last executing test programs:

14.361912148s ago: executing program 3 (id=2819):
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x31)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a800160008000140090011009c0010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}, {&(0x7f0000000040)="17a92dc244cc3e8237c670b744b34c9e2db07c1b927f373bd0c9a7bf1b0d88ec55ec3d60bc7162e09f26cc81997d64031030f872f0755b11839dfffdcb2e83113980dc9836682f1ffbf7d127d2468eb32c1feeba6b89f3e7f50b2f851b1f78b5b1885272ef063127c85deb545c25c24759725b51e402e451832b9d5434d060200d90612096f787915c0bec8bf0d5463f311dc9e0e84346eb3968255b9756d32f89df32c9bd764bb5095d98f0b4e111cecc73bc370739c7a9b86d7191c8143dbcb1627bac70b07352ca49449460620807feb988772c4308667172fdf787423df4e0ca0966c12dfe2f9035fb8c1765cbcd03a3693bd7", 0xf5}], 0x2, 0x0, 0xffffffbd}, 0x804)

13.403681874s ago: executing program 3 (id=2824):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r0 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161)
sendmsg$kcm(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085)
socket$kcm(0xa, 0x3, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d, 0x400000, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r3, 0x4}, 0x38)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu&\'\'\t|\t')
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
gettid()
openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000b40)='devices.deny\x00', 0x2, 0x0)
r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x820, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000001340)='cpu\t>\"&&\t')
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, &(0x7f00000008c0)}, 0x40000120)

12.965645935s ago: executing program 3 (id=2828):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ca000000180100002020642500000000002020207b1af8ff00000000bfa100010000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x80, 0x4000000, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f00000006c0)=[{}], 0x8, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000780)}}, 0x10)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x80000001}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0xd, &(0x7f0000000940)=@raw=[@jmp={0x5, 0x1, 0xc, 0x9, 0x5, 0x100, 0x1}, @jmp={0x5, 0x1, 0xd, 0x8, 0x5, 0x50, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa30}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}], &(0x7f0000000400)='syzkaller\x00', 0x1, 0x72, &(0x7f0000000500)=""/114, 0x40f00, 0x42, '\x00', r0, 0x25, r2, 0x8, &(0x7f0000000b40)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r3], &(0x7f0000000c40), 0x10, 0x4b}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x43, 0x0, 0x0, 0x2}]}}, 0x0, 0x2a}, 0x79)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66}, 0x20)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffd4, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)="22ece7042515333be9e37372a6e6c3a2641ff9d254b2b2a23a403e40a79b72f4de9e581f8f9222bac8545d285a8e3e038ac9f5cb78e8001a2efd3d9f1c19d59840bbeb70202a2fa475e9dc45d331785aba90e5fde3bb1463895e563a883ef2a09fbdfb58", &(0x7f0000000080)="dc09b5e73f4dc5741563499751d4a9fe39caaaf5ea9243ec17f4d6e385185994", 0xce, r6}, 0x38)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

12.609883781s ago: executing program 3 (id=2831):
socket$kcm(0x10, 0x400000002, 0x0)
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000540)=@hci, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)=""/98, 0x62}], 0x1, &(0x7f0000000680)=""/146, 0x92}, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff)
sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000}, 0x94)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = gettid()
perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x2, 0x6, 0xcb, 0x8c, 0x0, 0x100000001, 0x22400, 0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa0, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x30, 0x2, 0x0, 0x80000001, 0xb, 0x0, 0x0, 0x6, 0x0, 0x6d66}, r2, 0xb, r0, 0xb)
perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @loopback}}}], 0x20}, 0xe900)
sendmsg$inet(r3, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003280)=[{&(0x7f00000002c0)="be79bdaf7c9134b89b4fab4ccfc8fdfd3d81223b69759ba4cd5506c54a446d1304c7fa2ff45463e2f0ab0a00c71cfd5dada0e792c349869366e75624f1a71777707e08", 0x43}, {&(0x7f0000002040)="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", 0x57d}], 0x2, &(0x7f00000033c0)=ANY=[], 0x118}, 0x80)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x10000, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)

12.237427839s ago: executing program 3 (id=2837):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000001050000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff4cff8085000000c700000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

12.033392529s ago: executing program 3 (id=2840):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
gettid()
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]})
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
close(r2)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
close(r4)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff"], 0x48)
setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r6=>0x0, <r7=>0x0})
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r6)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x2000, 0x64656461}}, 0x10, 0x0}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x0, 0x0}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r1}, 0x20)
socket$kcm(0x10, 0x2, 0x0)
r9 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r9, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x48004)
recvmsg(r9, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

6.355419978s ago: executing program 1 (id=2859):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x100000, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)

5.890801101s ago: executing program 1 (id=2863):
socket$kcm(0x2, 0x200000000000001, 0x106)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0xfffffffe}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4)
r3 = perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x80, 0x0, 0x3, 0x7, 0xe, 0x0, 0x28ae, 0x1001, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x3, @perf_bp={&(0x7f00000005c0), 0x1}, 0xba0, 0x3, 0x20002, 0x0, 0x200, 0x8, 0x0, 0x0, 0x4, 0x0, 0x400}, r1, 0xa, 0xffffffffffffffff, 0x11)
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000000040), 0x12b)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8)
r4 = socket$kcm(0x18, 0x0, 0x0)
recvmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000000240)=""/106, 0x6a}], 0x5, &(0x7f0000000440)=""/211, 0xd3}, 0x40000002)
socket$kcm(0x11, 0x3, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000009008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7}, 0x94)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r8}, 0x18)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r7, 0x0, 0x0}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x10001, 0xffffffffffffff08}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x78023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xfffffff7ffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
close(0xffffffffffffffff)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50)

5.613434184s ago: executing program 2 (id=2864):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r0, 0x14, 0x1, 0xff, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
r1 = socket$kcm(0x11, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0xa}, 0x19183, 0x1, 0x5, 0x7, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x6)
ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000400))
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x8, 0x40, 0x3, 0x41, 0xffffffffffffffff, 0x1000000}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
socket$kcm(0xa, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="5e675ef8cc1a0aac37033d0500000000000000de6eae47"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48)
sendmsg$sock(r1, &(0x7f0000000180)={&(0x7f0000000000)=@phonet={0x23, 0x80, 0x2, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@timestamping={{0x14}}], 0x18}, 0x4008000)

5.468030811s ago: executing program 0 (id=2866):
socket$kcm(0x11, 0x6, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000005c0), 0x4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = socket$kcm(0x10, 0x1, 0x10)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1c00000033000b12c25aa9cb8c2194f90124fc60100c034006000000", 0x1c}], 0x1}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000008000000400000000300000041000000", @ANYRES32, @ANYBLOB="00e7ffffff00000000000000000051cc0000f2ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000040), 0x1003, r2}, 0x38)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000380)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x4c, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r3, 0x12, 0x0, 0xfff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0, &(0x7f0000000280)}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0xffffffffffffffff)
r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
socket$kcm(0x1e, 0x5, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100ff05142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0)
r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x10ae80, 0x2, 0x0, 0x5, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(r7)

5.302786549s ago: executing program 1 (id=2867):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], 0x0, 0x0, 0x25, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x42, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x32}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000001800000000000000", @ANYRES32], 0x0}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe000024"], 0xfe33)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, &(0x7f0000000080))
r2 = perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x5b, 0xa, 0xc7, 0x0, 0x0, 0x1, 0x80, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x74ed, 0x2, @perf_bp={&(0x7f0000000040)}, 0x0, 0x400, 0xa3, 0x389a1f0f0e992321, 0x1, 0x4, 0x6, 0x0, 0x10001, 0x0, 0xbcfa}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000001c0))

4.983882753s ago: executing program 4 (id=2869):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) (async)
gettid()
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x2, 0xffffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) (async)
ioctl$TUNSETOFFLOAD(r2, 0x4004743c, 0xf0ff1f00000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000711224000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000300002cdd7cab000000000000000000000000536154ffbc7d1d342bca629f4b0a310c52d470ca21779df2e700000000000000679d810902570ed9da32a81dcad39a3f3395a0555a49ab51dc74f7bce98fa7257d97c4326b5cebad9e2007489b84d33477898bbe7bdc0326b4170d7d078322ba76bdc123f1564a44fd64"], 0x50)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x200}) (async)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x4}, {0x0, 0x0, 0x8}, {0x2, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x10000000}]})
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe8000ffffff0700875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4)

4.882792439s ago: executing program 1 (id=2870):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32], 0xfe33)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x1, 0x6}, 0x1080, 0x0, 0x51, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x13, 0x21, &(0x7f0000002400)=ANY=[], 0x0, 0x5, 0xbf, &(0x7f0000001300)=""/191, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000026c0)={0x3, 0xc, 0x5, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="28200200000000007111b70000000000060000000000e2ff9500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d7", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000011c0)={r0, 0x58, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x339)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xb, 0x0, r3, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="8510000000000069a41000000000000085100000000000008510000000000000b7080000000000007b8af8ff00000000b7080000a10000000000000007040000f0ffffffb7020000080000001823000000000000000000000000000000000000000000000002000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000780)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080))

4.801378052s ago: executing program 0 (id=2871):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000007d00000095000000000000009500a505000000005ca3c7de71d641340b51941b6f5b54ec"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x18, 0x1, 0x1, [<r3=>0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x18)
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
getpid()
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}, 0x2408, 0x0, 0xfffffffc, 0x9, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socket$kcm(0x10, 0x2, 0x10)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x40, 0x0, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
socket$kcm(0x2b, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
close(r6)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$kcm(0x2c, 0x3, 0x0)
r7 = socket$kcm(0xa, 0x5, 0x0)
r8 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8916, &(0x7f0000000000)={r8})
r9 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x8916, &(0x7f0000000000)={r9})
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)={r8})

4.800911362s ago: executing program 2 (id=2872):
r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x48000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2})
ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r3, 0x400454ce, 0x30a)
ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0xa, 0x1, 0x8, 0xffffffffffffffe0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

4.336419904s ago: executing program 1 (id=2873):
r0 = socket$kcm(0xa, 0x4, 0x106)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c3010000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22)
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0xfffffffffffffff7, 0x4}, 0x3442, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x0, 0x100, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x4, 0x27, 0x40, 0x7, 0x0, 0x0, 0xd085, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x1f502, 0x6, 0x6, 0x3, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0xffffffffffffffff, 0x0, r2, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffc}, 0x50)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa)
r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
close(r4)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440))
socket$kcm(0x10, 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='cpuset.memory_pressure\x00', 0x0, 0x0)
r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4)
ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000480)=r6)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.974519591s ago: executing program 2 (id=2874):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x4)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x2, 0x80, 0x8, 0x3d, 0x9, 0x0, 0x0, 0x2, 0x8000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x5, @perf_bp={&(0x7f0000000100), 0xc}, 0xd8a2, 0x401, 0x5, 0x4, 0x1ff, 0xcfd, 0x3, 0x0, 0x2, 0x0, 0x9}, r2, 0x7, r0, 0x2)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)

3.436464487s ago: executing program 0 (id=2875):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000400)}, 0x10) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x4}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x4, <r4=>0x0}, 0x8)
r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000006c0), 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50)
r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xb}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
recvmsg$unix(r9, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYRES8=r10], 0x9a)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18) (async)
r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x4, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x7d18}, [@ldst={0x2, 0x1, 0x4, 0x3, 0x5, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xe3, &(0x7f0000000300)=""/227, 0x41100, 0x5, '\x00', r2, @fallback=0x15, r3, 0x8, &(0x7f0000000580)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0x5, 0x2020}, 0x10, r4, r5, 0x0, &(0x7f0000000bc0)=[r6, 0xffffffffffffffff, r7, r1, r8, r11, r12], 0x0, 0x10, 0x800}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r13, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x9, 0x8, 0x56, 0xfb, 0x0, 0xfff, 0x82100, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x10, 0x4}, 0x2000, 0x8000, 0x5, 0x5, 0x5, 0xc, 0x0, 0x0, 0x8, 0x0, 0x5482})

3.177828059s ago: executing program 4 (id=2876):
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x614f6d401c4ee0a4)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x7, 0xfe, 0x0, 0x0, 0x0, 0x1b, 0x19000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x40000006, 0xffffffff, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42)
socket$kcm(0x10, 0x400000002, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x3, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x110022, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0)
r5 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94)
sendmsg$inet(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0xfffd, @empty}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040)
sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x4e20, @private=0xa010121}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="973458bf3f57641ec511d259bc25d876e92789e15edaddb2e873591fbb5801482b0bda44a4084608095a18bc70aa2acfcb04f3237bf0e7ee3d7fc8aec8cb20d4632deeccb1560182994eaca1a9e945f9d074730c4890f5", 0x66}], 0x1}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
close(r7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000001500)=ANY=[@ANYBLOB="180200000200000000000000000000009500000000000000f6a04fc4cf2f2ed85f2ca56f0a27896147ae6d85973f6bff0f11f0c853587ae06636be55e3bb5963a5177f0af8c76d3855a27f000011d4fb23192113d35fd1da3478bed71827b9ad500d2639995f762f4205c98e295a1c6881c5fc9afddafedf9950dc85794cc43e0c3ad3d8eea22e8456ab22868ec384901ff84bbcfcf3b3ea7264fe2ad1993b0f1b01eaffe89130f4e5d8ad6c66e2d82df770b7dbd5b199c1efe28a657fddde677b7ca9ac5614ed2bc26b90237d1d6d6217e258aa2c349354a76e5ed079baaa665e6558f849fb14ee5155d8f1b1bd8669ff067272700b8b0771459bdc9aabcce64ac4607f81bd57e91042"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r8, 0x8)

3.052895415s ago: executing program 1 (id=2877):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.stat\x00', 0x26e1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000002000000732a80ff00000000632ac8ff00000000180200000a0000010000000000000000180200000a0000010000000000000000bfa200000000000007020000c0ffffffb703000040000000b704000000000000850000004500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x0, 0xe, 0x0, &(0x7f00000005c0)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)='+', 0x1}], 0x1}, 0x4044004)
sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="d003", 0x2}], 0x1}, 0x40041)
sendmsg$inet(r0, &(0x7f0000001ac0)={&(0x7f0000000740)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001080)="ea1460", 0x3}], 0x1, &(0x7f00000017c0)=ANY=[@ANYBLOB="1100000000000000000000000100000005000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14142d6401010000000000280000000000000000000000070000000717c1e0000002e00000017f0000016401010264010101001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e0000002ffffffff000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e0000001ac1414bb000000001400000000000000000000000200000007000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="e000000264010101000000001400"], 0xf0}, 0x800)
r3 = getpid()
perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x2)
syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500010011000000630a04ff000000004000000000740000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='b 122532'], 0xa)
openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socket$kcm(0x10, 0x2, 0x0)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x9, 0x100, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x4b15}, r7, 0x0, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91424fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x3)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.045668686s ago: executing program 2 (id=2878):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="1860000010000000000000000000000018400000030000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000600000018290000", @ANYRES32=0x1, @ANYBLOB="00000000c0f80000"], &(0x7f0000000200)='GPL\x00', 0x2, 0xf7, &(0x7f0000000240)=""/247, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x7, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x4, 0x2}, {0x5, 0x2, 0x9, 0x5}], 0x10, 0x3800000}, 0x94)
r5 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$kcm(r5, 0x0, 0x0)
sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000006c0)=@in={0x2, 0x4e22, @empty}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00)'], 0x58}, 0x8080)
close(r3)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x1c0)
write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES32=r1], 0x9a)

2.865247974s ago: executing program 0 (id=2879):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000069123a000000000016000000000000009500"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'})
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_clone(0x4001000, &(0x7f00000005c0)="68c3ac7309b28945ee3034c2451afddb517a022a11146a8269742b6ebcc7067ab954ab981d6e14fc9aab74f39a51fcd6674dc34b583381f6feb7ba8fca7158819195699f5f0a2744c4ae9d91f2c81fc868d1d66ec71d6c96d1ebc1ce5ed418c0373c4c7cd9af4ca01b9bf8839f0e0b1a781775fd0398870e440bca3bf6410eebbf7eab7ffaf81139ce776a00a44218e684e36d88ac20c211515b8417148f3893a6ee61b77d6829e4db1324cf36e055096f6cc548c9153c76674edf46cc73d31210c684f848b494a694814d2d76f013e2c9e60e3c62069c415b1e7b10cb08e11f97", 0xe1, 0x0, &(0x7f0000000700), &(0x7f0000000d40)="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")
perf_event_open$cgroup(&(0x7f0000000840)={0x1, 0x80, 0x9, 0x23, 0xb, 0x0, 0x0, 0x44, 0xa100, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x3}, 0x14201, 0x1, 0x7fffffff, 0x5, 0x6, 0xffffffff, 0x2, 0x0, 0xffffffff, 0x0, 0xffffffff00000000}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x5)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b", @ANYRESDEC], 0x50)
syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4)
socket$kcm(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x718}, 0x804, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0209070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0)
sendmsg$inet(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20000000)
recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x40000000)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)

2.013776425s ago: executing program 4 (id=2880):
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x1}, 0x13d, 0x0, 0xc2ba, 0x0, 0x4000000, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910069cdfb5cc682e02e0a"], 0xfe33)

1.872284931s ago: executing program 2 (id=2881):
r0 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r1 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94)
close(0x3)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0xec, 0x7, 0x40, 0x17, 0x0, 0x1, 0x2005f, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11808b, 0x6, 0x3, 0x0, 0x81, 0x2, 0x5, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r6, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)

1.512085428s ago: executing program 4 (id=2882):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003"], 0x48) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000003"], 0x48)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="d80000001000812dc78bade9044e81f782dbc7ae697515080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a000440f2070000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c3794bccef41e0800001fb73a5ee4ce1b14d6d930dfe1d9d322fe969f8779730d16a4683f5aeb4edbb57a50253a744ab5360db766e10bc4b0ce22ef42c81bf70100000040fad95667e006dcdf73951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee7de6ccd4", 0xd6}], 0x1, 0x0, 0xfffffed9}, 0x4000040) (async)
sendmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="d80000001000812dc78bade9044e81f782dbc7ae697515080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a000440f2070000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c3794bccef41e0800001fb73a5ee4ce1b14d6d930dfe1d9d322fe969f8779730d16a4683f5aeb4edbb57a50253a744ab5360db766e10bc4b0ce22ef42c81bf70100000040fad95667e006dcdf73951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee7de6ccd4", 0xd6}], 0x1, 0x0, 0xfffffed9}, 0x4000040)
socket$kcm(0x2, 0x5, 0x84) (async)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010080)={0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0xfffffffc, 0x0, 0xfffffffd, 0xb}, {0x10000002, 0x0, 0xfffffffc}], 0x10, 0x316bb6af}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010080)={0x6, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000380)=[{0xfffffffc, 0x0, 0xfffffffd, 0xb}, {0x10000002, 0x0, 0xfffffffc}], 0x10, 0x316bb6af}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r4)
socket$kcm(0x11, 0x3, 0x0)
r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x40, 0x0, 0x100, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000240), 0x2f1e34471717d2e0}, 0x10c002, 0xac5d, 0x0, 0x4, 0xfffffffffffffffd, 0x1fffff, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x100000001}, 0x4030, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0x1, r5, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0x2, 0x200000000000001, 0x0) (async)
r6 = socket$kcm(0x2, 0x200000000000001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000000011b8000000000004000000000000009500740000000000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0xac, '\x00', 0x0, @sock_ops}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100), 0x4) (async)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100), 0x4)
sendmsg$inet(r6, 0x0, 0x844) (async)
sendmsg$inet(r6, 0x0, 0x844)
sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x241, 0x0, 0x0, 0x10000000}, 0x52cc)
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9) (async)
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r10, 0xc) (async)
setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r10, 0xc)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB='\x00'/21], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000bf6500000900000000000000", @ANYRES32=0x1, @ANYBLOB="00cb0000000000000000000000000000d56a0000b0d87e8dd99958061584f8016253b59944dbe57b51d4963faae78099391cab553fd46d12fa6f71320ad1c0d93ca781c956241781b7be8a874c504159398af624cea4333b84b01bb9bc414e0acdd02f27f7d5cfd3b04e2ee70929f2f676dc98ce92f9a1c6c1365c91d50641ec7ebaede3baf49aa38b8d92e44e699ffed3ee6bf07a54363b394b19125a9f7614d451a2d21a2bc8786a578645e354aa1a8cb65b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40)

1.433676682s ago: executing program 0 (id=2883):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
r3 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000, 0x1}, 0x0, 0x2, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2895250500000003000000003800000700000011", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
sendmsg$inet(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001880)="04880824e06f45c95ea5b5fb8bc7ef07c585a6b30e6e1b6ae8fcdaa6ba68dd60d793496fe76a018dc3383bd6f267a2a2828f953dd150623dfd3f0b4f2712eb8aa21d1cfd01fc2dc204bbf31332819d446d3440e033275ca24b5103ab8e054a9ef1047f20d57d0e0a8112e171417adfbea3162998994a20395148de6ece010463ef4e2196426cc7e41ad1dbab8a1921b86f0c49614a5916d479157b2e2d1dccd631a4c337ccb5facc03aa114c0ee000ee3e967857f804bcde5cfa0b5f42a2", 0xbe}], 0x1}, 0x800)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, 0x0, &(0x7f0000000040)}, 0x20)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0)
r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000007b000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, &(0x7f00000019c0)={0x3, 0x0, [0x0, 0x0, 0x0]})
setsockopt$sock_attach_bpf(r2, 0x6, 0x8, 0x0, 0x0)

1.294749758s ago: executing program 4 (id=2884):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
getpid()
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)}, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000000280)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000003f40)=[{0x0}, {0x0}], 0x2}, 0x40)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"})
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r5 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe"], 0xfe33)

1.04937552s ago: executing program 2 (id=2885):
socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x16, &(0x7f0000001880)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x7}, 0x8}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000040)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x100)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b405010061100c00000000002b9754012c8b878e94675345630148008d3c5a0e13eb1b764f4414f81e24466c9cd95d49fc46ffae3cb826108bf1fe5cdac5a08511f54d3d078e18e4"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2880, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x56, 0x8, 0x8, &(0x7f0000000600)}}, 0x10)

427.42965ms ago: executing program 4 (id=2886):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8) (async)
setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8)
sendmsg$kcm(r1, &(0x7f0000000240)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x1}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)='a', 0x1}], 0x1}, 0x0)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000500)="a524480ed1", 0x5}], 0x1}, 0x4000000) (async)
sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000600)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000500)="a524480ed1", 0x5}], 0x1}, 0x4000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)
recvmsg(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000540)=""/229, 0xe5}], 0x1}, 0x40010002)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f00000007c0)}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f00000007c0)}, 0x20)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ccb3f8080d6cc84efb6913588946f4a229a88e4d35fae3d4637bdcaf1c7a1a77f988046bcd14b8951accb126c6e22fafcff0b621f2aee0c8fb8713c8"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a00fbffffff006800"/20, @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000100"/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(r12) (async)
close(r12)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000800)=""/210, 0x34, 0xd2, 0x1}, 0x28) (async)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000800)=""/210, 0x34, 0xd2, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x1a, &(0x7f0000000d80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x61d8, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc00}, @generic={0x6, 0x9, 0x7, 0x1, 0x8}, @call={0x85, 0x0, 0x0, 0x55}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e80)='GPL\x00', 0x2, 0x6b, &(0x7f0000000ec0)=""/107, 0x40f00, 0x8, '\x00', r7, 0x0, r2, 0x8, &(0x7f0000000f40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000f80)={0x2, 0x5, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001040)=[r0, 0xffffffffffffffff, r6, r10, r10, r5, r6, r6, r0]}, 0x94)
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async)
recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r14=>0xffffffffffffffff]}}], 0x18}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r15 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$cgroup_subtree(r14, &(0x7f0000000200)=ANY=[@ANYRES8=r12, @ANYRES8=r15], 0x12)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="181d350005001e927f680000070000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x31e, 0xef, &(0x7f0000000b40)=""/239, 0x40f00, 0x31, '\x00', r7, @cgroup_sockopt=0x15, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, r9, 0x0, &(0x7f0000000c40)=[r14, r14], &(0x7f0000000c80), 0x10, 0x4}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x7e0}}, @const={0xc, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x0, 0x2e]}}, &(0x7f00000000c0)=""/173, 0x58, 0xad, 0x0, 0x2, 0x10000}, 0x28)
r16 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000900)=@bloom_filter={0x1e, 0x2, 0x6, 0x7fffdfff, 0x54088, 0x1, 0x0, '\x00', 0x0, r13, 0x4, 0x4, 0x4, 0x8}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r16}, @generic={0x79, 0x0, 0x0, 0x48}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94)

0s ago: executing program 0 (id=2887):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socket$kcm(0x10, 0x2, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e00000004000000040000000a00000100050e0051d1d118c987820d978556314d9da57068899f89ad401830355fe99bfac3aa1c6aa57c44b1a1a5c9fbf316835fe07aa4b4eebcc5f2b05eab973d43139fa3dde809afbe97d581c2cfb2d7877adf493926954c9eb88d2421795674ed8925e5bdf7e48c693c3fadfd0846d38b4d1d3f8eadff4810a81b8d2a7e362dca72bf2a3affe2623582e64fd925be5fd479ecc6304e42cceb3a4b1496f897a4e16776e3b21487d1fc95fcaeaee0d868a4a330838173882290eb92b143c9dfbb641a623f338fab5cedbd5189e24c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r2 = bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(r0, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x48) (async)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x25, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe61, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4}, 0x50)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0)
recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020)
recvmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100)
socket$kcm(0x10, 0x8, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8)
r6 = socket$kcm(0x29, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r7=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000400)=r2, 0x4)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) (async)
write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x29, 0x2, 0x0) (async)
r8 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef)
socket$kcm(0x10, 0x2, 0x0) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)

kernel console output (not intermixed with test programs):

1.505106][ T8689] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1010'.
[  302.816010][ T8740] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1019'.
[  303.206313][ T8755] validate_nla: 1 callbacks suppressed
[  303.206330][ T8755] netlink: 'syz.1.1024': attribute type 7 has an invalid length.
[  303.421705][ T8766] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1021'.
[  303.465624][ T8755] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  303.475438][ T8766] netlink: zone id is out of range
[  303.480646][ T8766] netlink: zone id is out of range
[  303.542922][ T8768] delete_channel: no stack
[  303.571639][ T8766] netlink: zone id is out of range
[  303.576873][ T8766] netlink: zone id is out of range
[  303.631953][ T8766] netlink: zone id is out of range
[  303.647346][ T8766] netlink: zone id is out of range
[  303.692658][ T8766] netlink: zone id is out of range
[  303.732518][ T8766] netlink: zone id is out of range
[  303.751698][ T8766] netlink: zone id is out of range
[  303.757021][ T8766] netlink: zone id is out of range
[  304.371352][ T8784] netlink: 'syz.3.1031': attribute type 3 has an invalid length.
[  304.419542][ T8784] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1031'.
[  304.945933][ T8806] netlink: 'syz.0.1036': attribute type 10 has an invalid length.
[  305.766050][ T7776] wlan1: Trigger new scan to find an IBSS to join
[  307.951199][ T8806] team0 (unregistering): Port device team_slave_0 removed
[  307.984756][ T8806] team0 (unregistering): Port device team_slave_1 removed
[  308.460815][ T8806] team0 (unregistering): Port device wlan1 removed
[  308.523587][ T8810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1039'.
[  309.060653][ T8849] netlink: 'syz.0.1045': attribute type 3 has an invalid length.
[  309.122359][ T8849] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1045'.
[  311.762900][ T4418] wlan1: Trigger new scan to find an IBSS to join
[  311.929408][ T8855] netlink: 'syz.0.1045': attribute type 21 has an invalid length.
[  311.987097][ T8855] netlink: 'syz.0.1045': attribute type 6 has an invalid length.
[  312.031990][ T8855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1045'.
[  312.799025][ T7774] wlan1: Creating new IBSS network, BSSID d2:4d:b0:45:1c:e6
[  312.828615][ T7774] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  312.933943][ T8879] netlink: 'syz.0.1051': attribute type 4 has an invalid length.
[  312.995912][ T8879] netlink: 'syz.0.1051': attribute type 8 has an invalid length.
[  313.053853][ T8879] netlink: 109560 bytes leftover after parsing attributes in process `syz.0.1051'.
[  313.880221][ T8931] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1060'.
[  313.959603][ T8931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  314.725487][ T8931] team0: Port device team_slave_0 removed
[  314.740344][ T8931] net_ratelimit: 397 callbacks suppressed
[  314.740361][ T8931] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  315.224730][ T8947] netlink: 'syz.1.1065': attribute type 4 has an invalid length.
[  315.292327][ T8947] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1065'.
[  315.516763][ T8942] ¥: port 1(syz_tun) entered blocking state
[  315.552226][ T8942] ¥: port 1(syz_tun) entered disabled state
[  315.570340][ T8942] device syz_tun entered promiscuous mode
[  316.198083][ T8967] netlink: 'syz.1.1070': attribute type 27 has an invalid length.
[  316.238129][ T8967] netlink: 'syz.1.1070': attribute type 3 has an invalid length.
[  316.264184][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1070'.
[  316.323542][ T8971] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1072'.
[  316.445073][ T8970] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1071'.
[  316.523185][ T8966] delete_channel: no stack
[  316.559388][ T8970] debugfs: Directory '.!
' with parent 'ieee80211' already present!
[  316.851079][ T8992] netlink: 'syz.2.1076': attribute type 3 has an invalid length.
[  316.866114][ T8992] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1076'.
[  316.887492][ T8992] netlink: 'syz.2.1076': attribute type 3 has an invalid length.
[  316.903571][ T8992] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1076'.
[  316.939800][ T8993] netlink: 'syz.3.1074': attribute type 39 has an invalid length.
[  317.053996][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.060369][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  319.052091][ T9031] netlink: 'syz.3.1086': attribute type 10 has an invalid length.
[  319.709841][ T9049] netlink: 'syz.3.1093': attribute type 11 has an invalid length.
[  319.756151][ T9049] netlink: 191644 bytes leftover after parsing attributes in process `syz.3.1093'.
[  321.540442][ T9107] sctp: [Deprecated]: syz.2.1109 (pid 9107) Use of struct sctp_assoc_value in delayed_ack socket option.
[  321.540442][ T9107] Use struct sctp_sack_info instead
[  321.648295][ T9104] netlink: 15478 bytes leftover after parsing attributes in process `syz.2.1109'.
[  321.818375][ T9112] netlink: 'syz.3.1111': attribute type 46 has an invalid length.
[  322.480537][ T9129] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  322.487852][ T9129] IPv6: NLM_F_CREATE should be set when creating new route
[  322.495174][ T9129] IPv6: NLM_F_CREATE should be set when creating new route
[  322.502498][ T9129] IPv6: NLM_F_CREATE should be set when creating new route
[  323.160688][ T9143] netlink: 'syz.2.1116': attribute type 40 has an invalid length.
[  323.673938][ T9152] netlink: 'syz.4.1117': attribute type 3 has an invalid length.
[  323.701587][ T9152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1117'.
[  325.761010][ T9165] netlink: 'syz.4.1121': attribute type 22 has an invalid length.
[  325.790187][ T9165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'.
[  326.195795][ T9174] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1123'.
[  326.212767][ T9166] netlink: 'syz.4.1121': attribute type 22 has an invalid length.
[  326.238827][ T9166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'.
[  326.616783][ T9188] netlink: 'syz.0.1129': attribute type 29 has an invalid length.
[  326.646012][ T9188] netlink: 'syz.0.1129': attribute type 29 has an invalid length.
[  326.656864][ T9191] __sock_release: fasync list not empty!
[  326.674386][ T9198] netlink: 'syz.0.1129': attribute type 29 has an invalid length.
[  326.746048][ T9198] netlink: 'syz.0.1129': attribute type 27 has an invalid length.
[  327.223523][ T9198] bond0: (slave bond_slave_0): Releasing backup interface
[  327.327464][ T9215] netlink: 'syz.4.1132': attribute type 21 has an invalid length.
[  327.414980][ T9215] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1132'.
[  327.774764][ T9225] netlink: 'syz.3.1136': attribute type 25 has an invalid length.
[  327.830676][ T9224] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1136'.
[  327.913324][ T9225] netlink: 'syz.3.1136': attribute type 6 has an invalid length.
[  328.442747][ T9236] netlink: 'syz.0.1135': attribute type 25 has an invalid length.
[  328.450663][ T9236] netlink: 'syz.0.1135': attribute type 25 has an invalid length.
[  328.641822][ T9238] netlink: 'syz.4.1138': attribute type 10 has an invalid length.
[  329.020854][ T9238] device syz_tun entered promiscuous mode
[  329.085567][ T9238] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  329.457858][ T9266] netlink: 'syz.2.1143': attribute type 39 has an invalid length.
[  329.510137][ T9268] netlink: 'syz.3.1142': attribute type 10 has an invalid length.
[  330.573424][ T9305] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.1149'.
[  331.265998][ T9322] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1154'.
[  331.285431][ T9322] netlink: 'syz.2.1154': attribute type 10 has an invalid length.
[  331.305785][ T9322] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1154'.
[  331.775780][ T9339] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1160'.
[  332.009587][ T9341] netlink: 'syz.0.1161': attribute type 1 has an invalid length.
[  332.024804][ T9341] netlink: 15454 bytes leftover after parsing attributes in process `syz.0.1161'.
[  332.137627][ T9345] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1163'.
[  334.154695][ T9359] netlink: 'syz.4.1165': attribute type 39 has an invalid length.
[  334.181075][ T9359] bond0: (slave syz_tun): Releasing backup interface
[  334.193184][ T9361] netlink: 'syz.1.1167': attribute type 10 has an invalid length.
[  334.211357][ T9361] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1167'.
[  334.233016][ T9345] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  334.298773][ T9365] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1166'.
[  334.720142][ T9377] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1171'.
[  334.877059][ T9377] netlink: 'syz.4.1171': attribute type 10 has an invalid length.
[  334.948176][ T9377] netlink: 9279 bytes leftover after parsing attributes in process `syz.4.1171'.
[  336.036546][ T9404] netlink: 'syz.0.1176': attribute type 27 has an invalid length.
[  336.052462][ T9404] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1176'.
[  336.496209][ T9415] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1180'.
[  336.516692][ T9415] netlink: 'syz.2.1180': attribute type 21 has an invalid length.
[  336.534925][ T9415] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1180'.
[  336.556128][ T9415] netlink: 'syz.2.1180': attribute type 4 has an invalid length.
[  336.576649][ T9415] netlink: 'syz.2.1180': attribute type 3 has an invalid length.
[  336.591781][ T9415] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1180'.
[  336.877653][ T9419] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1182'.
[  336.955074][ T9426] netlink: 'syz.4.1182': attribute type 10 has an invalid length.
[  337.011715][ T9426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1182'.
[  337.042141][ T9426] device team0 entered promiscuous mode
[  337.085529][ T9426] device team_slave_0 entered promiscuous mode
[  337.092831][ T9426] device team_slave_1 entered promiscuous mode
[  337.099379][ T9426] device wlan1 entered promiscuous mode
[  337.117495][ T9426] bridge0: port 4(team0) entered blocking state
[  337.132462][ T9426] bridge0: port 4(team0) entered disabled state
[  337.161641][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1193'.
[  337.182131][ T9427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1193'.
[  337.939733][ T9454] netlink: 'syz.2.1189': attribute type 21 has an invalid length.
[  338.472494][ T9471] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1192'.
[  339.180565][ T9479] netlink: 'syz.2.1195': attribute type 25 has an invalid length.
[  339.197791][ T9479] netlink: 'syz.2.1195': attribute type 25 has an invalid length.
[  339.220242][ T9489] netlink: 'syz.0.1198': attribute type 13 has an invalid length.
[  339.230898][ T9489] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1198'.
[  339.725942][ T9498] ¥: port 1(syz_tun) entered blocking state
[  339.744681][ T9498] ¥: port 1(syz_tun) entered disabled state
[  339.779545][ T9498] device syz_tun entered promiscuous mode
[  340.916753][ T9525] netlink: 'syz.2.1206': attribute type 21 has an invalid length.
[  340.925132][ T9525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1206'.
[  341.118903][ T9531] netlink: 'syz.4.1208': attribute type 2 has an invalid length.
[  342.086605][ T9560] netlink: 'syz.1.1214': attribute type 4 has an invalid length.
[  342.168512][ T9560] __nla_validate_parse: 2 callbacks suppressed
[  342.168533][ T9560] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1214'.
[  342.389801][ T9560] netlink: 'syz.1.1214': attribute type 3 has an invalid length.
[  342.493963][ T9560] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1214'.
[  342.828464][ T7757] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  343.543033][ T9593] -1: renamed from syzkaller0
[  343.635372][ T9602] syz.4.1226[9602] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  343.635575][ T9602] syz.4.1226[9602] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  343.674758][ T9602] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1226'.
[  343.775604][ T9602] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  343.867629][ T9602] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.893754][ T9606] netlink: 'syz.0.1227': attribute type 1 has an invalid length.
[  343.937745][ T9606] netlink: 131740 bytes leftover after parsing attributes in process `syz.0.1227'.
[  344.285929][ T9619] device wlan1 entered promiscuous mode
[  344.717505][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  344.741565][ T9635] netlink: 'syz.4.1236': attribute type 21 has an invalid length.
[  345.820476][ T9644] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1237'.
[  345.850106][ T9659] netlink: 'syz.1.1237': attribute type 12 has an invalid length.
[  345.858353][ T9659] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1237'.
[  346.365222][ T9668] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1243'.
[  346.429003][ T9668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  346.486523][ T9668] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  346.516577][ T9670] netlink: 'syz.3.1243': attribute type 2 has an invalid length.
[  346.530921][ T9670] netlink: 'syz.3.1243': attribute type 8 has an invalid length.
[  346.601982][ T9670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1243'.
[  346.692181][ T9671] device veth1_macvtap left promiscuous mode
[  348.113472][ T9719] netlink: 'syz.4.1255': attribute type 10 has an invalid length.
[  348.638084][ T9719] device gre0 entered promiscuous mode
[  348.670544][ T9719] team0: Device gre0 is of different type
[  351.790159][ T9733] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1259'.
[  352.398756][ T9757] netlink: 'syz.4.1265': attribute type 1 has an invalid length.
[  353.885766][ T9788] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1273'.
[  354.668827][ T9802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1278'.
[  354.719036][ T4294] Bluetooth: hci2: Unknown advertising packet type: 0x400
[  354.719112][ T4294] Bluetooth: hci2: Malformed LE Event: 0x0d
[  355.026115][ T9810] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1282'.
[  355.275800][ T9820] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  355.318857][ T9820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  355.476334][ T9825] netlink: 'syz.0.1286': attribute type 3 has an invalid length.
[  355.501612][ T9825] netlink: 'syz.0.1286': attribute type 8 has an invalid length.
[  355.531771][ T9825] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.1286'.
[  355.570566][ T9827] netlink: 'syz.0.1286': attribute type 3 has an invalid length.
[  355.578855][ T9831] netlink: 'syz.3.1287': attribute type 10 has an invalid length.
[  355.652304][ T9827] netlink: 'syz.0.1286': attribute type 8 has an invalid length.
[  355.681153][ T9827] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.1286'.
[  356.055610][ T9846] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.1291'.
[  356.870977][ T9870] netlink: 'syz.2.1297': attribute type 6 has an invalid length.
[  357.387665][ T9874] netlink: 'syz.3.1298': attribute type 21 has an invalid length.
[  357.399283][ T9888] netlink: 'syz.2.1300': attribute type 3 has an invalid length.
[  357.437945][ T9882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1300'.
[  357.457117][ T9888] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1300'.
[  357.482894][ T9889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1300'.
[  357.547735][ T9889] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1300'.
[  357.617601][ T9882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1300'.
[  357.668575][ T9891] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1301'.
[  358.163531][ T9899] netlink: 'syz.2.1303': attribute type 10 has an invalid length.
[  358.669816][ T9911] netlink: 60519 bytes leftover after parsing attributes in process `syz.2.1306'.
[  359.325583][ T9921] netlink: 'syz.0.1309': attribute type 29 has an invalid length.
[  359.388362][ T9921] netlink: 'syz.0.1309': attribute type 29 has an invalid length.
[  361.271559][ T9965] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.1319'.
[  361.550174][ T9971] netlink: 'syz.0.1331': attribute type 10 has an invalid length.
[  361.573545][ T9975] netlink: 'syz.4.1322': attribute type 11 has an invalid length.
[  361.646837][ T9971] bridge0: port 3(hsr0) entered disabled state
[  361.676054][ T9971] device hsr0 left promiscuous mode
[  361.683726][ T9971] bridge0: port 3(hsr0) entered disabled state
[  361.838107][ T9978] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.1322'.
[  361.992842][ T9984] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1324'.
[  362.076276][ T9984] sysfs: cannot create duplicate filename '/class/ieee80211/.!
 5‚Á7>7H
€'
[  362.099603][ T9984] CPU: 0 PID: 9984 Comm: syz.2.1324 Not tainted syzkaller #0
[  362.107060][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  362.117150][ T9984] Call Trace:
[  362.120454][ T9984]  <TASK>
[  362.123428][ T9984]  dump_stack_lvl+0x188/0x24e
[  362.128147][ T9984]  ? show_regs_print_info+0x12/0x12
[  362.133390][ T9984]  ? load_image+0x410/0x410
[  362.137945][ T9984]  sysfs_warn_dup+0x8a/0xa0
[  362.142484][ T9984]  sysfs_do_create_link_sd+0xc0/0x110
[  362.147899][ T9984]  device_add+0x83b/0x1050
[  362.152367][ T9984]  wiphy_register+0x1d8b/0x2aa0
[  362.157309][ T9984]  ? cfg80211_event_work+0x40/0x40
[  362.162467][ T9984]  ? minstrel_ht_alloc+0x894/0xa20
[  362.167632][ T9984]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  362.173740][ T9984]  ieee80211_register_hw+0x2d48/0x39f0
[  362.179264][ T9984]  ? ieee80211_register_hw+0xee1/0x39f0
[  362.184853][ T9984]  ? ieee80211_register_hw+0xee1/0x39f0
[  362.190448][ T9984]  ? ieee80211_tasklet_handler+0x20/0x20
[  362.196134][ T9984]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  362.202065][ T9984]  ? __debug_object_init+0xed/0x440
[  362.207292][ T9984]  ? memset+0x1e/0x40
[  362.211299][ T9984]  ? __hrtimer_init+0x189/0x270
[  362.216195][ T9984]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  362.221970][ T9984]  ? memcpy+0x3c/0x60
[  362.225981][ T9984]  hwsim_new_radio_nl+0xab7/0xc90
[  362.231052][ T9984]  genl_family_rcv_msg_doit+0x22f/0x350
[  362.236630][ T9984]  ? end_current_label_crit_section+0x170/0x170
[  362.242913][ T9984]  ? lockdep_hardirqs_on+0x94/0x140
[  362.248136][ T9984]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  362.254090][ T9984]  ? bpf_lsm_capable+0x5/0x10
[  362.258793][ T9984]  ? security_capable+0x85/0xb0
[  362.263688][ T9984]  genl_rcv_msg+0x601/0x790
[  362.268239][ T9984]  ? genl_bind+0x360/0x360
[  362.272689][ T9984]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  362.279062][ T9984]  netlink_rcv_skb+0x1ef/0x440
[  362.283864][ T9984]  ? genl_bind+0x360/0x360
[  362.288305][ T9984]  ? netlink_ack+0x1160/0x1160
[  362.293114][ T9984]  ? down_read+0x1a8/0x2d0
[  362.297554][ T9984]  genl_rcv+0x24/0x40
[  362.301561][ T9984]  netlink_unicast+0x7ad/0x920
[  362.306368][ T9984]  netlink_sendmsg+0x8ad/0xbd0
[  362.311163][ T9984]  ? netlink_getsockopt+0x550/0x550
[  362.316482][ T9984]  ? apparmor_socket_sendmsg+0x8a/0x330
[  362.322064][ T9984]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  362.327392][ T9984]  ? security_socket_sendmsg+0x7c/0xa0
[  362.332889][ T9984]  ? netlink_getsockopt+0x550/0x550
[  362.338110][ T9984]  ____sys_sendmsg+0x5ed/0x9a0
[  362.342920][ T9984]  ? __sys_sendmsg_sock+0x30/0x30
[  362.347973][ T9984]  ? __import_iovec+0x306/0x510
[  362.352869][ T9984]  ? import_iovec+0x6f/0xa0
[  362.357433][ T9984]  ___sys_sendmsg+0x2a2/0x360
[  362.362152][ T9984]  ? __sys_sendmsg+0x2a0/0x2a0
[  362.366966][ T9984]  ? bpf_prog_free_id+0x1d0/0x1d0
[  362.372040][ T9984]  __se_sys_sendmsg+0x1c3/0x2b0
[  362.376926][ T9984]  ? __x64_sys_sendmsg+0x80/0x80
[  362.381913][ T9984]  ? lockdep_hardirqs_on+0x94/0x140
[  362.387138][ T9984]  do_syscall_64+0x4c/0xa0
[  362.391585][ T9984]  ? clear_bhb_loop+0x60/0xb0
[  362.396306][ T9984]  ? clear_bhb_loop+0x60/0xb0
[  362.401013][ T9984]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  362.406939][ T9984] RIP: 0033:0x7f8bce99e159
[  362.411378][ T9984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.431011][ T9984] RSP: 002b:00007f8bcf7c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  362.439449][ T9984] RAX: ffffffffffffffda RBX: 00007f8bcec25fa0 RCX: 00007f8bce99e159
[  362.447442][ T9984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  362.455447][ T9984] RBP: 00007f8bcea3503b R08: 0000000000000000 R09: 0000000000000000
[  362.463439][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  362.471434][ T9984] R13: 00007f8bcec26038 R14: 00007f8bcec25fa0 R15: 00007ffcdcb4dcf8
[  362.479446][ T9984]  </TASK>
[  366.334970][T10116] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1339'.
[  369.973426][T10179] netlink: 'syz.4.1355': attribute type 11 has an invalid length.
[  369.983908][T10179] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1355'.
[  370.006825][T10178] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1356'.
[  370.022146][T10178] device hsr_slave_0 left promiscuous mode
[  370.031124][T10178] device hsr_slave_1 left promiscuous mode
[  370.979707][T10191] netlink: 'syz.3.1360': attribute type 1 has an invalid length.
[  371.619057][T10226] device syzkaller0 entered promiscuous mode
[  371.671033][T10236] netlink: 'syz.4.1369': attribute type 29 has an invalid length.
[  371.829309][T10236] netlink: 'syz.4.1369': attribute type 29 has an invalid length.
[  371.898921][T10239] netlink: 'syz.1.1370': attribute type 3 has an invalid length.
[  371.919230][T10239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1370'.
[  372.158711][T10250] netlink: 114880 bytes leftover after parsing attributes in process `syz.0.1371'.
[  373.600290][T10237] netlink: 'syz.4.1369': attribute type 29 has an invalid length.
[  373.815893][T10260] netlink: 'syz.0.1372': attribute type 20 has an invalid length.
[  374.137644][T10275] netlink: 'syz.1.1377': attribute type 5 has an invalid length.
[  374.913366][T10296] Ÿë
: port 1(ip6gretap0) entered blocking state
[  374.930006][T10296] Ÿë
: port 1(ip6gretap0) entered disabled state
[  374.960882][T10296] device ip6gretap0 entered promiscuous mode
[  375.618394][T10324] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1388'.
[  375.675992][T10334] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1388'.
[  375.754896][T10333] netlink: 'syz.2.1389': attribute type 11 has an invalid length.
[  375.764582][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1390'.
[  375.814419][T10333] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1389'.
[  375.906193][T10325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  376.252221][T10346] netlink: 'syz.1.1393': attribute type 15 has an invalid length.
[  376.302811][T10346] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1393'.
[  376.429636][T10357] netlink: 'syz.4.1395': attribute type 21 has an invalid length.
[  376.456890][T10357] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1395'.
[  376.527352][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1395'.
[  376.643475][T10363] netlink: 'syz.2.1398': attribute type 1 has an invalid length.
[  376.651259][T10363] netlink: 'syz.2.1398': attribute type 4 has an invalid length.
[  376.693401][T10363] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1398'.
[  377.132244][T10375] netlink: 'syz.4.1400': attribute type 5 has an invalid length.
[  377.728496][T10403] netlink: 'syz.0.1405': attribute type 3 has an invalid length.
[  377.736650][T10403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1405'.
[  378.181584][T10412] : port 1(ip6gretap0) entered blocking state
[  378.188619][T10412] : port 1(ip6gretap0) entered disabled state
[  378.234097][T10412] device ip6gretap0 entered promiscuous mode
[  378.275721][T10430] netlink: 'syz.0.1412': attribute type 29 has an invalid length.
[  378.290314][T10419] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1410'.
[  378.308129][T10425] netlink: 'syz.3.1410': attribute type 10 has an invalid length.
[  378.317996][T10425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1410'.
[  378.336394][T10430] netlink: 'syz.0.1412': attribute type 29 has an invalid length.
[  378.344852][T10424] device ip6gretap0 left promiscuous mode
[  378.350809][T10424] : port 1(ip6gretap0) entered disabled state
[  378.390589][T10432] netlink: 'syz.0.1412': attribute type 29 has an invalid length.
[  378.484338][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.490807][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.882823][T10443] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1415'.
[  378.960948][T10449] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1413'.
[  379.103957][T10460] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1417'.
[  379.243683][T10463] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1418'.
[  382.404245][T10545] netlink: 'syz.3.1429': attribute type 11 has an invalid length.
[  382.420429][T10545] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1429'.
[  382.513212][T10543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  382.565970][T10559] validate_nla: 8 callbacks suppressed
[  382.565988][T10559] netlink: 'syz.2.1432': attribute type 29 has an invalid length.
[  382.598805][T10559] netlink: 'syz.2.1432': attribute type 29 has an invalid length.
[  382.727514][T10561] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1433'.
[  383.215895][T10573] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  383.223330][T10573] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  383.449317][T10592] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1440'.
[  383.506699][T10582] netlink: 'syz.2.1439': attribute type 10 has an invalid length.
[  383.550659][T10582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.266072][T10582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.367848][T10582] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  386.418783][T10597] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1443'.
[  386.431424][T10597] bridge: RTM_NEWNEIGH with invalid state 0x1
[  386.444793][T10602] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1443'.
[  386.457749][T10602] bridge: RTM_NEWNEIGH with invalid state 0x1
[  386.477148][T10604] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1444'.
[  386.920070][T10625] netlink: 15119 bytes leftover after parsing attributes in process `syz.4.1449'.
[  387.196026][T10635] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1452'.
[  387.286000][T10639] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1452'.
[  387.320947][T10638] netlink: 'syz.4.1453': attribute type 4 has an invalid length.
[  387.350844][T10638] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1453'.
[  387.572940][T10635] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  387.956032][T10657] netlink: 'syz.4.1458': attribute type 39 has an invalid length.
[  388.585615][T10647] device syzkaller0 entered promiscuous mode
[  393.987785][T10706] netlink: 'syz.0.1466': attribute type 41 has an invalid length.
[  394.149999][T10712] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1468'.
[  394.273666][T10712] device caif0 entered promiscuous mode
[  394.287332][T10716] netlink: 212928 bytes leftover after parsing attributes in process `syz.2.1469'.
[  394.350744][T10712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  394.795589][T10725] device syzkaller0 entered promiscuous mode
[  394.839446][T10730] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1474'.
[  394.959527][T10733] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1474'.
[  395.068688][T10742] netlink: 'syz.0.1477': attribute type 15 has an invalid length.
[  395.087331][T10742] netlink: 'syz.0.1477': attribute type 7 has an invalid length.
[  395.520265][T10753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'.
[  395.532078][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1479'.
[  395.763520][ T7759] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  396.134227][T10779] netlink: 'syz.0.1484': attribute type 1 has an invalid length.
[  396.156475][T10779] netlink: 'syz.0.1484': attribute type 3 has an invalid length.
[  396.165049][T10779] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1484'.
[  400.334665][T10757] netlink: 'syz.3.1480': attribute type 10 has an invalid length.
[  400.454411][T10784] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1486'.
[  400.483886][T10784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  401.358630][T10813] device syzkaller0 entered promiscuous mode
[  401.376470][T10816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'.
[  401.424636][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1494'.
[  401.446085][T10817] netlink: 'syz.0.1495': attribute type 10 has an invalid length.
[  401.479128][T10826] netlink: 'syz.0.1495': attribute type 10 has an invalid length.
[  405.580300][T10852] netlink: 'syz.2.1500': attribute type 3 has an invalid length.
[  405.596127][T10852] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1500'.
[  405.803585][T10887] sock: sock_set_timeout: `syz.4.1509' (pid 10887) tries to set negative timeout
[  406.798783][T10917] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1518'.
[  407.055040][T10921] netlink: 'syz.3.1518': attribute type 3 has an invalid length.
[  407.080962][T10921] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1518'.
[  408.110139][T10954] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1523'.
[  410.476761][T10954] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1523'.
[  410.501587][T10956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.515415][T10956] batman_adv: batadv0: Removing interface: batadv_slave_1
[  411.005660][T10983] netlink: 'syz.0.1529': attribute type 3 has an invalid length.
[  411.044380][T10983] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1529'.
[  411.497246][T10976] netlink: 'syz.3.1527': attribute type 10 has an invalid length.
[  411.613378][T10988] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1530'.
[  411.674240][T10988] device hsr_slave_0 left promiscuous mode
[  412.236904][T10988] device hsr_slave_1 left promiscuous mode
[  412.493052][T10988] bridge0: port 5(hsr0) entered disabled state
[  412.561796][T10992] netlink: 49920 bytes leftover after parsing attributes in process `syz.4.1526'.
[  412.806016][T11009] netlink: 'syz.4.1535': attribute type 2 has an invalid length.
[  412.986787][T11019] netlink: 'syz.3.1537': attribute type 10 has an invalid length.
[  413.029720][T11019] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1537'.
[  413.063720][T11024] netlink: 'syz.2.1536': attribute type 3 has an invalid length.
[  413.104216][T11024] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1536'.
[  416.519448][T11046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.178813][T11065] netlink: 'syz.3.1549': attribute type 3 has an invalid length.
[  417.197170][T11065] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1549'.
[  417.907264][ T4294] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  419.921861][ T4294] Bluetooth: hci0: command 0x2016 tx timeout
[  421.053598][T11142] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1563'.
[  421.933994][T11153] netlink: 'syz.3.1565': attribute type 1 has an invalid length.
[  421.953148][T11153] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1565'.
[  422.388391][T11166] netlink: 'syz.1.1568': attribute type 3 has an invalid length.
[  422.418576][T11165] netlink: 'syz.2.1569': attribute type 3 has an invalid length.
[  422.431053][T11166] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1568'.
[  422.444076][T11165] netlink: 'syz.2.1569': attribute type 153 has an invalid length.
[  422.457012][T11165] netlink: 85736 bytes leftover after parsing attributes in process `syz.2.1569'.
[  425.039170][T11191] netlink: 'syz.3.1575': attribute type 10 has an invalid length.
[  425.414001][T11207] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1577'.
[  425.681157][T11219] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1579'.
[  425.896750][T11221] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1582'.
[  426.009390][T11221] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  426.075669][T11221] CPU: 1 PID: 11221 Comm: syz.2.1582 Not tainted syzkaller #0
[  426.083225][T11221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  426.093328][T11221] Call Trace:
[  426.096682][T11221]  <TASK>
[  426.099656][T11221]  dump_stack_lvl+0x188/0x24e
[  426.104451][T11221]  ? show_regs_print_info+0x12/0x12
[  426.109706][T11221]  ? load_image+0x410/0x410
[  426.114296][T11221]  sysfs_warn_dup+0x8a/0xa0
[  426.118927][T11221]  sysfs_do_create_link_sd+0xc0/0x110
[  426.124371][T11221]  device_add+0x83b/0x1050
[  426.128911][T11221]  wiphy_register+0x1d8b/0x2aa0
[  426.133946][T11221]  ? cfg80211_event_work+0x40/0x40
[  426.139117][T11221]  ? minstrel_ht_alloc+0x894/0xa20
[  426.144384][T11221]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  426.150540][T11221]  ieee80211_register_hw+0x2d48/0x39f0
[  426.156200][T11221]  ? ieee80211_register_hw+0xee1/0x39f0
[  426.161810][T11221]  ? ieee80211_register_hw+0xee1/0x39f0
[  426.167421][T11221]  ? ieee80211_tasklet_handler+0x20/0x20
[  426.173131][T11221]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  426.179168][T11221]  ? __debug_object_init+0xed/0x440
[  426.184460][T11221]  ? memset+0x1e/0x40
[  426.188531][T11221]  ? __hrtimer_init+0x189/0x270
[  426.193472][T11221]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  426.199376][T11221]  ? memcpy+0x3c/0x60
[  426.203424][T11221]  hwsim_new_radio_nl+0xab7/0xc90
[  426.208567][T11221]  genl_family_rcv_msg_doit+0x22f/0x350
[  426.214268][T11221]  ? end_current_label_crit_section+0x170/0x170
[  426.220629][T11221]  ? trace_call_bpf+0xbf/0x6b0
[  426.225495][T11221]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  426.231419][T11221]  ? bpf_lsm_capable+0x5/0x10
[  426.236211][T11221]  ? security_capable+0x85/0xb0
[  426.241217][T11221]  genl_rcv_msg+0x601/0x790
[  426.245787][T11221]  ? genl_bind+0x360/0x360
[  426.250247][T11221]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  426.256663][T11221]  netlink_rcv_skb+0x1ef/0x440
[  426.261492][T11221]  ? genl_bind+0x360/0x360
[  426.265959][T11221]  ? netlink_ack+0x1160/0x1160
[  426.270798][T11221]  ? down_read+0x1a8/0x2d0
[  426.275274][T11221]  genl_rcv+0x24/0x40
[  426.279307][T11221]  netlink_unicast+0x7ad/0x920
[  426.284158][T11221]  netlink_sendmsg+0x8ad/0xbd0
[  426.288980][T11221]  ? netlink_getsockopt+0x550/0x550
[  426.294228][T11221]  ? apparmor_socket_sendmsg+0x8a/0x330
[  426.299835][T11221]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  426.305237][T11221]  ? security_socket_sendmsg+0x7c/0xa0
[  426.310758][T11221]  ? netlink_getsockopt+0x550/0x550
[  426.316012][T11221]  ____sys_sendmsg+0x5ed/0x9a0
[  426.320941][T11221]  ? __sys_sendmsg_sock+0x30/0x30
[  426.326035][T11221]  ? __import_iovec+0x306/0x510
[  426.330986][T11221]  ? import_iovec+0x6f/0xa0
[  426.334582][T11227] netlink: 'syz.2.1582': attribute type 2 has an invalid length.
[  426.335534][T11221]  ___sys_sendmsg+0x2a2/0x360
[  426.343718][T11227] netlink: 'syz.2.1582': attribute type 1 has an invalid length.
[  426.347972][T11221]  ? __sys_sendmsg+0x2a0/0x2a0
[  426.360588][T11221]  __se_sys_sendmsg+0x1c3/0x2b0
[  426.361802][T11227] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1582'.
[  426.365487][T11221]  ? __x64_sys_sendmsg+0x80/0x80
[  426.379517][T11221]  ? lockdep_hardirqs_on+0x94/0x140
[  426.384847][T11221]  do_syscall_64+0x4c/0xa0
[  426.389330][T11221]  ? clear_bhb_loop+0x60/0xb0
[  426.394070][T11221]  ? clear_bhb_loop+0x60/0xb0
[  426.398809][T11221]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  426.404761][T11221] RIP: 0033:0x7f8bce99e159
[  426.409215][T11221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  426.428871][T11221] RSP: 002b:00007f8bcf77f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  426.437314][T11221] RAX: ffffffffffffffda RBX: 00007f8bcec26180 RCX: 00007f8bce99e159
[  426.445315][T11221] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  426.453321][T11221] RBP: 00007f8bcea3503b R08: 0000000000000000 R09: 0000000000000000
[  426.461322][T11221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  426.469326][T11221] R13: 00007f8bcec26218 R14: 00007f8bcec26180 R15: 00007ffcdcb4dcf8
[  426.477350][T11221]  </TASK>
[  426.689254][ T4294] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4
[  426.737625][T11233] netlink: 'syz.0.1584': attribute type 3 has an invalid length.
[  426.761709][T11233] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1584'.
[  427.251131][T11252] netlink: 'syz.4.1589': attribute type 11 has an invalid length.
[  427.374857][T11252] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1589'.
[  428.243643][T11274] netlink: 'syz.4.1595': attribute type 2 has an invalid length.
[  428.300333][T11274] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.1595'.
[  428.570699][T11277] netlink: 'syz.0.1596': attribute type 7 has an invalid length.
[  428.607561][T11277] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.1596'.
[  428.744324][T11281] netlink: 'syz.1.1597': attribute type 21 has an invalid length.
[  428.757343][T11281] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1597'.
[  428.925845][T11283] bridge0: port 4(team0) entered blocking state
[  428.932889][T11283] bridge0: port 4(team0) entered forwarding state
[  428.940980][T11283] bridge0: port 3(batadv0) entered blocking state
[  428.947961][T11283] bridge0: port 3(batadv0) entered forwarding state
[  428.956010][T11283] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.964117][T11283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  428.972852][T11283] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.981033][T11283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  429.042326][   T47] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  429.063663][T11288] netlink: 'syz.3.1599': attribute type 3 has an invalid length.
[  429.077019][T11288] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1599'.
[  429.089215][T11283] device bridge0 entered promiscuous mode
[  429.135570][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  429.435261][T11299] netlink: 'syz.1.1602': attribute type 3 has an invalid length.
[  429.510282][T11299] netlink: 'syz.1.1602': attribute type 1 has an invalid length.
[  429.555203][T11305] netlink: 'syz.0.1604': attribute type 2 has an invalid length.
[  429.608450][T11299] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1602'.
[  429.691904][T11305] netlink: 'syz.0.1604': attribute type 11 has an invalid length.
[  429.738309][T11305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1604'.
[  430.359145][T11312] netlink: 'syz.2.1605': attribute type 2 has an invalid length.
[  430.377685][T11312] netlink: 'syz.2.1605': attribute type 1 has an invalid length.
[  431.252881][T11326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1611'.
[  431.557779][ T4294] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30
[  431.566010][ T4294] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0'
[  431.576758][ T4294] CPU: 1 PID: 4294 Comm: kworker/u5:9 Not tainted syzkaller #0
[  431.584376][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  431.594486][ T4294] Workqueue: hci0 hci_rx_work
[  431.599336][ T4294] Call Trace:
[  431.602662][ T4294]  <TASK>
[  431.605636][ T4294]  dump_stack_lvl+0x188/0x24e
[  431.610373][ T4294]  ? show_regs_print_info+0x12/0x12
[  431.615629][ T4294]  ? load_image+0x410/0x410
[  431.620199][ T4294]  sysfs_create_dir_ns+0x26a/0x290
[  431.625379][ T4294]  ? __lock_acquire+0x7c40/0x7c40
[  431.630493][ T4294]  ? sysfs_warn_dup+0xa0/0xa0
[  431.635231][ T4294]  ? do_raw_spin_unlock+0x11d/0x230
[  431.640512][ T4294]  kobject_add_internal+0x617/0xca0
[  431.645789][ T4294]  kobject_add+0x160/0x230
[  431.650353][ T4294]  ? kobject_init+0x1c0/0x1c0
[  431.655221][ T4294]  ? __raw_spin_lock_init+0x41/0x100
[  431.660563][ T4294]  ? klist_children_get+0x50/0x50
[  431.665740][ T4294]  ? get_device_parent+0x121/0x3e0
[  431.670919][ T4294]  device_add+0x470/0x1050
[  431.675406][ T4294]  hci_conn_add_sysfs+0xd1/0x1e0
[  431.680510][ T4294]  le_conn_complete_evt+0xfac/0x15c0
[  431.685875][ T4294]  ? hci_le_big_info_adv_report_evt+0x300/0x300
[  431.692224][ T4294]  ? bt_info+0x180/0x180
[  431.696535][ T4294]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  431.702218][ T4294]  ? mutex_unlock+0x10/0x10
[  431.706841][ T4294]  ? skb_pull_data+0xec/0x1f0
[  431.711585][ T4294]  hci_le_enh_conn_complete_evt+0x185/0x460
[  431.717529][ T4294]  ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0
[  431.723987][ T4294]  ? hci_remote_host_features_evt+0x230/0x230
[  431.730087][ T4294]  hci_event_packet+0x7b3/0x1290
[  431.735062][ T4294]  ? lock_chain_count+0x20/0x20
[  431.739967][ T4294]  ? hci_conn_valid+0x220/0x220
[  431.744845][ T4294]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  431.750776][ T4294]  ? kcov_remote_start+0x50f/0x810
[  431.755995][ T4294]  ? lockdep_hardirqs_on+0x94/0x140
[  431.761237][ T4294]  ? hci_send_to_monitor+0x9c/0x4a0
[  431.766481][ T4294]  hci_rx_work+0x3eb/0xd40
[  431.770944][ T4294]  ? _raw_spin_unlock+0x40/0x40
[  431.775829][ T4294]  ? process_one_work+0x7b4/0x1160
[  431.781031][ T4294]  process_one_work+0x8ab/0x1160
[  431.786029][ T4294]  ? worker_detach_from_pool+0x240/0x240
[  431.791697][ T4294]  ? _raw_spin_lock_irq+0x86/0xf0
[  431.796757][ T4294]  ? _raw_spin_lock_irq+0xb7/0xf0
[  431.801818][ T4294]  ? _raw_spin_lock_irqsave+0x100/0x100
[  431.807397][ T4294]  ? wq_worker_running+0x97/0x190
[  431.812540][ T4294]  worker_thread+0xaf5/0x12a0
[  431.817264][ T4294]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  431.823213][ T4294]  kthread+0x29d/0x330
[  431.827354][ T4294]  ? worker_clr_flags+0x1a0/0x1a0
[  431.832411][ T4294]  ? kthread_blkcg+0xd0/0xd0
[  431.837031][ T4294]  ret_from_fork+0x1f/0x30
[  431.841527][ T4294]  </TASK>
[  431.846104][ T4294] kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory.
[  431.859418][ T4294] Bluetooth: hci0: failed to register connection device
[  432.018615][T11346] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1616'.
[  432.539710][T11368] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1621'.
[  432.653762][T11372] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1622'.
[  432.776130][T11374] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.784844][T11374] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.875075][T11378] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.882296][T11378] bridge0: port 2(bridge_slave_1) entered forwarding state
[  432.889778][T11378] bridge0: port 1(bridge_slave_0) entered blocking state
[  432.897032][T11378] bridge0: port 1(bridge_slave_0) entered forwarding state
[  433.005113][T11378] device bridge0 entered promiscuous mode
[  433.407146][ T4294] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30
[  435.601852][T11389] validate_nla: 5 callbacks suppressed
[  435.601895][T11389] netlink: 'syz.4.1627': attribute type 7 has an invalid length.
[  435.699619][T11406] netlink: 'syz.1.1628': attribute type 27 has an invalid length.
[  435.711628][T11406] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1628'.
[  435.730880][T11406] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  435.817416][ T7759] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  436.108470][T11430] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1633'.
[  438.461153][T11438] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1636'.
[  439.481956][T11424] netlink: 'syz.4.1633': attribute type 25 has an invalid length.
[  439.530012][T11424] netlink: 'syz.4.1633': attribute type 6 has an invalid length.
[  439.554544][T11438] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  439.579909][T11438] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  439.623387][T11438] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  439.934037][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  439.940424][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  439.953302][T11458] bridge0: port 2(bridge_slave_1) entered disabled state
[  439.961756][T11458] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.057260][T11464] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.064524][T11464] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.072069][T11464] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.079217][T11464] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.146124][T11464] device bridge0 entered promiscuous mode
[  443.174860][T11474] syzkaller1: tun_chr_ioctl cmd 1074025677
[  443.181207][T11474] syzkaller1: linktype set to 773
[  443.194206][T11477] netlink: 'syz.0.1643': attribute type 10 has an invalid length.
[  443.349469][T11487] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1646'.
[  443.363813][ T4294] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30
[  443.526270][T11493] syz.3.1646 (11493) used obsolete PPPIOCDETACH ioctl
[  443.781392][T11508] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1650'.
[  444.577429][T11529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1652'.
[  444.665949][T11529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1652'.
[  444.762641][T11538] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1652'.
[  445.016710][T11529] netlink: 'syz.2.1652': attribute type 21 has an invalid length.
[  445.064933][T11529] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1652'.
[  445.112547][T11529] netlink: 'syz.2.1652': attribute type 4 has an invalid length.
[  445.173604][T11529] netlink: 'syz.2.1652': attribute type 5 has an invalid length.
[  445.257376][T11529] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1652'.
[  445.456664][T11535] netlink: 26 bytes leftover after parsing attributes in process `syz.3.1657'.
[  445.628643][T11551] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1659'.
[  445.760095][T11558] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.1660'.
[  447.129214][T11595] netlink: zone id is out of range
[  447.169002][T11595] netlink: zone id is out of range
[  447.223623][T11595] netlink: zone id is out of range
[  447.242132][T11595] netlink: zone id is out of range
[  447.247808][T11595] netlink: zone id is out of range
[  447.255417][T11595] netlink: zone id is out of range
[  447.261604][T11595] netlink: zone id is out of range
[  447.267981][T11595] netlink: zone id is out of range
[  447.377973][T11595] netlink: zone id is out of range
[  447.384182][T11595] netlink: zone id is out of range
[  447.831362][T11644] netlink: 'syz.3.1680': attribute type 10 has an invalid length.
[  447.857590][T11644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.475939][T11644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.690046][T11650] __nla_validate_parse: 3 callbacks suppressed
[  448.690085][T11650] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1681'.
[  449.354025][T11670] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.1687'.
[  449.426712][T11667] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1688'.
[  449.692121][T11680] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1692'.
[  450.533993][T11708] netlink: 'syz.3.1700': attribute type 10 has an invalid length.
[  451.178974][T11715] can: request_module (can-proto-0) failed.
[  451.357570][T11734] netlink: 'syz.4.1706': attribute type 13 has an invalid length.
[  451.380224][T11735] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1707'.
[  451.406916][T11734] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.1706'.
[  451.632316][T11737] netlink: 'syz.1.1707': attribute type 6 has an invalid length.
[  451.748843][T11738] netlink: 'syz.3.1708': attribute type 1 has an invalid length.
[  452.275206][T11756] netlink: 'syz.4.1710': attribute type 27 has an invalid length.
[  452.299923][T11756] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1710'.
[  452.320307][T11756] net_ratelimit: 18 callbacks suppressed
[  452.320364][T11756] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  452.538331][T11759] netlink: 'syz.3.1713': attribute type 12 has an invalid length.
[  452.581671][T11759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1713'.
[  452.590960][T11764] netlink: 'syz.3.1713': attribute type 12 has an invalid length.
[  452.609682][T11764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1713'.
[  452.809861][T11774] netlink: 'syz.4.1716': attribute type 10 has an invalid length.
[  452.893715][T11774] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  452.948301][T11774] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.017535][T11774] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.092966][T11774] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  453.294220][T11774] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.318003][T11774] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.354113][T11774] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.395042][ T4294] Bluetooth: hci3: Malformed HCI Event: 0x22
[  453.431808][T11774] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.441045][ T4294] Bluetooth: hci3: Malformed HCI Event: 0x22
[  453.706022][T11774] device geneve1 entered promiscuous mode
[  453.716542][T11774] team0: Port device geneve1 added
[  453.786767][T11796] netlink: 'syz.1.1720': attribute type 21 has an invalid length.
[  453.808258][T11796] netlink: 'syz.1.1720': attribute type 11 has an invalid length.
[  454.020541][T11805] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1722'.
[  455.166667][T11835] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1730'.
[  455.224493][T11835] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  455.303560][T11835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  455.372000][T11852] netlink: 126324 bytes leftover after parsing attributes in process `syz.2.1733'.
[  455.513833][T11842] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1731'.
[  455.548535][T11849] validate_nla: 2 callbacks suppressed
[  455.548553][T11849] netlink: 'syz.0.1731': attribute type 10 has an invalid length.
[  455.595763][T11849] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1731'.
[  455.631176][T11853] netlink: 126612 bytes leftover after parsing attributes in process `syz.2.1733'.
[  455.721566][T11831] delete_channel: no stack
[  455.734082][T11853] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1733'.
[  456.052527][T11859] netlink: 212908 bytes leftover after parsing attributes in process `syz.1.1736'.
[  456.132034][T11859] netlink: zone id is out of range
[  456.343969][T11871] bridge0: port 4(team0) entered disabled state
[  456.350751][T11871] bridge0: port 3(batadv0) entered disabled state
[  456.357677][T11871] bridge0: port 2(bridge_slave_1) entered disabled state
[  456.364985][T11871] bridge0: port 1(bridge_slave_0) entered disabled state
[  456.496154][T11871] device bridge0 left promiscuous mode
[  456.993473][T11903] netlink: 'syz.1.1742': attribute type 4 has an invalid length.
[  457.860045][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1746'.
[  457.891759][T11918] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1746'.
[  459.171536][T11940] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1751'.
[  459.540988][T11952] netlink: 'syz.3.1752': attribute type 2 has an invalid length.
[  459.581806][T11952] netlink: 'syz.3.1752': attribute type 8 has an invalid length.
[  459.683432][T11952] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1752'.
[  459.746058][T11947] delete_channel: no stack
[  460.976347][T11982] device syzkaller0 entered promiscuous mode
[  461.052353][ T7782] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  461.945750][T12020] sock: sock_timestamping_bind_phc: sock not bind to device
[  463.716743][T12014] netlink: 'syz.3.1764': attribute type 27 has an invalid length.
[  463.724801][T12014] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1764'.
[  463.734409][T12014] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  463.754193][T12024] netlink: 'syz.0.1768': attribute type 10 has an invalid length.
[  463.771736][T12024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1768'.
[  463.785310][T12024] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  464.867198][T12060] syz.3.1778[12060] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  464.867355][T12060] syz.3.1778[12060] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  465.429249][T12076] netlink: 'syz.2.1775': attribute type 3 has an invalid length.
[  465.528801][T12076] netlink: 42732 bytes leftover after parsing attributes in process `syz.2.1775'.
[  466.144512][T12092] netlink: 'syz.0.1784': attribute type 27 has an invalid length.
[  466.167449][T12092] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1784'.
[  466.197587][T12092] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  466.321885][T12100] tap0: tun_chr_ioctl cmd 1074025688
[  466.452324][T12100] netlink: 'syz.1.1787': attribute type 29 has an invalid length.
[  466.487442][T12100] netlink: 'syz.1.1787': attribute type 29 has an invalid length.
[  466.527485][T12104] netlink: 'syz.1.1787': attribute type 29 has an invalid length.
[  466.585853][T12100] netlink: 'syz.1.1787': attribute type 29 has an invalid length.
[  466.737466][T12111] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1790'.
[  470.897295][T12156] netlink: 'syz.0.1799': attribute type 11 has an invalid length.
[  470.915205][T12156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1799'.
[  470.972139][T12156] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1799'.
[  471.026184][T12156] netlink: 'syz.0.1799': attribute type 1 has an invalid length.
[  471.041945][T12156] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1799'.
[  471.376055][T12167] netlink: 'syz.1.1802': attribute type 21 has an invalid length.
[  471.405893][T12167] netlink: 'syz.1.1802': attribute type 6 has an invalid length.
[  471.435668][T12167] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1802'.
[  471.632417][T12176] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.1804'.
[  473.547939][T12222] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1816'.
[  474.690852][T12250] device syzkaller0 entered promiscuous mode
[  477.814459][T12267] netlink: 'syz.4.1825': attribute type 10 has an invalid length.
[  478.101144][T12294] netlink: 'syz.2.1830': attribute type 29 has an invalid length.
[  478.134491][T12294] netlink: 'syz.2.1830': attribute type 29 has an invalid length.
[  478.168927][T12297] netlink: 'syz.0.1832': attribute type 22 has an invalid length.
[  478.190669][T12297] netlink: 14526 bytes leftover after parsing attributes in process `syz.0.1832'.
[  480.924607][T12345] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1842'.
[  482.470533][T12329] netlink: 'syz.4.1838': attribute type 21 has an invalid length.
[  482.479076][T12329] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1838'.
[  482.592396][T12345] debugfs: Directory '!!!' with parent 'ieee80211' already present!
[  482.843427][T12359] netlink: 'syz.2.1846': attribute type 11 has an invalid length.
[  482.856108][T12359] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1846'.
[  483.105685][T12358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.164485][T12368] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1847'.
[  483.493085][T12372] netlink: 'syz.3.1848': attribute type 27 has an invalid length.
[  483.509556][T12377] netlink: 'syz.3.1848': attribute type 27 has an invalid length.
[  483.805602][T12385] raw_sendmsg: syz.0.1851 forgot to set AF_INET. Fix it!
[  483.844128][T12385] netlink: 'syz.0.1851': attribute type 10 has an invalid length.
[  483.858371][T12385] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1851'.
[  483.869661][T12385] netlink: 'syz.0.1851': attribute type 2 has an invalid length.
[  483.880378][T12385] netlink: 'syz.0.1851': attribute type 9 has an invalid length.
[  486.145797][T12411] netlink: 'syz.3.1856': attribute type 10 has an invalid length.
[  486.748172][T12427] netlink: 'syz.0.1861': attribute type 11 has an invalid length.
[  486.839352][T12427] netlink: 149476 bytes leftover after parsing attributes in process `syz.0.1861'.
[  487.190430][T12426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  488.028691][T12450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1867'.
[  488.038631][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1867'.
[  488.054090][T12445] IPv6: NLM_F_CREATE should be specified when creating new route
[  488.330075][T12469] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1879'.
[  489.638729][T12495] netlink: 'syz.3.1878': attribute type 11 has an invalid length.
[  489.733025][T12495] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1878'.
[  489.900473][T12497] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1880'.
[  489.946800][T12493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  490.002670][T12497] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.348471][T12497] device bridge_slave_0 left promiscuous mode
[  490.372683][T12497] bridge0: port 1(bridge_slave_0) entered disabled state
[  491.164944][T12522] device syzkaller0 entered promiscuous mode
[  497.808119][T12598] netlink: 'syz.2.1902': attribute type 39 has an invalid length.
[  498.762717][T12624] netlink: 'syz.0.1910': attribute type 29 has an invalid length.
[  498.797414][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[  498.837950][T12624] netlink: 'syz.0.1910': attribute type 29 has an invalid length.
[  498.864393][T12624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'.
[  501.386790][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  501.393441][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  502.219290][T12655] ip6gretap0: mtu less than device minimum
[  502.337531][T12667] netlink: 'syz.3.1915': attribute type 10 has an invalid length.
[  502.383162][T12667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1915'.
[  503.132948][T12690] netlink: 'syz.1.1924': attribute type 3 has an invalid length.
[  503.161613][T12690] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1924'.
[  503.297337][T12689] netlink: 'syz.1.1924': attribute type 3 has an invalid length.
[  503.333468][T12689] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1924'.
[  503.546314][T12695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1925'.
[  503.767414][T12708] netlink: 'syz.0.1928': attribute type 39 has an invalid length.
[  504.596035][T12742] netlink: 'syz.3.1936': attribute type 1 has an invalid length.
[  504.682407][T12742] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1936'.
[  504.701129][T12744] netlink: 'syz.1.1937': attribute type 3 has an invalid length.
[  504.734351][T12744] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1937'.
[  504.758044][T12739] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1935'.
[  504.802333][T12742] Q±6ã×\b‹¡Y­4��: renamed from lo
[  505.760298][T12782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  506.244803][T12794] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1951'.
[  509.203533][T12806] netlink: 'syz.4.1953': attribute type 2 has an invalid length.
[  509.239940][T12812] netlink: 'syz.0.1957': attribute type 4 has an invalid length.
[  509.242621][T12806] netlink: 'syz.4.1953': attribute type 1 has an invalid length.
[  509.270277][T12812] netlink: 134728 bytes leftover after parsing attributes in process `syz.0.1957'.
[  509.296582][T12806] netlink: 'syz.4.1953': attribute type 8 has an invalid length.
[  509.342127][T12806] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1953'.
[  509.381648][T12806] netlink: 'syz.4.1953': attribute type 10 has an invalid length.
[  509.400114][T12806] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1953'.
[  510.186758][T12845] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.305347][T12845] device bridge0 left promiscuous mode
[  510.837623][T12865] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1966'.
[  511.761234][T12853] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.768395][T12853] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.780111][T12853] device bridge0 entered promiscuous mode
[  511.806317][T12865] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1966'.
[  511.966770][T12872] device syzkaller0 entered promiscuous mode
[  512.024840][T12877] tap0: tun_chr_ioctl cmd 1074025675
[  512.030221][T12877] tap0: persist enabled
[  512.085049][T12894] tap0: tun_chr_ioctl cmd 1074025675
[  512.128386][T12894] tap0: persist disabled
[  515.547978][T12963] syzkaller1: tun_chr_ioctl cmd 2147767506
[  515.566465][T12963] syzkaller1: tun_chr_ioctl cmd 1074025677
[  515.588408][T12963] syzkaller1: linktype set to 804
[  515.606374][T12966] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1989'.
[  515.709384][T12974] netlink: 'syz.1.1990': attribute type 3 has an invalid length.
[  515.738584][T12966] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  515.758794][T12974] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1990'.
[  515.772870][T12966] CPU: 0 PID: 12966 Comm: syz.4.1989 Not tainted syzkaller #0
[  515.780465][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  515.790590][T12966] Call Trace:
[  515.793935][T12966]  <TASK>
[  515.796939][T12966]  dump_stack_lvl+0x188/0x24e
[  515.801731][T12966]  ? show_regs_print_info+0x12/0x12
[  515.807026][T12966]  ? load_image+0x410/0x410
[  515.811682][T12966]  sysfs_warn_dup+0x8a/0xa0
[  515.816290][T12966]  sysfs_do_create_link_sd+0xc0/0x110
[  515.821790][T12966]  device_add+0x83b/0x1050
[  515.826332][T12966]  wiphy_register+0x1d8b/0x2aa0
[  515.831366][T12966]  ? cfg80211_event_work+0x40/0x40
[  515.836592][T12966]  ? minstrel_ht_alloc+0x894/0xa20
[  515.841825][T12966]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  515.847995][T12966]  ieee80211_register_hw+0x2d48/0x39f0
[  515.853609][T12966]  ? ieee80211_register_hw+0xee1/0x39f0
[  515.859243][T12966]  ? ieee80211_register_hw+0xee1/0x39f0
[  515.864921][T12966]  ? ieee80211_tasklet_handler+0x20/0x20
[  515.870641][T12966]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  515.876638][T12966]  ? __debug_object_init+0xed/0x440
[  515.881946][T12966]  ? memset+0x1e/0x40
[  515.886014][T12966]  ? __hrtimer_init+0x189/0x270
[  515.891026][T12966]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  515.896840][T12966]  ? memcpy+0x3c/0x60
[  515.900902][T12966]  hwsim_new_radio_nl+0xab7/0xc90
[  515.906034][T12966]  genl_family_rcv_msg_doit+0x22f/0x350
[  515.911639][T12966]  ? end_current_label_crit_section+0x170/0x170
[  515.917953][T12966]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  515.924042][T12966]  ? bpf_lsm_capable+0x5/0x10
[  515.928764][T12966]  ? security_capable+0x85/0xb0
[  515.933703][T12966]  genl_rcv_msg+0x601/0x790
[  515.938297][T12966]  ? genl_bind+0x360/0x360
[  515.942762][T12966]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  515.949208][T12966]  netlink_rcv_skb+0x1ef/0x440
[  515.954061][T12966]  ? genl_bind+0x360/0x360
[  515.958541][T12966]  ? netlink_ack+0x1160/0x1160
[  515.963410][T12966]  ? down_read+0x1a8/0x2d0
[  515.967905][T12966]  genl_rcv+0x24/0x40
[  515.972024][T12966]  netlink_unicast+0x7ad/0x920
[  515.976881][T12966]  netlink_sendmsg+0x8ad/0xbd0
[  515.981757][T12966]  ? netlink_getsockopt+0x550/0x550
[  515.987028][T12966]  ? apparmor_socket_sendmsg+0x8a/0x330
[  515.992643][T12966]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  515.997980][T12966]  ? security_socket_sendmsg+0x7c/0xa0
[  516.003490][T12966]  ? netlink_getsockopt+0x550/0x550
[  516.008749][T12966]  ____sys_sendmsg+0x5ed/0x9a0
[  516.013612][T12966]  ? __sys_sendmsg_sock+0x30/0x30
[  516.018689][T12966]  ? __import_iovec+0x306/0x510
[  516.023644][T12966]  ? import_iovec+0x6f/0xa0
[  516.028227][T12966]  ___sys_sendmsg+0x2a2/0x360
[  516.032991][T12966]  ? __sys_sendmsg+0x2a0/0x2a0
[  516.037993][T12966]  __se_sys_sendmsg+0x1c3/0x2b0
[  516.042922][T12966]  ? __x64_sys_sendmsg+0x80/0x80
[  516.047999][T12966]  ? lockdep_hardirqs_on+0x94/0x140
[  516.053264][T12966]  do_syscall_64+0x4c/0xa0
[  516.057734][T12966]  ? clear_bhb_loop+0x60/0xb0
[  516.062464][T12966]  ? clear_bhb_loop+0x60/0xb0
[  516.067208][T12966]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  516.073165][T12966] RIP: 0033:0x7fa0a179e159
[  516.077634][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  516.097289][T12966] RSP: 002b:00007fa0a2689028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  516.105762][T12966] RAX: ffffffffffffffda RBX: 00007fa0a1a26090 RCX: 00007fa0a179e159
[  516.113779][T12966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007
[  516.121797][T12966] RBP: 00007fa0a183503b R08: 0000000000000000 R09: 0000000000000000
[  516.129816][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  516.137830][T12966] R13: 00007fa0a1a26128 R14: 00007fa0a1a26090 R15: 00007ffdd0174238
[  516.145915][T12966]  </TASK>
[  516.434680][T12988] netlink: 'syz.2.1995': attribute type 21 has an invalid length.
[  516.709657][ T4294] Bluetooth: hci0: ISO packet for unknown connection handle 2366
[  517.549731][T13012] bridge0: port 3(ip6gretap0) entered blocking state
[  517.585070][T13012] bridge0: port 3(ip6gretap0) entered disabled state
[  517.613367][T13012] device ip6gretap0 entered promiscuous mode
[  517.636817][T13012] bridge0: port 3(ip6gretap0) entered blocking state
[  517.643704][T13012] bridge0: port 3(ip6gretap0) entered forwarding state
[  517.731612][T13024] netlink: 'syz.2.2004': attribute type 3 has an invalid length.
[  517.900828][T13029] netlink: 'syz.4.2003': attribute type 7 has an invalid length.
[  517.951639][T13024] netlink: 'syz.2.2004': attribute type 1 has an invalid length.
[  518.046200][T13024] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2004'.
[  518.068502][T13034] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2005'.
[  518.173497][T13039] netlink: 'syz.0.2005': attribute type 4 has an invalid length.
[  518.195046][T13039] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2005'.
[  518.242772][T13039] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  521.851838][T10094] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  522.254095][T13090] netlink: 'syz.2.2018': attribute type 11 has an invalid length.
[  522.304100][T13090] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2018'.
[  522.457080][T13084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  522.688883][T13100] IPv6: NLM_F_CREATE should be specified when creating new route
[  522.702346][T13100] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  522.709686][T13100] IPv6: NLM_F_CREATE should be set when creating new route
[  522.717044][T13100] IPv6: NLM_F_CREATE should be set when creating new route
[  522.724380][T13100] IPv6: NLM_F_CREATE should be set when creating new route
[  522.746603][T13102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  522.980196][T13116] netlink: 'syz.0.2026': attribute type 11 has an invalid length.
[  525.921365][T13182] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2044'.
[  525.961662][T13178] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2044'.
[  526.716985][T13199] netlink: 'syz.3.2049': attribute type 3 has an invalid length.
[  526.761740][T13199] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2049'.
[  526.791954][T13204] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[  527.457217][T13212] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2052'.
[  527.500493][T13213] netlink: 'syz.3.2054': attribute type 29 has an invalid length.
[  527.811641][T13213] netlink: 'syz.3.2054': attribute type 29 has an invalid length.
[  527.884467][T13214] netlink: 'syz.3.2054': attribute type 29 has an invalid length.
[  528.478023][T13215] netlink: 'syz.3.2054': attribute type 29 has an invalid length.
[  528.502078][T13219] netlink: 'syz.3.2054': attribute type 29 has an invalid length.
[  530.398792][T13258] netlink: 'syz.3.2061': attribute type 8 has an invalid length.
[  530.454536][T13258] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2061'.
[  531.252307][T13263] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2062'.
[  532.495198][T13284] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2069'.
[  532.581126][T13284] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.2069'.
[  532.872894][T13291] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.2070'.
[  534.517459][T13324] netlink: 'syz.3.2077': attribute type 3 has an invalid length.
[  534.565415][T13324] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2077'.
[  534.636220][T13323] netlink: 'syz.1.2078': attribute type 21 has an invalid length.
[  534.714863][T13323] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2078'.
[  536.026534][T13344] sctp: [Deprecated]: syz.0.2083 (pid 13344) Use of struct sctp_assoc_value in delayed_ack socket option.
[  536.026534][T13344] Use struct sctp_sack_info instead
[  536.203069][T13344] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2083'.
[  537.706793][T13394] netlink: 'syz.3.2096': attribute type 6 has an invalid length.
[  537.738126][T13394] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2096'.
[  537.775253][T13395] netlink: 'syz.1.2095': attribute type 33 has an invalid length.
[  537.804569][T13395] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2095'.
[  538.185703][T13381] device syzkaller0 entered promiscuous mode
[  543.289115][T13432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2105'.
[  543.836249][T13443] netlink: 'syz.3.2109': attribute type 1 has an invalid length.
[  543.871576][T13443] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2109'.
[  543.910219][T13449] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  544.363787][T13466] netlink: 'syz.1.2113': attribute type 3 has an invalid length.
[  544.406337][T13466] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2113'.
[  544.746765][T13471] netlink: 'syz.0.2114': attribute type 2 has an invalid length.
[  544.760055][T13471] netlink: 'syz.0.2114': attribute type 8 has an invalid length.
[  544.786248][T13471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2114'.
[  544.824817][T13476] netlink: 'syz.0.2114': attribute type 2 has an invalid length.
[  544.904765][T13476] netlink: 'syz.0.2114': attribute type 8 has an invalid length.
[  544.925579][T13476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2114'.
[  547.200860][T13512] netlink: 'syz.0.2122': attribute type 10 has an invalid length.
[  547.220390][T13512] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2122'.
[  547.424206][T13519] netlink: 'syz.2.2123': attribute type 3 has an invalid length.
[  547.461443][T13519] netlink: 'syz.2.2123': attribute type 304 has an invalid length.
[  547.657578][T13535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2129'.
[  547.705263][T13530] device syzkaller0 entered promiscuous mode
[  548.105555][T13557] delete_channel: no stack
[  548.323964][T13562] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2132'.
[  550.228965][T13542] netlink: 'syz.2.2130': attribute type 9 has an invalid length.
[  550.239415][T13542] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2130'.
[  550.249518][T13562] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.2132'.
[  550.494327][T13582] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2140'.
[  550.513360][T13579] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2139'.
[  550.524744][T13583] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2140'.
[  550.559190][T13582] netlink: 'syz.0.2140': attribute type 21 has an invalid length.
[  550.636397][T13587] netlink: 'syz.3.2142': attribute type 3 has an invalid length.
[  550.682928][T13588] netlink: 'syz.3.2142': attribute type 3 has an invalid length.
[  550.710668][T13587] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2142'.
[  550.741645][T13588] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2142'.
[  551.251561][T13604] netlink: 'syz.1.2147': attribute type 16 has an invalid length.
[  551.271813][T13604] netlink: 'syz.1.2147': attribute type 3 has an invalid length.
[  551.306632][T13604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2147'.
[  551.602697][T13613] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2148'.
[  552.525612][T13642] netlink: 'syz.1.2156': attribute type 4 has an invalid length.
[  552.672092][T13644] netlink: 'syz.0.2157': attribute type 3 has an invalid length.
[  553.202840][ T7759] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  553.830939][T13679] __nla_validate_parse: 2 callbacks suppressed
[  553.830979][T13679] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.2166'.
[  554.497484][T13692] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2168'.
[  554.714510][T13705] netlink: 'syz.3.2170': attribute type 10 has an invalid length.
[  554.739014][T13698] netlink: 'syz.3.2170': attribute type 10 has an invalid length.
[  555.286293][T13710] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.2169'.
[  555.541359][T13729] netlink: 'syz.3.2174': attribute type 1 has an invalid length.
[  555.662269][T13729] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.2174'.
[  555.731667][T13701] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2169'.
[  556.248149][T13707] delete_channel: no stack
[  556.544248][T13741] netlink: 'syz.1.2178': attribute type 5 has an invalid length.
[  557.298473][T13749] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2180'.
[  558.272093][T13768] netlink: 'syz.3.2187': attribute type 29 has an invalid length.
[  558.303768][T13772] netlink: 'syz.3.2187': attribute type 29 has an invalid length.
[  558.318815][T13775] device lo entered promiscuous mode
[  558.360430][T13775] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  558.413551][T13772] netlink: 'syz.3.2187': attribute type 29 has an invalid length.
[  559.544944][T13810] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  559.615681][T13810] batman_adv: batadv0: Removing interface: batadv_slave_0
[  559.686593][T13806] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2197'.
[  559.688450][T13810] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.793658][T13810] batman_adv: batadv0: Removing interface: batadv_slave_1
[  562.814292][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  562.820922][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  563.115198][T13810] device batadv0 left promiscuous mode
[  563.120812][T13810] bridge0: port 3(batadv0) entered disabled state
[  563.191871][T13812] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2199'.
[  563.404042][T13832] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  563.708939][T13843] netlink: 'syz.2.2206': attribute type 21 has an invalid length.
[  563.723527][T13842] netlink: 'syz.1.2205': attribute type 2 has an invalid length.
[  564.034647][T13856] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2209'.
[  564.298314][T13865] netlink: 'syz.4.2212': attribute type 10 has an invalid length.
[  564.622607][T13870] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2213'.
[  564.948399][T13887] netlink: 'syz.4.2218': attribute type 3 has an invalid length.
[  565.001048][T13887] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2218'.
[  565.192970][T13894] netlink: 'syz.4.2218': attribute type 21 has an invalid length.
[  565.236540][T13894] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2218'.
[  565.340365][T13890] netlink: 'syz.0.2219': attribute type 11 has an invalid length.
[  565.348643][T13890] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2219'.
[  565.371970][T13894] netlink: 'syz.4.2218': attribute type 4 has an invalid length.
[  565.380012][T13894] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2218'.
[  565.477095][T13903] netlink: 'syz.3.2222': attribute type 29 has an invalid length.
[  565.519586][T13902] netlink: 'syz.1.2223': attribute type 21 has an invalid length.
[  565.539480][T13902] netlink: 'syz.1.2223': attribute type 11 has an invalid length.
[  565.579482][T13889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  565.636497][T13903] netlink: 'syz.3.2222': attribute type 29 has an invalid length.
[  567.508975][T13949] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2232'.
[  569.532876][T13977] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f
[  569.617086][T13977] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2239'.
[  569.761728][T10085] wlan1: Trigger new scan to find an IBSS to join
[  571.020607][T14020] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.2248'.
[  572.619952][T14021] validate_nla: 3 callbacks suppressed
[  572.619971][T14021] netlink: 'syz.2.2248': attribute type 10 has an invalid length.
[  573.474679][T14052] netlink: 'syz.3.2257': attribute type 1 has an invalid length.
[  573.495530][T14052] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2257'.
[  574.151920][T14064] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2259'.
[  574.189053][T10358] tipc: Subscription rejected, illegal request
[  574.618168][T14081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  574.625741][T14081] IPv6: NLM_F_CREATE should be set when creating new route
[  574.634465][T14081] IPv6: NLM_F_CREATE should be set when creating new route
[  574.805851][T10085] wlan1: Trigger new scan to find an IBSS to join
[  574.910968][T14088] netlink: 'syz.0.2267': attribute type 1 has an invalid length.
[  574.934146][T14088] netlink: 'syz.0.2267': attribute type 4 has an invalid length.
[  574.946059][T14088] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2267'.
[  578.402325][T10093] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00
[  578.410340][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  578.901260][T14139] netlink: 'syz.2.2279': attribute type 3 has an invalid length.
[  579.025070][T14140] netlink: 'syz.2.2279': attribute type 2 has an invalid length.
[  579.063512][T14139] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2279'.
[  579.128011][T14140] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2279'.
[  579.221977][T14149] netlink: 'syz.4.2281': attribute type 6 has an invalid length.
[  579.245117][T14149] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2281'.
[  579.259190][T14158] netlink: 'syz.1.2283': attribute type 10 has an invalid length.
[  579.269576][T14155] netlink: 126612 bytes leftover after parsing attributes in process `syz.4.2281'.
[  579.290965][T14155] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2281'.
[  579.311604][T14158] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2283'.
[  579.367283][T14159] netlink: 'syz.4.2281': attribute type 10 has an invalid length.
[  579.395236][T14160] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2283'.
[  579.703859][T14168] netlink: 'syz.4.2286': attribute type 3 has an invalid length.
[  579.770604][T14168] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2286'.
[  580.038572][T14194] netlink: 'syz.1.2291': attribute type 11 has an invalid length.
[  580.620608][T14214] netlink: 'syz.1.2294': attribute type 4 has an invalid length.
[  580.662412][T14214] netlink: 'syz.1.2294': attribute type 26 has an invalid length.
[  580.692041][T14214] netlink: 60519 bytes leftover after parsing attributes in process `syz.1.2294'.
[  581.274864][T14225] device sit0 entered promiscuous mode
[  581.783827][T14237] netlink: 'syz.3.2301': attribute type 16 has an invalid length.
[  581.900496][T14237] netlink: 'syz.3.2301': attribute type 3 has an invalid length.
[  581.912216][T14237] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2301'.
[  582.521119][T14250] delete_channel: no stack
[  583.453630][T14259] delete_channel: no stack
[  584.449243][T14284] ¥: port 2(bond0) entered blocking state
[  584.507457][T14284] ¥: port 2(bond0) entered disabled state
[  584.554592][T14284] device bond0 entered promiscuous mode
[  584.570153][T14284] device bond_slave_1 entered promiscuous mode
[  584.584126][T14284] device dummy0 entered promiscuous mode
[  584.624787][T14284] device batadv_slave_0 entered promiscuous mode
[  584.710510][T14300] syzkaller1: tun_chr_ioctl cmd 1074025677
[  584.731901][T14300] syzkaller1: linktype set to 786
[  585.347044][T14316] validate_nla: 2 callbacks suppressed
[  585.347126][T14316] netlink: 'syz.3.2317': attribute type 10 has an invalid length.
[  585.427180][T14319] __nla_validate_parse: 2 callbacks suppressed
[  585.427210][T14319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'.
[  585.446703][T14319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'.
[  585.516535][T14319] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'.
[  586.225251][T14337] device veth1_macvtap left promiscuous mode
[  586.240482][T14339] device veth1_macvtap entered promiscuous mode
[  586.262810][T14339] device macsec0 entered promiscuous mode
[  586.269838][T14339] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  586.277810][T10083] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  586.678160][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.686475][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.716503][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.763888][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.879405][T14353] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.895296][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.922910][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.947335][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  586.976575][T14352] netlink: 'syz.2.2326': attribute type 29 has an invalid length.
[  587.760170][T14368] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2333'.
[  587.820393][T14372] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2334'.
[  588.063279][T14383] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2335'.
[  588.094153][T14382] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2335'.
[  590.440375][T14426] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2346'.
[  590.484840][T14426] netlink: zone id is out of range
[  590.490136][T14426] netlink: zone id is out of range
[  590.526105][T14426] netlink: zone id is out of range
[  590.551865][T14426] netlink: zone id is out of range
[  590.578089][T14426] netlink: zone id is out of range
[  590.594396][T14426] netlink: zone id is out of range
[  590.600940][T14435] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2347'.
[  590.614435][T14426] netlink: zone id is out of range
[  590.627734][T14426] netlink: zone id is out of range
[  590.664647][T14426] netlink: zone id is out of range
[  590.682628][T14426] netlink: zone id is out of range
[  590.899879][T14444] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2350'.
[  591.008926][T14442] delete_channel: no stack
[  591.039897][T14442] delete_channel: no stack
[  591.316082][T14461] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2353'.
[  591.354296][T14452] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2352'.
[  592.524840][T14489] device sit0 left promiscuous mode
[  592.696897][T14500] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.2363'.
[  592.700385][T14493] device sit0 entered promiscuous mode
[  592.913849][T14500] validate_nla: 16 callbacks suppressed
[  592.913871][T14500] netlink: 'syz.1.2363': attribute type 25 has an invalid length.
[  592.940309][T14500] netlink: 'syz.1.2363': attribute type 28 has an invalid length.
[  596.022971][T14570] netlink: 'syz.1.2375': attribute type 29 has an invalid length.
[  597.824923][T14570] netlink: 'syz.1.2375': attribute type 29 has an invalid length.
[  598.095610][T14587] netlink: 'syz.1.2379': attribute type 2 has an invalid length.
[  598.229067][T14587] netlink: 'syz.1.2379': attribute type 5 has an invalid length.
[  598.445792][T14589] netlink: 'syz.3.2380': attribute type 2 has an invalid length.
[  599.609497][T14628] netlink: 'syz.1.2389': attribute type 39 has an invalid length.
[  600.093285][T14641] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2391'.
[  600.140957][T14638] netlink: 'syz.0.2392': attribute type 3 has an invalid length.
[  600.157472][T14639] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.2391'.
[  600.171088][T14638] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.2392'.
[  600.205559][T14641] net_ratelimit: 20 callbacks suppressed
[  600.205608][T14641] openvswitch: netlink: Flow actions attr not present in new flow.
[  600.246392][T14639] openvswitch: netlink: Flow actions attr not present in new flow.
[  600.654116][T14651] netlink: 3291 bytes leftover after parsing attributes in process `syz.3.2394'.
[  602.486202][T14704] 
€Â0: renamed from pim6reg1
[  603.014936][T14720] netlink: 'syz.1.2410': attribute type 3 has an invalid length.
[  603.025844][T14720] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2410'.
[  604.858292][T14724] netlink: 'syz.2.2412': attribute type 39 has an invalid length.
[  605.030847][T14737] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2416'.
[  605.467925][T14738] netlink: 'syz.2.2413': attribute type 7 has an invalid length.
[  605.492527][T14738] netlink: 'syz.2.2413': attribute type 6 has an invalid length.
[  607.660482][T14765] netlink: 'syz.2.2420': attribute type 21 has an invalid length.
[  607.668822][T14767] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2420'.
[  607.682436][T14767] netlink: 5304 bytes leftover after parsing attributes in process `syz.2.2420'.
[  607.695397][T14767] netlink: 802 bytes leftover after parsing attributes in process `syz.2.2420'.
[  608.100913][T14787] netlink: 'syz.0.2426': attribute type 21 has an invalid length.
[  608.128228][T14787] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2426'.
[  609.978425][T14798] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2429'.
[  609.995422][T14802] netlink: 'syz.0.2430': attribute type 4 has an invalid length.
[  610.003990][T14802] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2430'.
[  610.014242][T14802] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  610.260177][T14812] netlink: 'syz.0.2434': attribute type 3 has an invalid length.
[  610.411584][T14812] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2434'.
[  610.803550][ T9204] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  610.859571][T14838] netlink: 'syz.3.2437': attribute type 7 has an invalid length.
[  610.889726][T14838] netlink: 'syz.3.2437': attribute type 7 has an invalid length.
[  610.944141][T14838] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.2437'.
[  611.058882][T14838] netlink: 'syz.3.2437': attribute type 10 has an invalid length.
[  611.178566][T14838] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.232883][T14838] device bridge_slave_1 left promiscuous mode
[  611.239755][T14838] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.441115][T14847] netlink: 'syz.0.2439': attribute type 13 has an invalid length.
[  611.494375][T14847] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.2439'.
[  611.544189][T14848] netlink: 'syz.0.2439': attribute type 10 has an invalid length.
[  611.576023][T14848] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2439'.
[  614.089579][T14847] device syzkaller0 entered promiscuous mode
[  614.103322][T14884] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2448'.
[  614.284207][T14891] netlink: 'syz.4.2451': attribute type 10 has an invalid length.
[  614.331683][T14891] 8021q: adding VLAN 0 to HW filter on device bond0
[  614.360480][T14891] device bond0 entered promiscuous mode
[  614.375213][T14891] device bond_slave_1 entered promiscuous mode
[  614.404643][T14891] team0: Port device bond0 added
[  614.434538][T14889] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2449'.
[  614.608085][T14904] netlink: 'syz.3.2455': attribute type 17 has an invalid length.
[  614.645777][T14908] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.2457'.
[  614.822022][T14915] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2460'.
[  614.823913][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2459'.
[  614.882833][T14915] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2460'.
[  615.033161][T14932] netlink: 'syz.1.2461': attribute type 10 has an invalid length.
[  615.073608][T14932] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.131733][T14932] device bridge_slave_1 left promiscuous mode
[  615.138107][T14932] bridge0: port 2(bridge_slave_1) entered disabled state
[  615.895567][T14975] netlink: 'syz.4.2473': attribute type 2 has an invalid length.
[  616.511711][T14996] netlink: 'syz.4.2476': attribute type 13 has an invalid length.
[  616.544078][T14996] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2476'.
[  617.124018][T15011] can: request_module (can-proto-0) failed.
[  620.514190][T15044] netlink: 'syz.3.2488': attribute type 6 has an invalid length.
[  620.577539][T15044] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.2488'.
[  620.815415][T15049] netlink: 'syz.0.2490': attribute type 10 has an invalid length.
[  620.824879][T15036] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2485'.
[  620.855066][T15048] netlink: 'syz.1.2489': attribute type 3 has an invalid length.
[  620.875647][T15049] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.910996][T15048] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2489'.
[  621.014078][T15049] device bridge_slave_1 left promiscuous mode
[  621.026905][T15049] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.046587][T15049] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  621.077493][T15051] netlink: 'syz.1.2489': attribute type 33 has an invalid length.
[  621.089166][T15051] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2489'.
[  621.135773][T15049] netlink: 'syz.0.2490': attribute type 5 has an invalid length.
[  621.207206][T15050] netlink: 'syz.0.2490': attribute type 2 has an invalid length.
[  621.778680][T15078] netlink: 'syz.0.2499': attribute type 27 has an invalid length.
[  621.870673][T15078] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.2499'.
[  622.202307][T15083] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2492'.
[  622.215422][T15083] tc_dump_action: action bad kind
[  622.317616][T15088] netlink: 'syz.4.2500': attribute type 10 has an invalid length.
[  622.342741][T15088] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2500'.
[  622.364286][T15088] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  622.556034][T15106] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2503'.
[  623.406075][T15124] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2507'.
[  623.660740][T15138] netlink: 'syz.0.2510': attribute type 39 has an invalid length.
[  623.956399][T15152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2514'.
[  624.254052][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  624.260449][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  624.481115][T15175] netlink: 'syz.1.2520': attribute type 10 has an invalid length.
[  624.878309][T15175] team0: Device gre0 is of different type
[  626.656696][T15230] __nla_validate_parse: 1 callbacks suppressed
[  626.656715][T15230] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2529'.
[  627.244831][T15248] netlink: 'syz.1.2533': attribute type 29 has an invalid length.
[  627.295584][T15248] netlink: 'syz.1.2533': attribute type 3 has an invalid length.
[  627.321845][T15248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2533'.
[  627.745676][T15268] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2537'.
[  628.346225][T15280] netlink: 'syz.2.2542': attribute type 39 has an invalid length.
[  628.862060][T15289] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2544'.
[  629.000953][T15295] netlink: 'syz.0.2546': attribute type 16 has an invalid length.
[  629.118172][T15295] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2546'.
[  629.227798][T15301] netlink: 'syz.1.2548': attribute type 5 has an invalid length.
[  629.253639][T15301] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2548'.
[  629.405788][T15305] netlink: 'syz.2.2549': attribute type 13 has an invalid length.
[  629.422559][T15307] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2550'.
[  629.470138][T15305] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2549'.
[  629.583103][T15305] erspan0: refused to change device tx_queue_len
[  629.611803][T15305] netlink: 'syz.2.2549': attribute type 13 has an invalid length.
[  629.619694][T15305] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2549'.
[  629.693695][T15305] erspan0: refused to change device tx_queue_len
[  629.756175][T15322] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2552'.
[  629.767599][T15305] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  629.903747][T15327] netlink: 'syz.3.2552': attribute type 10 has an invalid length.
[  630.270286][T15354] sysfs: cannot create duplicate filename '/class/ieee80211/!!!'
[  630.322756][T15354] CPU: 0 PID: 15354 Comm: syz.0.2557 Not tainted syzkaller #0
[  630.330364][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  630.340462][T15354] Call Trace:
[  630.343798][T15354]  <TASK>
[  630.346781][T15354]  dump_stack_lvl+0x188/0x24e
[  630.351527][T15354]  ? show_regs_print_info+0x12/0x12
[  630.356794][T15354]  ? load_image+0x410/0x410
[  630.361365][T15354]  sysfs_warn_dup+0x8a/0xa0
[  630.365969][T15354]  sysfs_do_create_link_sd+0xc0/0x110
[  630.371417][T15354]  device_add+0x83b/0x1050
[  630.375905][T15354]  wiphy_register+0x1d8b/0x2aa0
[  630.380842][T15354]  ? cfg80211_event_work+0x40/0x40
[  630.386059][T15354]  ? minstrel_ht_alloc+0x894/0xa20
[  630.391241][T15354]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  630.397370][T15354]  ieee80211_register_hw+0x2d48/0x39f0
[  630.402894][T15354]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  630.409119][T15354]  ? ieee80211_register_hw+0xee1/0x39f0
[  630.414735][T15354]  ? ieee80211_register_hw+0xee1/0x39f0
[  630.420367][T15354]  ? ieee80211_tasklet_handler+0x20/0x20
[  630.426064][T15354]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  630.432025][T15354]  ? __debug_object_init+0xed/0x440
[  630.437293][T15354]  ? memset+0x1e/0x40
[  630.441362][T15354]  ? __hrtimer_init+0x189/0x270
[  630.446275][T15354]  mac80211_hwsim_new_radio+0x2927/0x4cd0
[  630.452087][T15354]  ? memcpy+0x3c/0x60
[  630.456132][T15354]  hwsim_new_radio_nl+0xab7/0xc90
[  630.461231][T15354]  genl_family_rcv_msg_doit+0x22f/0x350
[  630.466835][T15354]  ? end_current_label_crit_section+0x170/0x170
[  630.473137][T15354]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  630.479354][T15354]  ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0
[  630.485307][T15354]  ? bpf_lsm_capable+0x5/0x10
[  630.490034][T15354]  ? security_capable+0x85/0xb0
[  630.494943][T15354]  genl_rcv_msg+0x601/0x790
[  630.499507][T15354]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  630.505796][T15354]  ? genl_bind+0x360/0x360
[  630.510241][T15354]  ? hwsim_tx_info_frame_received_nl+0xe30/0xe30
[  630.516621][T15354]  ? lock_acquire+0x225/0x4a0
[  630.521347][T15354]  netlink_rcv_skb+0x1ef/0x440
[  630.526158][T15354]  ? genl_bind+0x360/0x360
[  630.530601][T15354]  ? netlink_ack+0x1160/0x1160
[  630.535403][T15354]  ? down_read+0x1a8/0x2d0
[  630.539856][T15354]  genl_rcv+0x24/0x40
[  630.543951][T15354]  netlink_unicast+0x7ad/0x920
[  630.548788][T15354]  netlink_sendmsg+0x8ad/0xbd0
[  630.553596][T15354]  ? netlink_getsockopt+0x550/0x550
[  630.558823][T15354]  ? apparmor_socket_sendmsg+0x8a/0x330
[  630.564419][T15354]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  630.569737][T15354]  ? security_socket_sendmsg+0x7c/0xa0
[  630.575227][T15354]  ? netlink_getsockopt+0x550/0x550
[  630.580452][T15354]  ____sys_sendmsg+0x5ed/0x9a0
[  630.585264][T15354]  ? __sys_sendmsg_sock+0x30/0x30
[  630.590330][T15354]  ? __import_iovec+0x306/0x510
[  630.595253][T15354]  ? import_iovec+0x6f/0xa0
[  630.599819][T15354]  ___sys_sendmsg+0x2a2/0x360
[  630.604537][T15354]  ? __sys_sendmsg+0x2a0/0x2a0
[  630.609361][T15354]  ? perf_trace_run_bpf_submit+0xf3/0x1c0
[  630.615174][T15354]  __se_sys_sendmsg+0x1c3/0x2b0
[  630.620062][T15354]  ? __x64_sys_sendmsg+0x80/0x80
[  630.625052][T15354]  ? syscall_enter_from_user_mode+0x2a/0x80
[  630.630995][T15354]  do_syscall_64+0x4c/0xa0
[  630.635471][T15354]  ? clear_bhb_loop+0x60/0xb0
[  630.640209][T15354]  ? clear_bhb_loop+0x60/0xb0
[  630.645033][T15354]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  630.650972][T15354] RIP: 0033:0x7f729c79e159
[  630.655420][T15354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  630.675063][T15354] RSP: 002b:00007f729d6d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  630.683795][T15354] RAX: ffffffffffffffda RBX: 00007f729ca26090 RCX: 00007f729c79e159
[  630.691813][T15354] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  630.699813][T15354] RBP: 00007f729c83503b R08: 0000000000000000 R09: 0000000000000000
[  630.707816][T15354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  630.715808][T15354] R13: 00007f729ca26128 R14: 00007f729ca26090 R15: 00007fff3e7080c8
[  630.723827][T15354]  </TASK>
[  633.446745][T15382] netlink: 'syz.0.2564': attribute type 10 has an invalid length.
[  633.475295][T15382] __nla_validate_parse: 1 callbacks suppressed
[  633.475317][T15382] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2564'.
[  633.574019][T15388] netlink: 'syz.2.2566': attribute type 10 has an invalid length.
[  634.231548][T15415] netlink: 'syz.1.2573': attribute type 10 has an invalid length.
[  634.574462][T15415] team0: Device nlmon0 is of different type
[  634.630025][T15424] netlink: 'syz.1.2573': attribute type 10 has an invalid length.
[  634.669456][T15424] team0: Device nlmon0 is of different type
[  635.367565][T15414] syzkaller0: tun_chr_ioctl cmd 2147767519
[  637.340051][T15481] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.2586'.
[  637.385098][T15481] netlink: 'syz.4.2586': attribute type 10 has an invalid length.
[  638.254146][T15502] netlink: 'syz.4.2591': attribute type 21 has an invalid length.
[  638.273714][T15502] netlink: 'syz.4.2591': attribute type 4 has an invalid length.
[  638.288115][T15502] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2591'.
[  638.657901][T15522] tap0: tun_chr_ioctl cmd 1074025675
[  638.671259][T15522] tap0: persist enabled
[  638.677188][T15526] tap0: tun_chr_ioctl cmd 1074025675
[  638.685547][T15526] tap0: persist disabled
[  638.919678][T15521] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.2596'.
[  639.599765][T15546] netlink: 'syz.0.2601': attribute type 2 has an invalid length.
[  639.651797][T15546] netlink: 'syz.0.2601': attribute type 8 has an invalid length.
[  639.659862][T15546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2601'.
[  639.741096][T15546] netlink: 'syz.0.2601': attribute type 2 has an invalid length.
[  639.778698][T15546] netlink: 'syz.0.2601': attribute type 8 has an invalid length.
[  639.817151][T15546] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2601'.
[  639.877974][T15557] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2605'.
[  639.905058][T15565] netlink: 'syz.4.2605': attribute type 10 has an invalid length.
[  639.925018][T15565] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2605'.
[  640.148875][T15567] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2608'.
[  640.304680][T15573] -1: renamed from syzkaller0
[  640.364575][T15577] netlink: 'syz.0.2610': attribute type 29 has an invalid length.
[  640.391440][T15577] netlink: 'syz.0.2610': attribute type 3 has an invalid length.
[  640.399233][T15577] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2610'.
[  642.609387][T15642] netlink: 'syz.3.2625': attribute type 29 has an invalid length.
[  642.683608][T15634] device syzkaller0 entered promiscuous mode
[  642.691589][T15641] netlink: 'syz.2.2624': attribute type 39 has an invalid length.
[  642.704156][T15642] netlink: 'syz.3.2625': attribute type 29 has an invalid length.
[  645.425485][T15680] validate_nla: 2 callbacks suppressed
[  645.425525][T15680] netlink: 'syz.0.2635': attribute type 2 has an invalid length.
[  645.491182][ T4294] Bluetooth: hci1: ISO packet for unknown connection handle 4095
[  645.501856][T15680] netlink: 175020 bytes leftover after parsing attributes in process `syz.0.2635'.
[  645.515387][T15686] delete_channel: no stack
[  645.551557][T15686] delete_channel: no stack
[  647.768835][T15690] device syz_tun left promiscuous mode
[  647.775131][T15690] ¥: port 1(syz_tun) entered disabled state
[  648.023107][ T4294] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4
[  648.025854][T15715] netlink: 'syz.3.2644': attribute type 21 has an invalid length.
[  648.052817][T15714] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2643'.
[  648.093727][T15721] netlink: 'syz.1.2645': attribute type 3 has an invalid length.
[  648.101801][T15721] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2645'.
[  648.114037][T15724] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2643'.
[  649.795631][T15768] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2656'.
[  649.835800][T15773] netlink: 7807 bytes leftover after parsing attributes in process `syz.4.2657'.
[  649.956955][T15775] netlink: 7807 bytes leftover after parsing attributes in process `syz.4.2657'.
[  652.766496][T15796] netlink: 'syz.0.2660': attribute type 21 has an invalid length.
[  652.790479][T15796] netlink: 14354 bytes leftover after parsing attributes in process `syz.0.2660'.
[  653.201230][T15807] netlink: 'syz.3.2663': attribute type 10 has an invalid length.
[  653.293525][T15807] netlink: 'syz.3.2663': attribute type 19 has an invalid length.
[  653.320786][T15807] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.2663'.
[  653.356783][T15814] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2664'.
[  653.434177][T15818] netlink: 'syz.1.2667': attribute type 49 has an invalid length.
[  654.257526][T15843] device sit0 left promiscuous mode
[  654.380593][T15854] netlink: 'syz.0.2674': attribute type 1 has an invalid length.
[  654.500762][T15854] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2674'.
[  654.748012][T15847] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2675'.
[  654.783115][T15847] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  654.804423][T15853] device sit0 entered promiscuous mode
[  655.204818][T15869] netlink: 'syz.3.2677': attribute type 39 has an invalid length.
[  655.381773][T15874] netlink: 'syz.3.2681': attribute type 29 has an invalid length.
[  655.400300][T15874] netlink: 'syz.3.2681': attribute type 29 has an invalid length.
[  655.414023][T15881] netlink: 'syz.3.2681': attribute type 29 has an invalid length.
[  655.586456][T15885] device lo entered promiscuous mode
[  655.595380][T15883] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2680'.
[  655.642508][T15885] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  656.268671][T15913] netlink: 'syz.0.2689': attribute type 21 has an invalid length.
[  657.541227][T15928] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2692'.
[  657.645588][T15932] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2694'.
[  657.866019][T15946] validate_nla: 5 callbacks suppressed
[  657.866039][T15946] netlink: 'syz.0.2693': attribute type 21 has an invalid length.
[  657.866978][T15952] netlink: 'syz.3.2695': attribute type 2 has an invalid length.
[  657.881616][T15946] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2693'.
[  657.899656][T15955] netlink: 'syz.4.2697': attribute type 3 has an invalid length.
[  657.914509][T15955] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2697'.
[  657.924417][T15946] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2693'.
[  658.004647][T15934] device .*! entered promiscuous mode
[  658.011107][T15941] netlink: 'syz.2.2696': attribute type 22 has an invalid length.
[  658.032910][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2696'.
[  658.275155][T15972] netlink: 'syz.3.2700': attribute type 10 has an invalid length.
[  658.419144][T15977] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2702'.
[  658.704962][T15991] netlink: 'syz.3.2705': attribute type 10 has an invalid length.
[  659.050622][T15996] netlink: 'syz.0.2706': attribute type 3 has an invalid length.
[  659.193017][T15996] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2706'.
[  659.251099][T16003] netlink: 'syz.1.2708': attribute type 13 has an invalid length.
[  659.328034][T16003] netlink: 14581 bytes leftover after parsing attributes in process `syz.1.2708'.
[  659.844477][T16019] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2712'.
[  660.579456][T16065] netlink: 'syz.1.2725': attribute type 4 has an invalid length.
[  660.587796][T16065] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2725'.
[  661.091021][T16073] device syzkaller0 entered promiscuous mode
[  663.664969][T16100] netlink: 'syz.4.2733': attribute type 10 has an invalid length.
[  663.934103][T16115] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2737'.
[  663.980493][T16114] netlink: 'syz.3.2738': attribute type 3 has an invalid length.
[  663.998848][T16114] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2738'.
[  664.029595][T16117] netlink: 'syz.4.2739': attribute type 29 has an invalid length.
[  664.074885][T16121] netlink: 126324 bytes leftover after parsing attributes in process `syz.0.2740'.
[  664.128575][T16117] netlink: 'syz.4.2739': attribute type 29 has an invalid length.
[  664.176734][T16125] netlink: 'syz.0.2740': attribute type 3 has an invalid length.
[  664.198414][T16125] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2740'.
[  664.249973][T16123] netlink: 'syz.4.2739': attribute type 29 has an invalid length.
[  664.693250][T16131] netlink: 'syz.3.2742': attribute type 9 has an invalid length.
[  664.714184][T16131] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2742'.
[  664.744940][T16133] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2742'.
[  664.923284][T16135] netlink: 'syz.1.2743': attribute type 3 has an invalid length.
[  664.949515][T16135] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2743'.
[  665.579897][T16153] netlink: 'syz.2.2748': attribute type 3 has an invalid length.
[  665.641482][T16153] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2748'.
[  665.825792][T16148] netlink: 'syz.2.2748': attribute type 21 has an invalid length.
[  665.871475][T16148] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2748'.
[  665.880739][T16148] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2748'.
[  668.957500][T16258] __nla_validate_parse: 4 callbacks suppressed
[  668.957540][T16258] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2769'.
[  669.121891][T16261] validate_nla: 2 callbacks suppressed
[  669.121925][T16261] netlink: 'syz.0.2771': attribute type 10 has an invalid length.
[  669.996590][T16261] device syz_tun entered promiscuous mode
[  670.174558][T16261] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  673.013063][T16307] Dead loop on virtual device ip6_vti0, fix it urgently!
[  673.054599][T16310] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2782'.
[  673.061042][T16307] Dead loop on virtual device ip6_vti0, fix it urgently!
[  673.585263][T16327] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2787'.
[  674.293180][T16340] netlink: 'syz.3.2791': attribute type 27 has an invalid length.
[  674.462237][T16338] delete_channel: no stack
[  674.546612][T16352] netlink: 'syz.2.2794': attribute type 2 has an invalid length.
[  674.583059][T16352] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2794'.
[  675.475614][T16352] bond0: (slave dummy0): Releasing backup interface
[  675.599054][T16352] device dummy0 left promiscuous mode
[  675.873175][T16355] netlink: 'syz.0.2793': attribute type 21 has an invalid length.
[  675.883275][T16355] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  675.890556][T16355] IPv6: NLM_F_CREATE should be set when creating new route
[  675.897942][T16355] IPv6: NLM_F_CREATE should be set when creating new route
[  675.905224][T16355] IPv6: NLM_F_CREATE should be set when creating new route
[  675.921376][T16363] netlink: 'syz.2.2794': attribute type 21 has an invalid length.
[  675.929536][T16363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2794'.
[  676.254050][T16393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2801'.
[  676.324846][T16391] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2799'.
[  676.344297][T16393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2801'.
[  676.369427][T16395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2801'.
[  676.406264][T16395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2801'.
[  676.483730][T16397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2801'.
[  677.446307][T16432] netlink: 'syz.2.2809': attribute type 9 has an invalid length.
[  677.464660][T16432] netlink: 'syz.2.2809': attribute type 8 has an invalid length.
[  677.481418][T16432] netlink: 355 bytes leftover after parsing attributes in process `syz.2.2809'.
[  680.569019][T16461] device veth1_macvtap left promiscuous mode
[  680.809387][T16461] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2812'.
[  680.853346][T16456] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2812'.
[  681.407797][T16483] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2820'.
[  681.474097][T16486] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2818'.
[  681.570927][T16486] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  681.701216][T16486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  683.072930][T16526] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2830'.
[  683.196237][T16532] netlink: 'syz.3.2831': attribute type 10 has an invalid length.
[  683.232418][T16532] bridge0: port 3(ip6gretap0) entered disabled state
[  683.239354][T16532] bridge0: port 1(bridge_slave_0) entered disabled state
[  683.366927][T16543] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2835'.
[  683.609804][T16560] netlink: 'syz.1.2838': attribute type 27 has an invalid length.
[  683.649232][T16560] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2838'.
[  683.694683][T16560] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2838'.
[  683.766884][ T4294] Bluetooth: hci2: ISO packet for unknown connection handle 5
[  684.607415][T16578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  684.617236][T16578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  684.631994][T16578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  684.681821][T16578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  684.710134][T16578] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  684.730892][T16578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  685.066672][ T4294] Bluetooth: hci4: ISO packet for unknown connection handle 34
[  685.092981][ T4294] Bluetooth: hci4: ISO packet for unknown connection handle 34
[  685.688007][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  685.694515][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  685.902652][T16607] tc_dump_action: action bad kind
[  686.094721][T16577] chnl_net:caif_netlink_parms(): no params data found
[  686.811577][ T4294] Bluetooth: hci5: command 0x0409 tx timeout
[  686.840281][T16618] device syzkaller0 entered promiscuous mode
[  686.937133][T16622] netlink: 'syz.0.2852': attribute type 2 has an invalid length.
[  686.974338][T16622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2852'.
[  687.004190][T16635] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2854'.
[  687.061090][T16630] bridge0: port 1(bridge_slave_0) entered forwarding state
[  687.102737][T16632] netlink: 'syz.4.2854': attribute type 20 has an invalid length.
[  688.894973][T16578] Bluetooth: hci5: command 0x041b tx timeout
[  689.196121][T16635] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2854'.
[  689.226518][T16649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2857'.
[  689.279877][T16577] bridge0: port 1(bridge_slave_0) entered blocking state
[  689.381567][T16577] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.389847][T16577] device bridge_slave_0 entered promiscuous mode
[  689.399001][T16577] bridge0: port 2(bridge_slave_1) entered blocking state
[  689.410855][T16577] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.425921][T16577] device bridge_slave_1 entered promiscuous mode
[  689.486977][T16577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  689.554511][T16577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  689.647372][T16662] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2860'.
[  689.714603][T16577] team0: Port device team_slave_0 added
[  689.763919][T16577] team0: Port device team_slave_1 added
[  689.828789][T16667] netlink: 'syz.2.2862': attribute type 16 has an invalid length.
[  689.840473][T16667] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2862'.
[  689.869296][T16577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  689.890763][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  689.991460][T16577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  690.035454][T16577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  690.061861][T16577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  690.151119][T16577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  690.261214][T10087] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.474456][T16683] netlink: 'syz.0.2866': attribute type 1 has an invalid length.
[  690.534780][T16683] netlink: 'syz.0.2866': attribute type 3 has an invalid length.
[  690.550860][T10087] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.579349][T16578] Bluetooth: hci2: Unknown advertising packet type: 0x20
[  690.579387][T16578] Bluetooth: hci2: Malformed LE Event: 0x0d
[  690.598734][T16683] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2866'.
[  690.628833][T16577] device hsr_slave_0 entered promiscuous mode
[  690.654139][T16577] device hsr_slave_1 entered promiscuous mode
[  690.672401][T16577] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  690.680168][T16577] Cannot create hsr debugfs directory
[  690.741740][T10087] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.888142][T10087] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  690.961639][T16578] Bluetooth: hci5: command 0x040f tx timeout
[  691.154374][T16700] syzkaller1: tun_chr_ioctl cmd 1074025678
[  691.160467][T16700] syzkaller1: group set to 778
[  691.535069][T10087] device .*! left promiscuous mode
[  692.057295][T10087] device ip6gretap0 left promiscuous mode
[  692.077912][T10087] bridge0: port 3(ip6gretap0) entered disabled state
[  693.041513][ T4294] Bluetooth: hci5: command 0x0419 tx timeout
[  693.125778][T16577] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  693.145531][T16577] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  693.240996][T16577] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  693.267686][T16577] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  693.777449][T16754] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2880'.
[  694.141292][T16759] netlink: 'syz.2.2881': attribute type 2 has an invalid length.
[  694.172834][T16759] netlink: 'syz.2.2881': attribute type 8 has an invalid length.
[  694.214732][T16759] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2881'.
[  694.315893][T16577] 8021q: adding VLAN 0 to HW filter on device bond0
[  694.389681][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  694.403163][ T9204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  694.415124][T16577] 8021q: adding VLAN 0 to HW filter on device team0
[  694.467816][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  694.479392][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  694.489861][T16742] netlink: 'syz.1.2877': attribute type 3 has an invalid length.
[  694.504155][ T7756] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.511383][ T7756] bridge0: port 1(bridge_slave_0) entered forwarding state
[  694.549706][T16742] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2877'.
[  694.681997][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  694.697489][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  694.738699][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  694.776875][ T7756] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.784164][ T7756] bridge0: port 2(bridge_slave_1) entered forwarding state
[  694.908407][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  694.949904][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  695.134267][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  695.271766][ T7756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  722.161919][ T4322] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2678 jiffies s: 77085 root: 0x2/.
[  722.179714][ T4322] rcu: blocking rcu_node structures (internal RCU debug):
[  722.187430][ T4322] Sending NMI from CPU 0 to CPUs 1:
[  722.192852][    C1] NMI backtrace for cpu 1
[  722.192862][    C1] CPU: 1 PID: 16750 Comm: syz.1.2877 Not tainted syzkaller #0
[  722.192880][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  722.192897][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x60
[  722.192925][    C1] Code: 89 fb e8 17 00 00 00 48 8b 3d 50 d7 9e 0c 48 89 de 5b e9 f7 72 50 00 00 00 cc cc 00 00 cc 48 8b 04 24 65 48 8b 0d a4 2d 80 7e <65> 8b 15 a5 2d 80 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75
[  722.192940][    C1] RSP: 0018:ffffc900001e05d8 EFLAGS: 00000002
[  722.192954][    C1] RAX: ffffffff813a0076 RBX: 00000000b8f3bbb0 RCX: ffff88802d2f0000
[  722.192968][    C1] RDX: 0000000000000100 RSI: 0000000000000008 RDI: 0000000000000000
[  722.192978][    C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: 1ffffffff2162648
[  722.192990][    C1] R10: dffffc0000000000 R11: fffffbfff2162649 R12: dffffc0000000000
[  722.193004][    C1] R13: 0000000000000008 R14: ffffffff8139fec8 R15: ffff88813fff92e0
[  722.193016][    C1] FS:  00007f68eb77e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  722.193032][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  722.193044][    C1] CR2: 000055b65d008000 CR3: 000000002e527000 CR4: 00000000003506e0
[  722.193059][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  722.193069][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  722.193080][    C1] Call Trace:
[  722.193085][    C1]  <IRQ>
[  722.193090][    C1]  __virt_addr_valid+0x336/0x540
[  722.193200][    C1]  kasan_addr_to_slab+0x9/0xc0
[  722.193247][    C1]  __kasan_record_aux_stack+0xf/0xc0
[  722.193264][    C1]  irq_work_queue_on+0x10f/0x260
[  722.193315][    C1]  rcu_read_unlock_special+0x3c9/0x510
[  722.193357][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  722.193376][    C1]  ? __cant_sleep+0x220/0x220
[  722.193417][    C1]  __rcu_read_unlock+0x78/0xd0
[  722.193433][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  722.193458][    C1]  trace_call_bpf+0x5bb/0x6b0
[  722.193481][    C1]  ? trace_call_bpf+0xbf/0x6b0
[  722.193508][    C1]  ? __bpf_trace_bpf_trace_printk+0x20/0x20
[  722.193535][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  722.193551][    C1]  ? sched_clock_cpu+0x6e/0x260
[  722.193580][    C1]  perf_trace_run_bpf_submit+0x79/0x1c0
[  722.193609][    C1]  perf_trace_preemptirq_template+0x268/0x320
[  722.193656][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  722.193682][    C1]  ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0
[  722.193708][    C1]  ? __irq_exit_rcu+0x147/0x230
[  722.193746][    C1]  ? irq_exit_rcu+0x20/0x20
[  722.193764][    C1]  ? asm_sysvec_irq_work+0x16/0x20
[  722.193788][    C1]  trace_irq_enable_rcuidle+0xd3/0x140
[  722.193814][    C1]  trace_hardirqs_on+0x24/0x40
[  722.193835][    C1]  asm_sysvec_irq_work+0x16/0x20
[  722.193859][    C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510
[  722.193877][    C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 6c 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08
[  722.193897][    C1] RSP: 0018:ffffc900001e0ae0 EFLAGS: 00000206
[  722.193911][    C1] RAX: 4163bf7d3eb43e00 RBX: 1ffff9200003c164 RCX: 4163bf7d3eb43e00
[  722.193924][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf6420
[  722.193937][    C1] RBP: ffffc900001e0bd0 R08: ffffffff90b13277 R09: 1ffffffff216264e
[  722.193950][    C1] R10: dffffc0000000000 R11: fffffbfff216264f R12: 0000000000000246
[  722.193962][    C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002
[  722.193985][    C1]  ? kmem_cache_free+0x80/0x2a0
[  722.194006][    C1]  ? __rcu_read_unlock+0xd0/0xd0
[  722.194030][    C1]  __rcu_read_unlock+0x78/0xd0
[  722.194045][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170
[  722.194120][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  722.194140][    C1]  ieee80211_iterate_active_interfaces_atomic+0x156/0x170
[  722.194169][    C1]  mac80211_hwsim_beacon+0xb7/0x1b0
[  722.194198][    C1]  __hrtimer_run_queues+0x522/0xc90
[  722.194222][    C1]  ? hw_scan_work+0xf00/0xf00
[  722.194252][    C1]  ? hrtimer_interrupt+0x980/0x980
[  722.194276][    C1]  hrtimer_run_softirq+0x173/0x290
[  722.194299][    C1]  handle_softirqs+0x291/0x910
[  722.194318][    C1]  ? __irq_exit_rcu+0x13b/0x230
[  722.194337][    C1]  ? do_softirq+0x210/0x210
[  722.194351][    C1]  ? hrtimer_interrupt+0x775/0x980
[  722.194375][    C1]  __irq_exit_rcu+0x13b/0x230
[  722.194392][    C1]  ? irq_exit_rcu+0x20/0x20
[  722.194414][    C1]  irq_exit_rcu+0x5/0x20
[  722.194428][    C1]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  722.194449][    C1]  </IRQ>
[  722.194453][    C1]  <TASK>
[  722.194458][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  722.194483][    C1] RIP: 0010:release_pages+0x1c1/0x2340
[  722.194554][    C1] Code: 38 00 74 08 48 89 df e8 fd 5a 22 00 48 8b 1b 48 89 de 48 83 e6 01 31 ff e8 8c 21 d1 ff 48 89 d8 48 83 e0 01 0f 85 82 0e 00 00 <0f> 1f 44 00 00 e8 95 1d d1 ff 4d 85 ed 74 22 8b 5c 24 3c ff c3 bf
[  722.194568][    C1] RSP: 0018:ffffc900035676c0 EFLAGS: 00000246
[  722.194581][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88802d2f0000
[  722.194593][    C1] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  722.194603][    C1] RBP: ffffc900035677e8 R08: ffffea000188d4b7 R09: 1ffffd4000311a96
[  722.194615][    C1] R10: dffffc0000000000 R11: fffff94000311a97 R12: 0000000000000e10
[  722.194628][    C1] R13: 0000000000000000 R14: ffffea000188d4c0 R15: dffffc0000000000
[  722.194650][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  722.194681][    C1]  ? lru_cache_disable+0x30/0x30
[  722.194703][    C1]  ? __sanitizer_cov_trace_pc+0x45/0x60
[  722.194724][    C1]  ? free_swap_cache+0xe4/0x5c0
[  722.194791][    C1]  tlb_flush_mmu+0x105/0x220
[  722.194840][    C1]  tlb_finish_mmu+0xf0/0x220
[  722.194866][    C1]  exit_mmap+0x388/0x970
[  722.194896][    C1]  ? vm_brk+0x20/0x20
[  722.194917][    C1]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  722.194947][    C1]  ? uprobe_clear_state+0x274/0x290
[  722.194982][    C1]  __mmput+0x118/0x3a0
[  722.195021][    C1]  copy_process+0x2c46/0x4070
[  722.195038][    C1]  ? perf_trace_run_bpf_submit+0x124/0x1c0
[  722.195067][    C1]  ? perf_trace_lock+0x301/0x390
[  722.195090][    C1]  ? copy_process+0x974/0x4070
[  722.195111][    C1]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  722.195136][    C1]  ? idle_dummy+0x10/0x10
[  722.195155][    C1]  ? ktime_get+0x7b/0x270
[  722.195178][    C1]  kernel_clone+0x24b/0x900
[  722.195196][    C1]  ? hrtimer_interrupt+0x557/0x980
[  722.195216][    C1]  ? create_io_thread+0x170/0x170
[  722.195245][    C1]  __x64_sys_clone+0x1a7/0x220
[  722.195263][    C1]  ? lapic_next_event+0x5b/0x70
[  722.195314][    C1]  ? __ia32_sys_vfork+0x140/0x140
[  722.195340][    C1]  ? lock_chain_count+0x20/0x20
[  722.195362][    C1]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  722.195391][    C1]  ? lockdep_hardirqs_on+0x94/0x140
[  722.195413][    C1]  do_syscall_64+0x4c/0xa0
[  722.195436][    C1]  ? clear_bhb_loop+0x60/0xb0
[  722.195460][    C1]  ? clear_bhb_loop+0x60/0xb0
[  722.195485][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  722.195509][    C1] RIP: 0033:0x7f68ea99e159
[  722.195523][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.195537][    C1] RSP: 002b:00007f68eb77dfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038
[  722.195553][    C1] RAX: ffffffffffffffda RBX: 00007f68eac26360 RCX: 00007f68ea99e159
[  722.195566][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000
[  722.195576][    C1] RBP: 00007f68eaa3503b R08: 0000000000000000 R09: 0000000000000000
[  722.195587][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  722.195597][    C1] R13: 00007f68eac263f8 R14: 00007f68eac26360 R15: 00007ffcbb893dd8
[  722.195618][    C1]  </TASK>