz.1.3514': attribute type 10 has an invalid length.
[  845.135968][T18891] delete_channel: no stack
[  845.299361][T18914] netlink: 'syz.3.3515': attribute type 1 has an invalid length.
[  845.325799][T18914] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3515'.
[  845.335190][T18914] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3515'.
[  845.378089][T18923] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3517'.
[  846.783925][T18953] netlink: 207848 bytes leftover after parsing attributes in process `syz.1.3525'.
[  846.827856][T18954] netlink: 207848 bytes leftover after parsing attributes in process `syz.1.3525'.
[  847.103771][T18963] sock: sock_set_timeout: `syz.3.3528' (pid 18963) tries to set negative timeout
[  848.167814][T18972] team0 (unregistering): Port device C removed
[  848.327356][T18972] team0 (unregistering): Port device team_slave_1 removed
[  848.409730][T18986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3534'.
[  848.870897][T19004] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3539'.
[  848.917850][T19004] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3539'.
[  848.986514][T19004] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3539'.
[  849.492182][T19020] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3543'.
[  850.768286][T19035] validate_nla: 9 callbacks suppressed
[  850.768321][T19035] netlink: 'syz.0.3546': attribute type 2 has an invalid length.
[  850.839119][T19035] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3546'.
[  852.705021][T19068] syzkaller0: entered promiscuous mode
[  852.714728][T19068] syzkaller0: entered allmulticast mode
[  852.930815][T19079] netlink: 'syz.2.3555': attribute type 1 has an invalid length.
[  852.969895][T19079] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3555'.
[  853.029745][T19079] netlink: 'syz.2.3555': attribute type 1 has an invalid length.
[  858.228326][T19098] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3560'.
[  858.238241][T19093] netlink: 'syz.2.3560': attribute type 19 has an invalid length.
[  858.246285][T19093] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3560'.
[  858.256415][T19105] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  858.263721][T19105] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  858.886997][T19124] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3568'.
[  859.222523][T19144] netlink: 'syz.3.3575': attribute type 2 has an invalid length.
[  859.230964][T19144] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3575'.
[  859.281470][T19146] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3576'.
[  859.405491][T19148] netlink: 'syz.1.3577': attribute type 10 has an invalid length.
[  859.445593][T19148] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.456811][T19148] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.501180][T19148] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  859.512943][T19148] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  860.945020][T19182] netlink: 'syz.2.3587': attribute type 3 has an invalid length.
[  860.976003][T19182] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3587'.
[  861.134074][T19174] netlink: 'syz.0.3584': attribute type 21 has an invalid length.
[  861.166391][T19174] lo: entered allmulticast mode
[  861.362784][T19192] netlink: 'syz.3.3589': attribute type 21 has an invalid length.
[  861.382945][T19192] netlink: 'syz.3.3589': attribute type 6 has an invalid length.
[  861.393219][T19192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3589'.
[  861.825082][T19203] netlink: 'syz.1.3594': attribute type 7 has an invalid length.
[  862.035799][T19211] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.3597'.
[  862.124354][T19216] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3598'.
[  863.162810][T19240] netlink: 'syz.2.3607': attribute type 3 has an invalid length.
[  863.193610][T19243] bridge0: port 3(`) entered disabled state
[  863.209136][T19240] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3607'.
[  864.007495][T19243] bridge_slave_1: left allmulticast mode
[  864.013250][T19243] bridge_slave_1: left promiscuous mode
[  864.040252][T19243] bridge0: port 2(bridge_slave_1) entered disabled state
[  864.065203][T19243] bridge_slave_0: left allmulticast mode
[  864.078001][T19243] bridge_slave_0: left promiscuous mode
[  864.087175][T19243] bridge0: port 1(bridge_slave_0) entered disabled state
[  864.180596][T19243] bond0: (slave bridge0): Releasing backup interface
[  864.289229][T19249] syz.1.3606 (19249) used obsolete PPPIOCDETACH ioctl
[  864.506273][T19264] netlink: 'syz.3.3613': attribute type 3 has an invalid length.
[  864.540508][T19264] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3613'.
[  866.051010][T19294] netlink: 'syz.2.3620': attribute type 25 has an invalid length.
[  867.471988][T19356] netlink: 'syz.1.3637': attribute type 39 has an invalid length.
[  868.101212][T19365] syzkaller0: entered promiscuous mode
[  868.107038][T19365] syzkaller0: entered allmulticast mode
[  868.556653][ T9565] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  868.694671][T19393] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3649'.
[  868.710424][T19393] openvswitch: netlink: Flow key attribute not present in set flow.
[  868.851170][T19397] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3651'.
[  868.997381][T19397] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  869.017210][T19397] CPU: 0 PID: 19397 Comm: syz.3.3651 Not tainted syzkaller #0
[  869.024774][T19397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  869.034891][T19397] Call Trace:
[  869.038227][T19397]  <TASK>
[  869.041202][T19397]  dump_stack_lvl+0x18c/0x250
[  869.045954][T19397]  ? show_regs_print_info+0x20/0x20
[  869.051231][T19397]  ? load_image+0x400/0x400
[  869.055825][T19397]  sysfs_warn_dup+0x8e/0xa0
[  869.060389][T19397]  sysfs_do_create_link_sd+0xc0/0x110
[  869.065823][T19397]  device_add_class_symlinks+0x1cf/0x240
[  869.071534][T19397]  device_add+0x507/0xc20
[  869.075947][T19397]  wiphy_register+0x1dad/0x2ae0
[  869.080888][T19397]  ? cfg80211_event_work+0x40/0x40
[  869.086051][T19397]  ? minstrel_ht_alloc+0x88a/0x990
[  869.091220][T19397]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  869.097334][T19397]  ieee80211_register_hw+0x3464/0x4250
[  869.102867][T19397]  ? ieee80211_tasklet_handler+0x20/0x20
[  869.108547][T19397]  ? __hrtimer_init+0x7e/0x270
[  869.113348][T19397]  ? __sanitizer_cov_trace_const_cmp4+0x36/0x90
[  869.119619][T19397]  ? __hrtimer_init+0x186/0x270
[  869.124499][T19397]  mac80211_hwsim_new_radio+0x2a00/0x4d10
[  869.130290][T19397]  ? mac80211_hwsim_free+0x220/0x220
[  869.135616][T19397]  ? rcu_is_watching+0x15/0xb0
[  869.140423][T19397]  ? kstrndup+0xbd/0x140
[  869.144720][T19397]  hwsim_new_radio_nl+0xdc9/0x1a90
[  869.149878][T19397]  ? mark_lock+0x94/0x320
[  869.154246][T19397]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  869.160267][T19397]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  869.166724][T19397]  ? lockdep_hardirqs_on+0x98/0x150
[  869.172008][T19397]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  869.178241][T19397]  ? genl_family_rcv_msg_attrs_parse+0x1ca/0x290
[  869.184650][T19397]  genl_family_rcv_msg_doit+0x211/0x310
[  869.190245][T19397]  ? end_current_label_crit_section+0x170/0x170
[  869.196542][T19397]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  869.202481][T19397]  ? bpf_lsm_capable+0x9/0x10
[  869.207198][T19397]  ? security_capable+0x89/0xb0
[  869.212097][T19397]  genl_rcv_msg+0x619/0x7a0
[  869.216640][T19397]  ? genl_bind+0x360/0x360
[  869.221088][T19397]  ? hwsim_tx_info_frame_received_nl+0xd60/0xd60
[  869.227469][T19397]  ? netlink_rcv_skb+0x1dd/0x4d0
[  869.232464][T19397]  netlink_rcv_skb+0x241/0x4d0
[  869.237282][T19397]  ? genl_bind+0x360/0x360
[  869.241731][T19397]  ? netlink_ack+0x1180/0x1180
[  869.246545][T19397]  ? __lock_acquire+0x7d40/0x7d40
[  869.251607][T19397]  ? down_read+0x1ac/0x2e0
[  869.256052][T19397]  genl_rcv+0x28/0x40
[  869.260070][T19397]  netlink_unicast+0x751/0x8d0
[  869.264885][T19397]  netlink_sendmsg+0x8d0/0xbf0
[  869.269699][T19397]  ? netlink_getsockopt+0x590/0x590
[  869.274978][T19397]  ? aa_sock_msg_perm+0x94/0x150
[  869.279977][T19397]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  869.285302][T19397]  ? security_socket_sendmsg+0x80/0xa0
[  869.290800][T19397]  ? netlink_getsockopt+0x590/0x590
[  869.296039][T19397]  ____sys_sendmsg+0x5ba/0x960
[  869.300845][T19397]  ? __asan_memset+0x22/0x40
[  869.305481][T19397]  ? __sys_sendmsg_sock+0x30/0x30
[  869.310547][T19397]  ? __import_iovec+0x5f2/0x850
[  869.315446][T19397]  ? import_iovec+0x73/0xa0
[  869.320010][T19397]  ___sys_sendmsg+0x2a6/0x360
[  869.324777][T19397]  ? __sys_sendmsg+0x2a0/0x2a0
[  869.329598][T19397]  ? lockdep_softirqs_on+0x307/0x580
[  869.334951][T19397]  __se_sys_sendmsg+0x1c2/0x2b0
[  869.339868][T19397]  ? __x64_sys_sendmsg+0x80/0x80
[  869.344879][T19397]  ? lockdep_hardirqs_on+0x98/0x150
[  869.350124][T19397]  do_syscall_64+0x55/0xa0
[  869.354594][T19397]  ? clear_bhb_loop+0x40/0x90
[  869.359304][T19397]  ? clear_bhb_loop+0x40/0x90
[  869.364027][T19397]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  869.369950][T19397] RIP: 0033:0x7f0b4e59c799
[  869.374399][T19397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  869.394048][T19397] RSP: 002b:00007f0b4f4cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  869.402504][T19397] RAX: ffffffffffffffda RBX: 00007f0b4e815fa0 RCX: 00007f0b4e59c799
[  869.410729][T19397] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  869.418731][T19397] RBP: 00007f0b4e632bd9 R08: 0000000000000000 R09: 0000000000000000
[  869.426740][T19397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  869.434742][T19397] R13: 00007f0b4e816038 R14: 00007f0b4e815fa0 R15: 00007fffe19d8c38
[  869.442767][T19397]  </TASK>
[  870.479775][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  870.495890][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  872.619372][T19428] syzkaller0: entered promiscuous mode
[  872.644571][T19428] syzkaller0: entered allmulticast mode
[  872.730384][T19434] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3661'.
[  872.879658][T19436] netlink: 'syz.1.3660': attribute type 21 has an invalid length.
[  872.928564][T19436] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3660'.
[  876.225786][T19443] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3664'.
[  877.160832][T19474] IPv6: Can't replace route, no match found
[  877.178500][T19474] mac80211_hwsim hwsim35 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  878.098514][T19506] netlink: 'syz.3.3682': attribute type 9 has an invalid length.
[  878.156075][T19506] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3682'.
[  878.192633][T19505] netlink: 'syz.3.3682': attribute type 9 has an invalid length.
[  878.214440][T19505] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3682'.
[  878.670922][T19513] IPv6: Can't replace route, no match found
[  878.708237][T19513] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  879.193794][T19533] netlink: 'syz.0.3690': attribute type 3 has an invalid length.
[  879.202230][T19533] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3690'.
[  879.290082][T19536] syzkaller0: entered promiscuous mode
[  879.305782][T19536] syzkaller0: entered allmulticast mode
[  879.622694][T19540] ip6_tunnel: non-ECT from 0003:0000:0000:0000:0000:0000:ac14:140a with DS=0x31
[  880.150892][T19549] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.3696'.
[  880.171956][T19549] netlink: 207848 bytes leftover after parsing attributes in process `syz.3.3696'.
[  880.243971][T19555] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3698'.
[  883.217817][T19563] syzkaller0: entered promiscuous mode
[  883.223596][T19563] syzkaller0: entered allmulticast mode
[  883.231944][T19565] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3700'.
[  883.242551][T19564] IPv6: Can't replace route, no match found
[  883.257137][T19567] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  886.240680][T19576] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3701'.
[  886.923000][T19616] netlink: 'syz.3.3714': attribute type 29 has an invalid length.
[  886.933073][T19616] netlink: 'syz.3.3714': attribute type 29 has an invalid length.
[  886.953835][T19616] netlink: 'syz.3.3714': attribute type 29 has an invalid length.
[  886.978015][T19616] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.3714'.
[  887.317493][T19622] netlink: set zone limit has 8 unknown bytes
[  887.332357][T19627] netlink: 'syz.0.3716': attribute type 10 has an invalid length.
[  887.365698][T19627] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3716'.
[  887.393032][T19625] netlink: 'syz.0.3716': attribute type 10 has an invalid length.
[  887.401516][T19625] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3716'.
[  887.482481][T19628] netlink: 'syz.2.3717': attribute type 9 has an invalid length.
[  887.492380][T19628] netlink: 209704 bytes leftover after parsing attributes in process `syz.2.3717'.
[  887.641552][T19633] netlink: 207336 bytes leftover after parsing attributes in process `syz.2.3717'.
[  887.678183][T19633] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes.
[  887.854631][T19643] netlink: 'syz.1.3720': attribute type 21 has an invalid length.
[  888.998746][T19678] netlink: 'syz.2.3731': attribute type 3 has an invalid length.
[  889.048382][T19678] netlink: 'syz.2.3731': attribute type 1 has an invalid length.
[  889.056501][T19678] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3731'.
[  906.181791][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  906.196205][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  906.204630][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  906.213154][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  906.221220][ T5784] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  906.229014][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  906.405101][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  906.415415][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  906.424167][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  906.433867][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  906.442115][ T5784] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  906.451064][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  906.576958][T14275] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  906.591228][T14275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  906.600305][T14275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  906.609145][T14275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  906.617421][T14275] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  906.626426][T14275] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  906.720569][T14275] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  906.732203][T14275] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  906.744873][T14275] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  906.753643][T14275] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  906.765379][T14275] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  906.773310][T14275] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  908.315917][T14275] Bluetooth: hci3: command tx timeout
[  908.555901][T14275] Bluetooth: hci5: command tx timeout
[  908.715900][T14275] Bluetooth: hci6: command tx timeout
[  908.875929][T14275] Bluetooth: hci7: command tx timeout
[  910.395779][T14275] Bluetooth: hci3: command tx timeout
[  910.635826][T14275] Bluetooth: hci5: command tx timeout
[  910.795829][T14275] Bluetooth: hci6: command tx timeout
[  910.955900][T14275] Bluetooth: hci7: command tx timeout
[  912.477592][T14275] Bluetooth: hci3: command tx timeout
[  912.715975][T14275] Bluetooth: hci5: command tx timeout
[  912.875804][T14275] Bluetooth: hci6: command tx timeout
[  913.035738][T14275] Bluetooth: hci7: command tx timeout
[  914.555817][T14275] Bluetooth: hci3: command tx timeout
[  914.795794][T14275] Bluetooth: hci5: command tx timeout
[  914.955782][T14275] Bluetooth: hci6: command tx timeout
[  915.115925][T14275] Bluetooth: hci7: command tx timeout
[  931.920618][ T1279] ieee802154 phy0 wpan0: encryption failed: -22
[  931.934035][ T1279] ieee802154 phy1 wpan1: encryption failed: -22
[  948.475850][    C1] icmp: detected local route for 10.128.0.202 during ICMP sending, src 10.128.0.163
[  994.345606][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  994.352392][    C0] rcu: 	0-....: (10150 ticks this GP) idle=85d4/1/0x4000000000000000 softirq=78816/78816 fqs=3372
[  994.364227][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  994.370672][    C0] rcu: 	 number:  1340122          0            0
[  994.377160][    C0] rcu: 	cputime:    19121      33358           49   ==> 52510(ms)
[  994.385016][    C0] rcu: 	(t=10503 jiffies g=110949 q=951 ncpus=2)
[  994.391363][    C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 3631 jiffies! g110949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  994.403712][    C0] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=71789
[  994.411622][    C0] rcu: rcu_preempt kthread starved for 3634 jiffies! g110949 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  994.423015][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  994.433014][    C0] rcu: RCU grace-period kthread stack dump:
[  994.438955][    C0] task:rcu_preempt     state:I stack:26952 pid:17    ppid:2      flags:0x00004000
[  994.448298][    C0] Call Trace:
[  994.451604][    C0]  <TASK>
[  994.454582][    C0]  __schedule+0x1553/0x45a0
[  994.459140][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  994.465068][    C0]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  994.470992][    C0]  ? asan.module_dtor+0x20/0x20
[  994.475878][    C0]  ? enqueue_timer+0x23d/0x550
[  994.480673][    C0]  ? __mod_timer+0x984/0xdb0
[  994.485310][    C0]  schedule+0xbd/0x170
[  994.489422][    C0]  schedule_timeout+0x188/0x2d0
[  994.494329][    C0]  ? console_conditional_schedule+0x40/0x40
[  994.500248][    C0]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  994.506170][    C0]  ? update_process_times+0x1b0/0x1b0
[  994.511582][    C0]  ? prepare_to_swait_event+0x339/0x360
[  994.517159][    C0]  rcu_gp_fqs_loop+0x313/0x1590
[  994.522050][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  994.528234][    C0]  ? rcu_gp_init+0x1560/0x1560
[  994.533015][    C0]  ? rcu_gp_cleanup+0xb41/0xc90
[  994.537895][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  994.543128][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  994.548356][    C0]  rcu_gp_kthread+0x9d/0x3b0
[  994.552970][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  994.558111][    C0]  ? __kthread_parkme+0x7a/0x1c0
[  994.563096][    C0]  ? __kthread_parkme+0x162/0x1c0
[  994.568149][    C0]  kthread+0x2fa/0x390
[  994.572248][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  994.577407][    C0]  ? kthread_blkcg+0xd0/0xd0
[  994.582027][    C0]  ret_from_fork+0x48/0x80
[  994.586473][    C0]  ? kthread_blkcg+0xd0/0xd0
[  994.591088][    C0]  ret_from_fork_asm+0x11/0x20
[  994.595901][    C0]  </TASK>
[  994.598947][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  994.605301][    C0] Sending NMI from CPU 0 to CPUs 1:
[  994.610536][    C1] NMI backtrace for cpu 1
[  994.610545][    C1] CPU: 1 PID: 8009 Comm: kworker/u4:31 Not tainted syzkaller #0
[  994.610561][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  994.610589][    C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[  994.610611][    C1] RIP: 0010:queued_write_lock_slowpath+0x137/0x2ac
[  994.610635][    C1] Code: f0 41 81 0e 00 01 00 00 42 0f b6 04 23 84 c0 74 37 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 2a 4c 89 f7 e8 1d 68 50 f7 eb 20 f3 90 <42> 0f b6 04 23 84 c0 74 15 44 89 f1 80 e1 07 80 c1 03 38 c1 7c 08
[  994.610649][    C1] RSP: 0018:ffffc9000be6f2c0 EFLAGS: 00000206
[  994.610662][    C1] RAX: 00000000000001ff RBX: 1ffff1100b5f2305 RCX: ffffffff8a8ee2ed
[  994.610674][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88805af91828
[  994.610685][    C1] RBP: ffffc9000be6f370 R08: ffff88805af9182b R09: 1ffff1100b5f2305
[  994.610697][    C1] R10: dffffc0000000000 R11: ffffed100b5f2306 R12: dffffc0000000000
[  994.610709][    C1] R13: 1ffff920017cde5c R14: ffff88805af91828 R15: ffffc9000be6f310
[  994.610722][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  994.610737][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  994.610748][    C1] CR2: 00007ffd6c55bf50 CR3: 000000000cf32000 CR4: 00000000003506e0
[  994.610764][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  994.610773][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  994.610784][    C1] Call Trace:
[  994.610790][    C1]  <TASK>
[  994.610798][    C1]  ? queued_read_lock_slowpath+0x250/0x250
[  994.610826][    C1]  do_raw_write_lock+0x1ea/0x260
[  994.610851][    C1]  ? do_raw_read_unlock+0x80/0x80
[  994.610874][    C1]  ? nf_nat_inet_fn+0x975/0xbe0
[  994.610897][    C1]  ? __neigh_event_send+0x3b/0x1440
[  994.610922][    C1]  __neigh_event_send+0x3b/0x1440
[  994.610951][    C1]  neigh_resolve_output+0x19b/0x730
[  994.610975][    C1]  ? ip_finish_output2+0x11e0/0x11e0
[  994.610991][    C1]  ? nf_nat_ipv4_out+0x3af/0x4d0
[  994.611018][    C1]  ? ip_finish_output2+0x457/0x11e0
[  994.611034][    C1]  ip_finish_output2+0xd3a/0x11e0
[  994.611051][    C1]  ? ip_finish_output2+0x457/0x11e0
[  994.611069][    C1]  ? nf_hook+0xa2/0x390
[  994.611093][    C1]  ? __ip_local_out+0x5f0/0x5f0
[  994.611119][    C1]  ? ip_fragment+0x210/0x210
[  994.611134][    C1]  ? ip_mc_finish_output+0x250/0x250
[  994.611159][    C1]  ? ip_skb_dst_mtu+0x58a/0x9c0
[  994.611176][    C1]  ? ip_finish_output+0x3ef/0x4c0
[  994.611205][    C1]  ip_output+0x2a1/0x3b0
[  994.611220][    C1]  ? ip_output+0x60/0x3b0
[  994.611235][    C1]  iptunnel_xmit+0x4f0/0x920
[  994.611264][    C1]  udp_tunnel_xmit_skb+0x249/0x390
[  994.611295][    C1]  send4+0x9dc/0xe40
[  994.611317][    C1]  ? send4+0x226/0xe40
[  994.611335][    C1]  ? wg_socket_send_skb_to_peer+0x1c0/0x1c0
[  994.611362][    C1]  wg_socket_send_skb_to_peer+0xd1/0x1c0
[  994.611383][    C1]  wg_packet_handshake_send_worker+0x207/0x350
[  994.611403][    C1]  ? wg_prev_queue_dequeue+0x220/0x220
[  994.611430][    C1]  ? preempt_schedule_thunk+0x1a/0x30
[  994.611456][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  994.611478][    C1]  ? process_scheduled_works+0x96f/0x15d0
[  994.611505][    C1]  process_scheduled_works+0xa5d/0x15d0
[  994.611542][    C1]  ? worker_attach_to_pool+0x380/0x380
[  994.611567][    C1]  ? assign_work+0x3d2/0x5d0
[  994.611591][    C1]  worker_thread+0xa55/0xfc0
[  994.611627][    C1]  kthread+0x2fa/0x390
[  994.611642][    C1]  ? pr_cont_work+0x560/0x560
[  994.611670][    C1]  ? kthread_blkcg+0xd0/0xd0
[  994.611686][    C1]  ret_from_fork+0x48/0x80
[  994.611707][    C1]  ? kthread_blkcg+0xd0/0xd0
[  994.611723][    C1]  ret_from_fork_asm+0x11/0x20
[  994.611754][    C1]  </TASK>
[  994.612553][    C0] CPU: 0 PID: 19674 Comm: syz.1.3729 Not tainted syzkaller #0
[  994.974732][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  994.984819][    C0] RIP: 0010:rcu_read_unlock_special+0x83/0x4d0
[  994.991015][    C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 6e 05 92 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  995.010653][    C0] RSP: 0018:ffffc900000074c0 EFLAGS: 00000206
[  995.016749][    C0] RAX: 870d1193486f5600 RBX: 1ffff92000000e9c RCX: 870d1193486f5600
[  995.024747][    C0] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0
[  995.032748][    C0] RBP: ffffc90000007588 R08: ffffffff911c15cf R09: 1ffffffff22382b9
[  995.040756][    C0] R10: dffffc0000000000 R11: fffffbfff22382ba R12: ffffffff8d137300
[  995.048841][    C0] R13: dffffc0000000000 R14: ffff8880b8e3cf50 R15: 1ffff110171c79ea
[  995.056833][    C0] FS:  00007fc9b6dd06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  995.065794][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  995.072401][    C0] CR2: 0000200000034000 CR3: 000000007909f000 CR4: 00000000003506f0
[  995.080410][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  995.088419][    C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  995.096445][    C0] Call Trace:
[  995.099751][    C0]  <IRQ>
[  995.102624][    C0]  ? __rcu_read_unlock+0xd0/0xd0
[  995.107598][    C0]  ? read_lock_is_recursive+0x20/0x20
[  995.113026][    C0]  ? deref_stack_reg+0x1bd/0x240
[  995.118021][    C0]  __rcu_read_unlock+0x7c/0xd0
[  995.122867][    C0]  is_bpf_text_address+0x27e/0x2a0
[  995.128026][    C0]  ? is_bpf_text_address+0x26/0x2a0
[  995.133272][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  995.139465][    C0]  kernel_text_address+0xa0/0xd0
[  995.144450][    C0]  __kernel_text_address+0xd/0x30
[  995.149517][    C0]  unwind_get_return_address+0x5d/0xc0
[  995.155004][    C0]  ? stack_trace_save+0x100/0x100
[  995.160056][    C0]  arch_stack_walk+0x11d/0x190
[  995.164859][    C0]  stack_trace_save+0xaa/0x100
[  995.169656][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  995.174827][    C0]  ? mark_lock+0x94/0x320
[  995.179191][    C0]  kasan_set_track+0x4e/0x70
[  995.183813][    C0]  ? kasan_set_track+0x4e/0x70
[  995.188606][    C0]  ? kasan_save_free_info+0x2e/0x50
[  995.193832][    C0]  ? ____kasan_slab_free+0x126/0x1e0
[  995.199140][    C0]  ? slab_free_freelist_hook+0x130/0x1a0
[  995.204795][    C0]  ? kmem_cache_free+0xf8/0x270
[  995.209671][    C0]  ? neigh_invalidate+0x394/0x450
[  995.214729][    C0]  ? neigh_timer_handler+0x914/0xff0
[  995.220044][    C0]  ? call_timer_fn+0x189/0x540
[  995.224834][    C0]  ? __run_timers+0x542/0x800
[  995.229539][    C0]  ? run_timer_softirq+0x67/0xf0
[  995.234497][    C0]  ? handle_softirqs+0x280/0x820
[  995.239457][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  995.244253][    C0]  ? irq_exit_rcu+0x9/0x20
[  995.248698][    C0]  ? sysvec_apic_timer_interrupt+0xa4/0xc0
[  995.254528][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  995.260718][    C0]  ? generic_exec_single+0x481/0x4f0
[  995.266035][    C0]  ? smp_call_function_single+0x36d/0x5a0
[  995.271786][    C0]  ? event_function_call+0x359/0x650
[  995.277103][    C0]  ? perf_ioctl+0x1fdc/0x24a0
[  995.281806][    C0]  ? __se_sys_ioctl+0xfd/0x170
[  995.286609][    C0]  ? do_syscall_64+0x55/0xa0
[  995.291238][    C0]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  995.297391][    C0]  ? kmem_cache_free+0xf8/0x270
[  995.302280][    C0]  kasan_save_free_info+0x2e/0x50
[  995.307339][    C0]  ____kasan_slab_free+0x126/0x1e0
[  995.312482][    C0]  slab_free_freelist_hook+0x130/0x1a0
[  995.317975][    C0]  ? neigh_invalidate+0x394/0x450
[  995.323038][    C0]  kmem_cache_free+0xf8/0x270
[  995.327749][    C0]  neigh_invalidate+0x394/0x450
[  995.332640][    C0]  neigh_timer_handler+0x914/0xff0
[  995.337785][    C0]  call_timer_fn+0x189/0x540
[  995.342401][    C0]  ? neigh_release+0x80/0x80
[  995.347021][    C0]  ? call_timer_fn+0xd2/0x540
[  995.351726][    C0]  ? __run_timers+0x800/0x800
[  995.356439][    C0]  ? neigh_release+0x80/0x80
[  995.361061][    C0]  __run_timers+0x542/0x800
[  995.365608][    C0]  ? detach_timer+0x2b0/0x2b0
[  995.370325][    C0]  run_timer_softirq+0x67/0xf0
[  995.375122][    C0]  handle_softirqs+0x280/0x820
[  995.379916][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  995.384716][    C0]  ? do_softirq+0x1a0/0x1a0
[  995.389247][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  995.394483][    C0]  __irq_exit_rcu+0xd3/0x190
[  995.399103][    C0]  ? irq_exit_rcu+0x20/0x20
[  995.403638][    C0]  irq_exit_rcu+0x9/0x20
[  995.407931][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  995.413588][    C0]  </IRQ>
[  995.416552][    C0]  <TASK>
[  995.419502][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  995.425505][    C0] RIP: 0010:generic_exec_single+0x481/0x4f0
[  995.431424][    C0] Code: 75 11 e8 72 03 0b 00 48 85 db 75 16 e8 68 03 0b 00 eb 15 e8 61 03 0b 00 e8 3c fb 08 09 48 85 db 74 ea e8 52 03 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08
[  995.451060][    C0] RSP: 0018:ffffc90004a3f860 EFLAGS: 00000246
[  995.457164][    C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  995.465204][    C0] RDX: ffffc9000dabb000 RSI: 000000000000159b RDI: 000000000000159c
[  995.473202][    C0] RBP: ffffc90004a3f930 R08: ffffffff911c15ff R09: 1ffffffff22382bf
[  995.481287][    C0] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: 1ffff92000947f10
[  995.489287][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000947f31
[  995.497335][    C0]  ? event_function+0x300/0x300
[  995.502226][    C0]  ? smp_call_function_single+0x5a0/0x5a0
[  995.507982][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  995.513998][    C0]  ? smp_call_function_single+0xb0/0x5a0
[  995.519664][    C0]  smp_call_function_single+0x36d/0x5a0
[  995.525244][    C0]  ? event_function+0x300/0x300
[  995.530128][    C0]  ? flush_smp_call_function_queue+0x250/0x250
[  995.536307][    C0]  ? event_function+0x300/0x300
[  995.541203][    C0]  event_function_call+0x359/0x650
[  995.546345][    C0]  ? __perf_event_read+0xb90/0xb90
[  995.551505][    C0]  ? perf_event_ctx_lock_nested+0x490/0x490
[  995.557454][    C0]  ? event_function_call+0x650/0x650
[  995.562778][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  995.568966][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  995.574194][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  995.580388][    C0]  ? __perf_event_read+0xb90/0xb90
[  995.585536][    C0]  ? rep_movs_alternative+0x33/0x90
[  995.590777][    C0]  perf_ioctl+0x1fdc/0x24a0
[  995.595580][    C0]  ? tomoyo_path_number_perm+0x217/0x620
[  995.601253][    C0]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  995.606752][    C0]  ? perf_poll+0x1b0/0x1b0
[  995.611206][    C0]  ? perf_trace_run_bpf_submit+0xf4/0x1c0
[  995.617001][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  995.623039][    C0]  ? lock_chain_count+0x20/0x20
[  995.627933][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  995.634120][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  995.639373][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  995.645576][    C0]  ? perf_poll+0x1b0/0x1b0
[  995.650036][    C0]  ? __se_sys_ioctl+0xf1/0x170
[  995.654828][    C0]  ? perf_poll+0x1b0/0x1b0
[  995.659286][    C0]  __se_sys_ioctl+0xfd/0x170
[  995.663918][    C0]  do_syscall_64+0x55/0xa0
[  995.668371][    C0]  ? clear_bhb_loop+0x40/0x90
[  995.673073][    C0]  ? clear_bhb_loop+0x40/0x90
[  995.677779][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  995.683701][    C0] RIP: 0033:0x7fc9b5f9c799
[  995.688150][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  995.708106][    C0] RSP: 002b:00007fc9b6dd0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  995.716555][    C0] RAX: ffffffffffffffda RBX: 00007fc9b6215fa0 RCX: 00007fc9b5f9c799
[  995.724562][    C0] RDX: 00002000000001c0 RSI: 0000000040082404 RDI: 0000000000000004
[  995.732562][    C0] RBP: 00007fc9b6032bd9 R08: 0000000000000000 R09: 0000000000000000
[  995.740566][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  995.748560][    C0] R13: 00007fc9b6216038 R14: 00007fc9b6215fa0 R15: 00007ffc5fcbfc18
[  995.756764][    C0]  </TASK>