last executing test programs:

35.306959794s ago: executing program 1 (id=4909):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=<r1=>0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r3, 0x0, 0x3, 0x0, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000", 0x1c}], 0x1}, 0x40000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]})
perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12932, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x4}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYRES32=r1], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(0x3)

34.957574362s ago: executing program 2 (id=4913):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0xc4)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8000000000000001)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f00)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0xffffffffffffff9b, 0x0, 0x0, 0x0, 0xbc, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000001780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001840)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0], 0x0, 0x5d, &(0x7f0000001a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xad, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d40)={0xffffffffffffffff, 0x58, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$inet(r5, &(0x7f0000001ec0)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000080)="9e8e40da701b594b0db671ff13", 0xd}, {&(0x7f0000000100)="dc642220804fa758cb0b3b86ef1c6c5cab73", 0x12}, {&(0x7f0000000280)="be178864d7e2d0ade236b8de71b208656a3e5bc5aaa63d5f21b455cc81d0f2a4992b1bda13a3a97e667aab087b98036ee507dd303a79ec3d86cf0f9ab4b02007d8e2f714e066664059284de04c8faa62aeedb979e07cdadfcf4492ab12056ac8c95da227c92ebf14adfd571ce7b18cbe9f8e162a59e6ec1c9c62155e0438a2a8015eb879a12969f5700a523c5cc3629e5e61fb34cd", 0x95}, {&(0x7f0000000340)="256bdf3c792e6f0559d50505024b21582e2f46dead6552fcdf8239d45cfc21762faf5a07b11018985d01091409d0405f19868601e9c4d593e031be5d1a97b7bf6c18326f90463825ac8812055c95d01aab10f353adac233044dd04cc54c2ab8d313bfff20ef8908858df7aecacefce530a26730fc13d7c4cdb766e20501ec4a7073b772b6a42fd3583f82dcb25fdf761b90a2c8c360c65730b30b1f010d6365a10516f24300419bd2fec68d7dd9f83f4f9b7b409b000092798a7647ebb50fac31d715443f236486f6f30344cb237e2eaa30b47f2d5d6bfbcd4f97d11cc82cdac6aa2bdd86c55937ff88f33b0ced679", 0xef}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="f123b57c87258035c9f5a0977f0f32cae16d22a0891ef6227f050ad43fd7a2af8099ec0173dea0803cfcf9e5225d30e0a7e3ee51f61ada82bb076449a6eb2f10c2e4c52cb1b3ed2f5b78d569358e07ece70a114bdd4dc9b51c880b", 0x5b}, {&(0x7f00000014c0)="9066765cc44d0ad93a924be30aa62311c9977fb12c145495dc32e56d7088ec23d85f0070c9a86d9f1043356d952917e910e6ae154849f4b6627e70cf64bc6efb06390bca325d775ef98699336aec4cc084940c111ab1062c8080e8ff24ad970b98a3041dc58e2d99fe0afa7241c95b625f255ee821dca1826960d70565f0f8bb8d5522181b320c589d9077269e21f50de9bf26c96e2da8a1a488d7", 0x9b}, {&(0x7f0000001580)="26793f1b5d7b820eac777dfe98060b3218fd5628a485b9d6deaf36249d5561c76757e1dcee39fc58ed86af1dd23f7d6e1167f3877808fbe162e6a2ac31b8643b6b0bc0ce8fce605d5665a3fd300d0f020a0a2df98e9c34c527547f43989a3f1309072df7d52a3032e7ea390b9203ffe355ebab2886800b460aa92d39c91686d350b483bfdf8fa5cb2b548019b86f6dc2f68b5ec25238cefad3c205d7b7642d9b5cb75e69a3f3f3261d74c18eee", 0xad}], 0x8, &(0x7f0000001d80)=ANY=[@ANYBLOB="280000000000000000000000070000008307c1ac141441830f16ac1414aa64010100ac14143500001400000000000000000000000100000007000000000000001400000000000000000000000100000006000000000000001400000000000000000000000100000001000080000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac1414aae0000002000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="00000000ac1414aa002f000000000000000000001400000008000000", @ANYRES32=r8, @ANYBLOB="ffffffff7f000001000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="0a010102ffffffff0000000014000000000000000000000002000000a50a000000000000140000000000000000000000010000000700000000000000"], 0x120}, 0x4)
r10 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)

34.786648806s ago: executing program 1 (id=4916):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000100000000000d020000000000000000000009020000000000"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x32e}, 0x28)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x5e5}, 0x38)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000000000000000000000ffffffffffffff7f0000000000004daa"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r0 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x4, 0x1, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922d41, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10000}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x6045978a234f60e, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

34.453627164s ago: executing program 1 (id=4918):
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e46558"], 0x280)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x154}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc)

34.426628685s ago: executing program 2 (id=4919):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x4}]}, {0x0, [0x61, 0x0, 0x61, 0x61, 0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x1, 0x7}, 0x28)
r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000fdffebff00000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="05000000050000000300"/28], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000780)='%-010d \x00'}, 0x1)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x34, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@map_val={0x18, 0x1, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ff}}, @ldst={0x2, 0x3, 0x0, 0x4, 0x1, 0xfffffffffffffff8, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2e, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bc0a, r7, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r11, 0x0, 0x1}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8, 0x8, 0x8, &(0x7f0000000300)}}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0x2, 0x2, 0x2}, 0x50)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0xfd, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5}, 0x2a10, 0x3, 0x3, 0x0, 0x400da4f, 0x2000a, 0x0, 0x0, 0xfffffff8}, 0x0, 0x3, 0xffffffffffffffff, 0x1)
r13 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf", 0x0, 0x8000, 0x9}, 0x50)
setsockopt$sock_attach_bpf(r13, 0x29, 0x23, &(0x7f0000000040), 0xcf)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540), 0x4)
r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000006000000000000000700000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf0900000000000055090100000000009500000000000000cd0a0100000000002500000001000480180000000200048000000000f4ffffffae90f8ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0xff2, &(0x7f0000001cc0)=""/4082, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)

34.360517256s ago: executing program 0 (id=4920):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50)
close(0x3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x14000, 0x0, 0x0, 0x7, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x95}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x1a, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x1f, &(0x7f0000000180)=""/31, 0xd455d0f2adb9ba32, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) (async)
close(0x3) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x28040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x2}, 0x14000, 0x0, 0x0, 0x7, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x95}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4000ff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x1a, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x1f, &(0x7f0000000180)=""/31, 0xd455d0f2adb9ba32, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) (async)

34.287405238s ago: executing program 3 (id=4921):
socket$kcm(0x10, 0x2, 0x10) (async)
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f0000000280)={&(0x7f0000000100)=""/203, 0xcb, 0x0, &(0x7f0000000200)=""/89, 0x59}}, 0x10) (async)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x10c04, 0x10000, 0x9e6, 0x7, 0xa, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10500c00", 0x33fe0}], 0x1}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async)
r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x500, 0x1000000, 0x0, 0x2, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xc7f75339a87e4a32)
socketpair(0x1, 0x1, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async)
ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x5ae)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e0000008500000050"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) (async)
socket$kcm(0x23, 0x5, 0x0) (async)
socket$kcm(0x10, 0x3, 0x10)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={&(0x7f0000000500)="1db8ef97e7c994fb26aa922a20b189486a0281f025ed317988281915744f36cc2def4c93e8cb46edeb1d53fa7eb79de28fbd82b9c9828eac28dd4d2cda837d677b478b2ebe333cc3671aa528c96410cd5d59d57bd401c03b5dc968707268e8e40f872df0ed6899dd1ac8ac0e4c3a33e6cf8a937b3b70a2a239", &(0x7f0000000580)=""/54, &(0x7f00000005c0)="1014a5d5e360e65e392613f71fa70b3a91b1c5ec0f55da1c8d528a2932f9efa9e33045d8da7ef523badb630b3600c1f8d8e39279c915fac8e3830c02481eeaf982e5343d8ee3c1b499fdb3b30fc522dd5f0eaf4935312d37143e4370cfdf98c0db332a9064aa922113de13d34c978043ea62b635668a8434a35657d2aff6063e9893f1acd495c5817cff453286e13d49a1", &(0x7f0000000680)="54934ea007ce8051449cfd", 0x0, r1, 0x4}, 0x38) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000040)=@base={0xa, 0x16, 0x800, 0x7f, 0x0, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc00d100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

34.17521153s ago: executing program 0 (id=4922):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffca7, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0xff, 0x9, 0x0, 0x0, 0x3, 0x50066, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x8400, 0xfffffffffffffffb, 0x6, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0x10000, 0x0, 0xdc}, 0x0, 0x6, 0xffffffffffffffff, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700110005"], 0xfe33) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async)
syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0)

34.17297685s ago: executing program 2 (id=4923):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r2, 0x0, 0x3, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000", 0x1c}], 0x1}, 0x40000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0xac}, {0x16}]})
perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12932, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x4}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(0x3)

34.097680132s ago: executing program 3 (id=4924):
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x11b, 0x6, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, <r2=>0xffffffffffffffff}, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041)
close(r4)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
socket$kcm(0x10, 0x2, 0x4)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000040)
socket$kcm(0x10, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80)
r6 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r7)
r8 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004091)
write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0xfffffeff)
close(r3)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x13, 0x0, &(0x7f0000000180)="5486bbac43bbf8e44dcdd0e6b689f0ca471909", 0xfffffffffffffffd, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe14}, 0x1f)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x0, &(0x7f00000006c0)="9daaac999f69c48373a1ee570000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000540)=""/246, 0x36, 0xf6, 0x1}, 0x28)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x4000, r11}, 0x18)

33.899106007s ago: executing program 3 (id=4925):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r2, 0x0, 0x3, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000", 0x1c}], 0x1}, 0x40000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f00000001c0)=0xe)
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x0, 0x7f}, {0x6, 0x80, 0x1, 0xfffffffe}, {0x9, 0x7, 0xdf, 0x8004}]})
perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12932, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x1}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21305, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000000c0)='cpu\t>0\xff&\t')

32.287185436s ago: executing program 0 (id=4926):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000100000000000d020000000000000000000009020000000000"], &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0xa, 0x32e}, 0x28)
socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x5e5}, 0x38)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000000000000000000000ffffffffffffff7f0000000000004daa"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50)
r0 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={0x0, 0x4}, 0x4846, 0x0, 0x0, 0x4, 0x1, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x20)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922d41, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10000}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x6045978a234f60e, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x9)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t')
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))

32.286707006s ago: executing program 1 (id=4927):
r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$kcm(0x2b, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x10, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0xc4)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x8000000000000001)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x336)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f00)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb, 0x0, 0x0, 0xffffffffffffff9b, 0x0, 0x0, 0x0, 0xbc, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000001780)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001840)}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r8=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000001a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0], 0x0, 0x5d, &(0x7f0000001a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xad, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d40)={0xffffffffffffffff, 0x58, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0}}, 0x10)
sendmsg$inet(r5, &(0x7f0000001ec0)={&(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000080)="9e8e40da701b594b0db671ff13", 0xd}, {&(0x7f0000000100)="dc642220804fa758cb0b3b86ef1c6c5cab73", 0x12}, {&(0x7f0000000280)="be178864d7e2d0ade236b8de71b208656a3e5bc5aaa63d5f21b455cc81d0f2a4992b1bda13a3a97e667aab087b98036ee507dd303a79ec3d86cf0f9ab4b02007d8e2f714e066664059284de04c8faa62aeedb979e07cdadfcf4492ab12056ac8c95da227c92ebf14adfd571ce7b18cbe9f8e162a59e6ec1c9c62155e0438a2a8015eb879a12969f5700a523c5cc3629e5e61fb34cd", 0x95}, {&(0x7f0000000340)="256bdf3c792e6f0559d50505024b21582e2f46dead6552fcdf8239d45cfc21762faf5a07b11018985d01091409d0405f19868601e9c4d593e031be5d1a97b7bf6c18326f90463825ac8812055c95d01aab10f353adac233044dd04cc54c2ab8d313bfff20ef8908858df7aecacefce530a26730fc13d7c4cdb766e20501ec4a7073b772b6a42fd3583f82dcb25fdf761b90a2c8c360c65730b30b1f010d6365a10516f24300419bd2fec68d7dd9f83f4f9b7b409b000092798a7647ebb50fac31d715443f236486f6f30344cb237e2eaa30b47f2d5d6bfbcd4f97d11cc82cdac6aa2bdd86c55937ff88f33b0ced679", 0xef}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="f123b57c87258035c9f5a0977f0f32cae16d22a0891ef6227f050ad43fd7a2af8099ec0173dea0803cfcf9e5225d30e0a7e3ee51f61ada82bb076449a6eb2f10c2e4c52cb1b3ed2f5b78d569358e07ece70a114bdd4dc9b51c880b", 0x5b}, {&(0x7f00000014c0)="9066765cc44d0ad93a924be30aa62311c9977fb12c145495dc32e56d7088ec23d85f0070c9a86d9f1043356d952917e910e6ae154849f4b6627e70cf64bc6efb06390bca325d775ef98699336aec4cc084940c111ab1062c8080e8ff24ad970b98a3041dc58e2d99fe0afa7241c95b625f255ee821dca1826960d70565f0f8bb8d5522181b320c589d9077269e21f50de9bf26c96e2da8a1a488d7", 0x9b}, {&(0x7f0000001580)="26793f1b5d7b820eac777dfe98060b3218fd5628a485b9d6deaf36249d5561c76757e1dcee39fc58ed86af1dd23f7d6e1167f3877808fbe162e6a2ac31b8643b6b0bc0ce8fce605d5665a3fd300d0f020a0a2df98e9c34c527547f43989a3f1309072df7d52a3032e7ea390b9203ffe355ebab2886800b460aa92d39c91686d350b483bfdf8fa5cb2b548019b86f6dc2f68b5ec25238cefad3c205d7b7642d9b5cb75e69a3f3f3261d74c18eee", 0xad}], 0x8, &(0x7f0000001d80)=ANY=[@ANYBLOB="280000000000000000000000070000008307c1ac141441830f16ac1414aa64010100ac14143500001400000000000000000000000100000007000000000000001400000000000000000000000100000006000000000000001400000000000000000000000100000001000080000000001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="ac1414aae0000002000000001c000000000000000000000008000000", @ANYRES32=r7, @ANYBLOB="00000000ac1414aa002f000000000000000000001400000008000000", @ANYRES32=r8, @ANYBLOB="ffffffff7f000001000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="0a010102ffffffff0000000014000000000000000000000002000000a50a000000000000140000000000000000000000010000000700000000000000"], 0x120}, 0x4)
r10 = socket$kcm(0x1e, 0x5, 0x0)
sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0)

32.228652467s ago: executing program 2 (id=4928):
socket$kcm(0x2a, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x109002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'ipvlan0\x00', 0x2000})
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r1, 0x84, 0x72, &(0x7f0000000000), 0xc)
r2 = socket$kcm(0x2, 0x3, 0x106)
sendmsg$inet(r2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x5000)
r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x59, 0x2, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x107, 0x2, &(0x7f00000000c0), 0x10)
r7 = socket$kcm(0x2c, 0x3, 0x0)
r8 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$kcm(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002000000000000", @ANYRES32, @ANYBLOB="020000000000000368042c52059501", @ANYRESHEX], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x890b, &(0x7f0000000100))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

32.199049818s ago: executing program 3 (id=4929):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0xc8}, 0x94)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f00000003c0)={0x5, 0x80, 0x94, 0x0, 0x9, 0x8, 0x0, 0x948d, 0x4000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8, 0x7}, 0x11a881, 0x7, 0x101, 0x2, 0x7fffffffffffffff, 0x3, 0x9, 0x0, 0xb9, 0x0, 0xffffffffffffffff}, r1, 0x0, r0, 0x1)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='+Bpu '], 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x10, 0x4, 0xfffffc01, 0x8000, 0xffffffffffffffff, 0x95, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x1, @value=r3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007200000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7e5000008000000b704000000000000850000000100000095e65bc7fb5f9bfae60434907b76388ae3f55cb98e828389cd6281be65370bcae50ede365938814962f7fc507fda33cab9e0c6cb7b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)='%ps    \x00'}, 0x20)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x407fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48)
openat$tun(0xffffffffffffff9c, &(0x7f0000002640), 0x82000, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0))
close(0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x800}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080))

32.090030741s ago: executing program 0 (id=4930):
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000140)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000006111140000000000040000000000000095000000000000001abe5201462857a3db65e291772afa2114f5963ed660b870d974d2252829f8290f8d02e3b0096b3df3e6585851cb7efb50a982b66e14716ffe33a164c3d1ff5798fc4bd6d3e5ab096e9ad743eb00"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d43, 0x10, &(0x7f0000000000), 0x76}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc54}, 0x94)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4, <r5=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, <r6=>0xffffffffffffffff}, &(0x7f0000000040)=0x2, 0x0}, 0x20)
perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000000)=0x2000000, &(0x7f0000000340)}, 0x20)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003f40)=@base={0x1f, 0x9, 0x80000000, 0xfffffff9, 0x20200, r3, 0xef4, '\x00', 0x0, r3, 0x4, 0x3, 0x3}, 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003fc0)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x17, &(0x7f0000000640)=@raw=[@jmp={0x5, 0x1, 0x7, 0x6, 0x3, 0xffffffffffffffff, 0x1}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], &(0x7f0000000740)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002f00)=""/4096, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003f00)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000004040)=[r2, r0, r2, r6, r8, r9, r5], &(0x7f0000004080)=[{0x1, 0x2, 0x6, 0x7}, {0x0, 0x5, 0x4}], 0x10, 0x40}, 0x94)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xc, 0x3, 0x7, 0xc1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r10, &(0x7f0000000080)="d510e438881c", 0x0}, 0x20)
sendmsg$inet(r7, 0x0, 0x30004001)
socket$kcm(0x10, 0x3, 0x10)

31.863977276s ago: executing program 2 (id=4931):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209002100000004", 0x2f}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e1209002100000004", 0x2f}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000fc0)}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

31.744412829s ago: executing program 0 (id=4932):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0xce, &(0x7f0000000080)=""/206, 0x40f00, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xd, 0x7, 0x80}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{0x1, 0x3, 0xf, 0x3}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xbb, 0x49, &(0x7f0000000300)="58a00b8d9bc5ecc22a9b7811db663fc3ba62d039484693ca37a60dcabd3ac112237b155f82cff97db0dfbece5f59455e52b084b96f02eec369f3c5864af17ca7c39c9b2fd53f98436120d7b31526934e7aaa357ebe08aac00587a7b1aaf84578d2b3816ac31049d5505b54edc271627f8ddd5ced92bd558d999d8750fb9a627d0171d7d98c4d035f99caa900b6ab138e899a2938c489ff7fc1a8a5bfbcd7c784a95a422163c1f286bdb8716b2b25db079dd83d59e9c5d621a179c4", &(0x7f00000003c0)=""/73, 0xff2, 0x0, 0xea, 0xbe, &(0x7f0000000440)="203c8ce8642becc0407b17d42f9aecdc20d8a5f3e623a73ed31eb177f819889ed10442599c15b569c806a7d91752effea8ceea73d814eb633924becc34b68b436909ecb259ad828869022e74d86d56cc3a82bd59e960a957308cada3f97db1e3cec958254aee5a0a50306788e0fcf8c9f3084cade3ecc19464fe40f9e8be167853c36d4447eccdc1d9af8cab8d36bede417dff9dc524b3286f827be67011b00cd0bebf7272a97ee907e9ac5641f181d647928689a4d0279dd18b50513dbb048cdaddd6415c4e8095f363d51bc803a0baa2f6fb9432ca4af92367797cc9b6397dda6f9cd090887d60624e", &(0x7f0000000540)="866933d02fe589e85ac987d82cf957aa7f5174b717dae148c9734eb87cb1e4a988dacb247cf3e291058208c7f88cb18a7f1ef50e0cde8f3310201b3f12f996c50fe7aca39e21f9ae4282af96245a640cb34fa6add1ec378a81896568804d5500a0db7f28dc6b34d5e74c9fd6d3140e800af400a8f2d04c26cdc5753907ff3c828f41908309db5d9e6dab87e86d4854683620c56a7758fa73d3188fa01a2e2242feb4a8b83b917b6819a82562e43c287079f8e87aba8eda0305e86d8a40bb", 0x0, 0x0, 0x400}, 0x50) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001780)={0x10, <r1=>0x0}, 0x8) (async)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000017c0)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x10, 0x8, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffb}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x3a}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x7}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001740)={0x5, 0x10, 0x81, 0x4}, 0x10, r1, r0, 0x6, &(0x7f0000001840)=[0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000001880)=[{0x3, 0x5, 0x6, 0xb}, {0x4, 0x5, 0x7, 0x9}, {0x2, 0x4, 0x5, 0xc}, {0x2, 0x4}, {0x4, 0x3, 0xe, 0x4}, {0x1, 0x4, 0xb}], 0x10, 0x9}, 0x94)
ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f00000019c0)={r3})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a00)={0x3, <r4=>0x0}, 0x8)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a40)=r4, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001bc0)={r5, 0x20, &(0x7f0000001b80)={&(0x7f0000001a80)=""/120, 0x78, <r6=>0x0, &(0x7f0000001b00)=""/87, 0x57}}, 0x10) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f0000001c00)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001e00)=[{&(0x7f0000001c40)="8143063db8d1b0b6bf11baf5036c98e9f45313f6ffe29b808d75b297c49fd102b4e603b44d6afa1dd9c3d1758a78e53b9eda1f89c7ee263a833a450023961ff9756645816e6ab48d68a140178f267b1a200f604ce370da93fc2718ea341fada6b1922b32135c0ec2694dc5b525fcb531e8aa99d901b9420fb41b751edb78c904e26c59261d33248640a1c6ace8", 0x8d}, {&(0x7f0000001d00)="ef6036b22195a9adfa91aca89c36022574db83c7860c872c08b39d1a4074c96c3f068087d4410515a31d768d9e43115854f26e7db20c5a70804b3324336ddcd1574bfa407b7a8af1f39b3c823f7557660e4027d06668cb71cecff00e6ac67e32b831eb86af777cf65a25fc69ed6d60b6f8d9bdc1a600a8ee5244135c5b5fccdeead8fb", 0x83}, {&(0x7f0000001dc0)="e6ba03de9a05168b41152d1e35e8e81e55977e0e2de8f78eba671714", 0x1c}], 0x3}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r3, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f00)=[0x0, 0x0], 0x0, 0xa8, &(0x7f0000001f40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000021c0)={r8}) (async)
r9 = gettid()
perf_event_open(&(0x7f0000002200)={0x1, 0x80, 0x0, 0xc, 0x1, 0xd8, 0x0, 0x9d8, 0x2208ac36a993cf33, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf221, 0x4, @perf_config_ext={0x5, 0x4}, 0x200, 0x8, 0x9, 0x6, 0x7, 0x5, 0x5, 0x0, 0x96b5, 0x0, 0x10000}, r9, 0x4, r3, 0x2) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000024c0)={r3, 0x0, 0x77, 0x16, &(0x7f0000002280)="034d5c6e8d758acb5f155b5b31469eb9411de0c0405b5800d30d0ca712af9c31d281d8931630adfc1d5b9cde32b8dfbf1f7c00d1f565bb767f9b5cdb3245bbf5cb0e15618ca85a21e72d062180c91bad64c100f44163e778cd546dfb5506c1ec923bff56b91f14dc132b08bd483c44df7e03b4aaa3afab", &(0x7f0000002300)=""/22, 0xc8e, 0x0, 0x46, 0xe2, &(0x7f0000002340)="2affbecfc3c5e783c53833ca4a75a485cd487661685f9bd9a9740347789cf0b8f80ad01345f90868473a0873306da7da0b4098689a1e89a4ebf5c0f1857138bcdc9e6281beb3", &(0x7f00000023c0)="f74ed643a37dd871b4b49f0b5af254c97fc50146ea731f85a429f6f2079327c1afac9a1d06088d6ba8ecbe02ce303d8f8ca46808499715601191bc98ced73506209e38f53f63b905ea6857028a52702184988fff68b799bbad346eb40af841db143bbd5192912eae34b688888271834083667ee70e40b0a145682c0871c8ca0949125630a4f2dcf1c65bc7df0d5c274b5e877107187a2e458d9ada45ff9db0578058bbf0e54d196098c6e2daaf4c674816ed432c439eaae4cefb2187a86b53b613f4fd76c495a3aeb0aa69966fed4a9032752464d6ea969e7624bb649d366fe2631c", 0x1, 0x0, 0x4}, 0x50) (async)
r10 = perf_event_open$cgroup(&(0x7f0000002540)={0x5, 0x80, 0x6, 0x7f, 0x8, 0x5, 0x0, 0xffff, 0x5010, 0xd, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa, 0x4, @perf_config_ext={0xc, 0x7}, 0x4024, 0xc, 0xfffffffb, 0x1, 0x8, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x1000}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8)
ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x0) (async)
mkdir(&(0x7f00000025c0)='./file0\x00', 0x48)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000002600)={0x2, 0x80, 0x85, 0x1, 0x53, 0x9, 0x0, 0x5, 0x10000, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x5, 0x8}, 0x420, 0x2, 0xfffffebd, 0x3, 0x0, 0xfffffffd, 0x8001, 0x0, 0x2, 0x0, 0xfffffffffffffffd}) (async)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002680)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r11, &(0x7f00000026c0)='memory.swap.max\x00', 0x2, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000002700)=@tipc=@id, 0x80, &(0x7f0000002b80)=[{&(0x7f0000002780)}, {&(0x7f00000027c0)=""/203, 0xcb}, {&(0x7f00000028c0)=""/174, 0xae}, {&(0x7f0000002980)=""/71, 0x47}, {&(0x7f0000002a00)=""/93, 0x5d}, {&(0x7f0000002a80)=""/189, 0xbd}, {&(0x7f0000002b40)=""/8, 0x8}], 0x7, &(0x7f0000002c00)=""/28, 0x1c}, 0x2000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x20, 0x19, &(0x7f0000002c80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x4, 0x9, 0x5, 0x102, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x8f675b095bae804f}}}, &(0x7f0000002d80)='GPL\x00', 0x82eb, 0x2d, &(0x7f0000002dc0)=""/45, 0x41000, 0x65, '\x00', r7, @netfilter=0x2d, r5, 0x8, &(0x7f0000002e00)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000002e40)=[{0x2, 0x2, 0x4, 0x8}], 0x10, 0x3}, 0x94) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002fc0)={r2, 0x58, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r12=>0x0}}, 0x10) (async)
r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003000)=r6, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003040)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x80, '\x00', r12, r13, 0x2, 0x5, 0x1}, 0x50) (async)
openat$cgroup_subtree(r11, &(0x7f00000030c0), 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003100)='cgroup.kill\x00', 0x0, 0x0)

31.69392293s ago: executing program 2 (id=4933):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x80)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f00000002c0)})
ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x5)
sendmsg$tipc(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c4}, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x120c9, 0x32, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

31.67615734s ago: executing program 1 (id=4934):
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x48000)
perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100))
r2 = socket$kcm(0x2, 0x5, 0x84)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="6709ae90cf464f10eae900fa9de6674db0626b53ac200026e0063ba6adafd9cc8568c8933aa02099db640f99945382e5d531e922791615a949d4b0749ca05fbe8f4dd159f078112bd2852c1ff79afd2b127de39d905bf80098149b041844b8f8f7af21aa4d90d05958e43b59e274238c87feb9073fc24677c2bc51bbda6b1b7b96f907972b62fbb4bd11b50fb0cbad221043fb56f8", 0x95}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x7, &(0x7f00000007c0), 0x4)
sendmsg$inet(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="9b", 0x1}], 0x1}, 0x4000051)

31.67536409s ago: executing program 3 (id=4935):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x400}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="ed88e821918dc051f53c0af6d31f8c5adf2001718153846ae73505ff362f4db0e61433ffc64e68a514d6e2d5495fffbfc02c8dc5d987aab27f7aa647dd812d66f4348b8f2a658ddc1886240bfe2bcc130849abbd3d44a1ab456c3fea633edf03ca52bb93e55a383430d8c481a82eff3ed2630dbbccc52c6ff6cde4fea174d0f785e82691943ac9a1ca9483ee519c190054bf331d1c", 0x95}, {&(0x7f00000001c0)="cbb17120917420a69b0033626883d40c1909704ca6a845fb1eed63924280792f7760cc3b9e51bdab61e1e982105109be22aaeebbcf87a9ee49375d8298dbaa1e2b7790a81251838fc42e22c417694259ffebb127960f8c9dc3bc40cc608cc6b2abad27680dcdb7d237f3a51069b154c4df8ba76b5b78f8ef99d4e5c92431cc81ec3853c1aa6070ebfa8a3e81673d1b92a1323f4fde552a0438e4ea57077a9a7452da0b29456f07fa765f9df5df25438f229f0d87052e2be4dd9beb5f589bfe38fce12c3f5331903d62389a4e50690762e54c8e4d8e3d16ca7ea64bea", 0xdc}, {&(0x7f00000002c0)="8d3058e22aea7f67fef5a14e10503daed1e10cb5267319c0c4862a45507ee826f1b4ce864f788030ad5cdeb911582d6d0f5a5fe791adf3f330da11bb287e823c02fe656d3e5182ad0ed0b0e795757a4b653791855c47cafedbce6ef48f4f39dc128f5492687e46a7d3d26034312621e706f54fd121cc6f7508e73e3b79bc894cc5a2754daae9e1cde9cfbad2a3807e2f65b4bc276d990146887b0b6aea39aabc910ac0f9f403afbf4d3478996fcfd917143679844c42da9c593c6394c1fe315c587c8c7e0f79de1e6f2c6ed744df9861c44c7707467259ff32a4311a89a88f90780710305a9795c3196c", 0xea}, {&(0x7f00000003c0)="ec19edf37406d8ff5fe08c705d64a91ca1d5d4ee97ea4cc47cdbeefddeb1a612394715ff64132e2b8aea3f282b83662897fbef2e4b875492a8a080b5f911ba70b60bc43f77d9d9857b459338f7079bf655f9d8b27b99494ad08df6be8395a5a183b7b76cdbc2e7156d51c18071dd6bb35ba1e941331c9026d018c283", 0x7c}, {&(0x7f0000000440)="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", 0xff}, {&(0x7f0000000540)}, {&(0x7f0000000580)="4de843034090dc49ae0a467e71f00a8f752e62bc643544a3da4c18d57d11715812a0f81d55891eef23c4431f26399494cc3c511276003dae9dbec8c28f6e5ee5384add4091bd327b165ef3deb41955f832ce60fa0e23817069b9c321533280ee915de8ee0613ce519ec3d7e53577062ed191d89ef6ecef4b9cff10bab6000bffc999e179165bb2a7438f347b2ef78e5e30fca37e3b92ddb9d488c15fbbc5cdd153b0140a5dfc2908ea8f5de442b715e4039fe6b30938160b94b90de846ef9708dfe1b7aecd9ac389e7a152", 0xcb}, {&(0x7f0000000680)="539222feb4a6ef84edf1230e615d2cfaa7b8c7f9a3780d437ce15a1aaef7c1354bf4a84bce63b276e436250be1b9cc276da9faf4e977bcd4fc7b3988e886b6e138bf52a27beba3c046d65a687bfc8a353081684fb3dd02f86e3bab75426ecf56c3edf25bebc8aa4c47a185c866c7d6dda56f56b352bf633881ae8c0871236478b09101c871ad585440f77116e6bdf78fc0fc0b75b26592551f1476e70a668351e5385401c07edc1c25d76c4066d377cbddd54193852acdd4d9c67ee91333b464a7d181c260a0cfc3041c0bd10a70bd97d5ca56acc41f2cd89b624bcfba", 0xdd}, {&(0x7f0000000780)="0758987547b2d0c75cb066123a8724cd135912b7b405b9851a4378cff1de8f91fb097cbff7ccd8f9d2e9d328258d1e2a4e56409d8a873574e1dc43b3f00e16c7d4d3808e7c0348d9ca767d402b08b529ab6ccbe375e80b929cc6fe2eb96e8c888e471936678409a18a8444b2ce356141f3061861fb3cbe281d97bacb7b87b0cef55125817c6be985eedfcd0161a3cb2b14c2f7d93273af02c0ac70064d77351bc46b2d4385e893b3efa36e7ac4632dd743fe7a44", 0xb4}], 0x9, &(0x7f0000000900)=[{0x40, 0x11, 0x6e, "6e32179bd6f9f9608fbc8777f5aaf7d94d1e1607fa0c499cb05f8c0c0b5fa91293a6fc2b0a82768546ac"}, {0x70, 0x1, 0x8, "023f1b7affafbf89138f0799b7a6d343ad48041c0ef10e3e59a299b681644dc69f19fb733df870fe2bfbe4eaea55abf1a9d1b742888aa7df9b91c5a25e380e288ba0157907a35385ad897e52e31cc619132eb6640512acd3e398288395"}, {0x80, 0x117, 0x5, "bfca0eae0cb1967e20229d31800c16005d24916d29d0e5351ecc2b712697d3a513b5d41605cc07eac1ac1940a61b29a7815886bd4ac9fa8aae656648f97cf922d9161fbd0ec53de5ea9438e6b852bf1a9fa2c4be5f16ba42bd902f292b57017b44659796a0f62f7071840bf857"}, {0x20, 0x112, 0xa, "0912a46fa3fd8cde3be29d53c415c9"}, {0xc8, 0x10c, 0x2, "5c65520a34acb90e7ff769101b52a54aa88c0b5b469ef9b13161bda74f4a0f9b7d4c1d382862c1bfeb267575602392f79a76ff4069eb77863bda116f3bdc013d777015237fca704fa056bc3e0c866c128802ff08d12ca7ace7847861ea5a78e02a1702499eb47579851e11eb61db3c319eca476aa15c2248c74062493ad2242066c0b750043b65160071eaa692592d0d2d209dbe2ff1b6ff9a4b25f2cf610b14b48f533d5fa2885df3972a406e562b074cc6cc4264"}, {0x100, 0x113, 0xfffffff8, "a083ad4977875a371472c14ca22deaddf5c79ac3e4471474dbfa8d62bd386baff79c33ee988e1cc6c4d20565ed8330a90a024935b9fee9e0a5d147c9b8f2feda778638c4cb23fc0d975f7aad512e1ea8f8e24ee6bd24502889445a96e85f51208e753d4a91e38dfb68c7b96ba96e803a09af64b80f215c224fa8aeed6b0a1b6b44b88d073b753413369b671e7b9b8514d01d6d412d0241f6954cf85e52556687718bf45d0a114722ab974301747a621297d1ea46f6e7b89288772c50440374f3b202180d09ba579686bfb0617436b70f0bbc6ca9fad5f2a89f8a19ca41241fd06c652ec549d0062f063e9f"}, {0x60, 0x84, 0x3, "8d58ec630644fe24077eae9de5a0ccb4462de2beac9244795a348f9c3702ce6b14b9db432b731f71349b13aedafcb99010b93b0baf9fa018914f707bfe87f49ab2cec3e2ed7987bd74407a73048df89b"}], 0x378}, 0x800) (async)
close(r0)
socket$kcm(0x10, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080))

31.551039513s ago: executing program 0 (id=4936):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r2, 0x0, 0x3, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000", 0x1c}], 0x1}, 0x40000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0xac}, {0x6, 0x0, 0x0, 0x600}]})
perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12932, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x4}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(0x3)

31.550449553s ago: executing program 3 (id=4937):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r4, 0x0, 0x3, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000", 0x1c}], 0x1}, 0x40000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='/dev/net/tun\x00')
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]})
perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12932, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x4}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(0x3)

16.526600034s ago: executing program 32 (id=4933):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
socket$kcm(0x10, 0x2, 0x4)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x80)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480))
ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0)
close(r3)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x0, &(0x7f00000002c0)})
ioctl$TUNGETVNETLE(r3, 0x40107446, &(0x7f0000000180))
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0x9)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18)
sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x5)
sendmsg$tipc(r1, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c4}, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x120c9, 0x32, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)

15.561814157s ago: executing program 33 (id=4936):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r2, 0x0, 0x3, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000", 0x1c}], 0x1}, 0x40000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0xac}, {0x6, 0x0, 0x0, 0x600}]})
perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12932, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x4}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(0x3)

15.42625805s ago: executing program 1 (id=4940):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
r6 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r6, &(0x7f0000000f00)={&(0x7f0000000f40)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x2b}}], 0x18}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r0, r4, 0x0, r4}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979e29857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37ceff9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734f87da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bbf8ab9c691841ab0931d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f080091c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efde0142cf90ff668b9757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c2f56855b18f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000774c"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000ff802f008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{}, [@printk={@lx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083909000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086dd673d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4000084)

15.360712532s ago: executing program 34 (id=4937):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="7993ff01190000e5ffa53b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x2, 0x200000000000003, 0x106)
setsockopt$sock_attach_bpf(r4, 0x0, 0x3, 0x0, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d00000000010000", 0x1c}], 0x1}, 0x40000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='/dev/net/tun\x00')
ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0xac}, {0x6}]})
perf_event_open$cgroup(&(0x7f00000000c0)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12932, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x4}, 0x102cc, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
close(0x3)

0s ago: executing program 35 (id=4940):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90)
close(r3)
recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r5=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48)
r6 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$sock(r6, &(0x7f0000000f00)={&(0x7f0000000f40)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x2b}}], 0x18}, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000002c0)={r0, r4, 0x0, r4}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000ff802f008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{}, [@printk={@lx, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083909000000000000a1180015000600142603600e1209002100ff000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134c76ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9acbb1086dd673d809d5e1cace81ed0bffece0b42a9ecbee5de6ccbb0dd6e4edef3d93452a9295", 0xd8}], 0x1}, 0x4000084)

kernel console output (not intermixed with test programs):

as an invalid length.
[  629.907558][T17094] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3263'.
[  629.923558][T17094] ipvlan1: entered promiscuous mode
[  629.938132][T17094] ipvlan1: entered allmulticast mode
[  629.944508][T17094] veth0_vlan: entered allmulticast mode
[  630.010347][T17094] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  630.453552][T17107] netlink: 'syz.3.3269': attribute type 2 has an invalid length.
[  630.481467][T17107] netlink: 'syz.3.3269': attribute type 8 has an invalid length.
[  630.501027][T17107] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3269'.
[  630.605861][T17107] tun0: tun_chr_ioctl cmd 1074025681
[  630.837100][T17116] netlink: 'syz.0.3271': attribute type 21 has an invalid length.
[  630.852569][T17116] IPv6: NLM_F_CREATE should be specified when creating new route
[  631.342769][T17137] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3278'.
[  631.375209][T17137] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  631.607591][ T5082] Bluetooth: hci1: command 0x0406 tx timeout
[  631.749728][T17160] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3285'.
[  631.769025][T17161] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3285'.
[  632.289387][T17182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3293'.
[  632.398166][T17182] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3293'.
[  633.471650][T17217] validate_nla: 7 callbacks suppressed
[  633.471667][T17217] netlink: 'syz.0.3305': attribute type 21 has an invalid length.
[  633.485690][T17217] __nla_validate_parse: 4 callbacks suppressed
[  633.485709][T17217] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3305'.
[  636.365983][T17258] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3316'.
[  636.576210][T17272] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3322'.
[  636.627936][T17270] netlink: 'syz.1.3321': attribute type 10 has an invalid length.
[  636.732571][T17270] team0: Device wg1 is of different type
[  636.783606][T17276] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3324'.
[  636.805312][T17277] netlink: 'syz.2.3324': attribute type 10 has an invalid length.
[  636.813780][T17277] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3324'.
[  637.146858][T17289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3330'.
[  637.171459][T17289] netlink: 'syz.3.3330': attribute type 12 has an invalid length.
[  637.188528][T17289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3330'.
[  637.279805][T17297] netlink: 193896 bytes leftover after parsing attributes in process `syz.0.3329'.
[  638.306071][T17325] netlink: 'syz.1.3340': attribute type 3 has an invalid length.
[  638.315420][T17332] netlink: 'syz.3.3342': attribute type 13 has an invalid length.
[  638.323273][T17332] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.3342'.
[  638.343562][T17325] netlink: 'syz.1.3340': attribute type 6 has an invalid length.
[  638.353677][T17325] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.3340'.
[  638.363915][T17333] netlink: 'syz.3.3342': attribute type 13 has an invalid length.
[  638.539145][T17339] __nla_validate_parse: 1 callbacks suppressed
[  638.539160][T17339] netlink: 16390 bytes leftover after parsing attributes in process `syz.3.3345'.
[  639.645315][T17367] netlink: 'syz.3.3354': attribute type 4 has an invalid length.
[  639.658309][T17367] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3354'.
[  640.124302][T17381] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  640.511184][T17395] netlink: 'syz.0.3363': attribute type 7 has an invalid length.
[  640.536312][T17395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3363'.
[  640.765919][T17402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  641.835121][ T5082] Bluetooth: hci3: command 0x0406 tx timeout
[  641.880414][T17433] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3375'.
[  642.054484][T17433] netlink: 'syz.1.3375': attribute type 2 has an invalid length.
[  642.071120][T17433] netlink: 'syz.1.3375': attribute type 1 has an invalid length.
[  642.088275][T17433] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3375'.
[  642.711462][T17460] netlink: 'syz.0.3383': attribute type 19 has an invalid length.
[  642.720464][T17460] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  642.959339][T17470] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3387'.
[  643.241206][T17486] netlink: 'syz.3.3392': attribute type 9 has an invalid length.
[  643.254591][T17486] netlink: 'syz.3.3392': attribute type 23 has an invalid length.
[  643.262957][T17486] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.3392'.
[  643.444075][T17488] mac80211_hwsim hwsim39 wlan0: left promiscuous mode
[  643.455355][T17488] mac80211_hwsim hwsim39 wlan0: left allmulticast mode
[  643.500759][T17492] netlink: 'syz.3.3395': attribute type 1 has an invalid length.
[  643.509030][T17492] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3395'.
[  645.580774][T17580] netlink: 'syz.1.3420': attribute type 2 has an invalid length.
[  645.593206][T17580] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3420'.
[  646.636100][T17612] netlink: 'syz.0.3431': attribute type 4 has an invalid length.
[  646.644547][T17612] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3431'.
[  647.645169][T17653] netlink: 'syz.3.3445': attribute type 12 has an invalid length.
[  647.675117][T17653] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3445'.
[  649.023207][T17699] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.3455'.
[  649.181589][T17704] netlink: 'syz.1.3458': attribute type 10 has an invalid length.
[  649.389371][T17704] team0 (unregistering): Port device team_slave_1 removed
[  649.405271][T17704] team0 (unregistering): Port device wlan1 removed
[  649.449547][T17692] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3452'.
[  649.459412][T17692] bridge_slave_1: default FDB implementation only supports local addresses
[  649.715773][T17717] netlink: 'syz.2.3461': attribute type 3 has an invalid length.
[  649.724192][T17717] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3461'.
[  651.817319][T17766] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3477'.
[  651.842762][T17770] netlink: 'syz.1.3479': attribute type 1 has an invalid length.
[  651.862138][T17770] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.3479'.
[  652.613995][T17791] netlink: 'syz.2.3484': attribute type 21 has an invalid length.
[  652.633920][T17791] netlink: 'syz.2.3484': attribute type 12 has an invalid length.
[  652.649449][T17791] netlink: 'syz.2.3484': attribute type 13 has an invalid length.
[  652.668048][T17791] netlink: 'syz.2.3484': attribute type 14 has an invalid length.
[  652.697312][T17791] netlink: 'syz.2.3484': attribute type 15 has an invalid length.
[  652.725060][T17791] netlink: 'syz.2.3484': attribute type 16 has an invalid length.
[  652.733164][T17791] netlink: 'syz.2.3484': attribute type 21 has an invalid length.
[  652.742021][T17791] netlink: 'syz.2.3484': attribute type 22 has an invalid length.
[  652.755874][T17791] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.3484'.
[  652.778220][T17794] delete_channel: no stack
[  653.771838][T17834] delete_channel: no stack
[  653.831845][T17837] netlink: 'syz.3.3496': attribute type 1 has an invalid length.
[  653.850672][T17837] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3496'.
[  656.875738][T17891] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3513'.
[  657.968114][T17918] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.3517'.
[  658.338828][T17926] validate_nla: 3 callbacks suppressed
[  658.338846][T17926] netlink: 'syz.2.3520': attribute type 3 has an invalid length.
[  658.389302][T17926] netlink: 'syz.2.3520': attribute type 16 has an invalid length.
[  658.415912][T17926] netlink: 'syz.2.3520': attribute type 18 has an invalid length.
[  658.444715][T17926] netlink: 'syz.2.3520': attribute type 20 has an invalid length.
[  658.475508][T17926] netlink: 'syz.2.3520': attribute type 25 has an invalid length.
[  658.476098][T17927] netlink: 'syz.2.3520': attribute type 10 has an invalid length.
[  658.565722][T17927] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  658.577953][T17927] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  661.209382][T17968] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3531'.
[  661.235162][T17968] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3531'.
[  661.274161][T17960] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3531'.
[  661.330407][T17968] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3531'.
[  661.404502][T17960] netlink: 'syz.0.3531': attribute type 10 has an invalid length.
[  661.465131][T17960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3531'.
[  661.500682][T17960] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  663.791521][T18005] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3546'.
[  664.836423][T18028] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.3552'.
[  664.941385][T18028] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.3552'.
[  665.676867][T18038] syzkaller0: entered promiscuous mode
[  665.682446][T18038] syzkaller0: entered allmulticast mode
[  665.911828][T18053] netlink: 'syz.1.3556': attribute type 29 has an invalid length.
[  668.284747][T18053] netlink: 'syz.1.3556': attribute type 29 has an invalid length.
[  668.294781][T18068] netlink: 'syz.3.3560': attribute type 10 has an invalid length.
[  668.343042][T18068] 8021q: adding VLAN 0 to HW filter on device team0
[  668.393266][T18068] bond0: (slave team0): Enslaving as an active interface with an up link
[  668.885806][T18078] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3565'.
[  668.905554][T18078] hsr_slave_0: left promiscuous mode
[  668.938863][T18078] hsr_slave_1: left promiscuous mode
[  670.634932][T18135] netlink: 26 bytes leftover after parsing attributes in process `syz.2.3582'.
[  670.649633][T18135] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.3582'.
[  670.667166][T18135] openvswitch: netlink: IP tunnel dst address not specified
[  670.822347][T18143] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3586'.
[  670.931190][T18145] netlink: 'syz.3.3587': attribute type 2 has an invalid length.
[  670.944520][T18145] netlink: 'syz.3.3587': attribute type 4 has an invalid length.
[  670.953394][T18145] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3587'.
[  672.230035][T18174] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3595'.
[  673.303164][T18174] netlink: 'syz.2.3595': attribute type 10 has an invalid length.
[  673.337464][T18174] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link
[  673.763141][T18197] netlink: 'syz.1.3603': attribute type 3 has an invalid length.
[  673.785000][T18197] netlink: 'syz.1.3603': attribute type 5 has an invalid length.
[  673.855483][T18199] netlink: 34111 bytes leftover after parsing attributes in process `syz.3.3604'.
[  674.108163][T18219] netlink: 'syz.1.3608': attribute type 3 has an invalid length.
[  674.125033][T18219] netlink: 'syz.1.3608': attribute type 1 has an invalid length.
[  674.133179][T18219] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3608'.
[  674.975856][T18256] netlink: 'syz.1.3621': attribute type 10 has an invalid length.
[  674.986937][T18256] dummy0: left promiscuous mode
[  675.011615][T18256] dummy0: left allmulticast mode
[  675.049798][T18257] netlink: 'syz.3.3622': attribute type 2 has an invalid length.
[  675.067309][T18256] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  675.096866][T18257] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3622'.
[  675.442184][T18284] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  675.476477][T18284] batman_adv: batadv0: Removing interface: batadv_slave_0
[  675.493390][T18284] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  675.502790][T18284] batman_adv: batadv0: Removing interface: batadv_slave_1
[  675.516471][T18284] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  675.524191][T18284] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  675.537521][T18284] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  675.547153][T18284] batman_adv: batadv0: Removing interface: virt_wifi0
[  676.021695][T18304] syzkaller0: entered promiscuous mode
[  676.045128][T18304] syzkaller0: entered allmulticast mode
[  676.984405][T18338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3650'.
[  676.995146][T18338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3650'.
[  677.006058][T18338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3650'.
[  677.015921][T18338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3650'.
[  677.111592][T18341] netlink: 'syz.2.3651': attribute type 21 has an invalid length.
[  677.124534][T18341] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3651'.
[  677.651340][T18367] vcan0: entered allmulticast mode
[  677.908184][T18375] netlink: 'syz.0.3661': attribute type 1 has an invalid length.
[  677.917648][T18375] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3661'.
[  678.031793][T18382] netlink: 'syz.0.3663': attribute type 11 has an invalid length.
[  678.043251][T18382] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3663'.
[  678.918763][T18410] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[  678.942315][T18410] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[  679.447652][T18436] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3679'.
[  680.386823][T18476] netlink: 'syz.1.3695': attribute type 1 has an invalid length.
[  680.458883][T18476] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3695'.
[  680.637405][T18489] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3699'.
[  680.729493][T18491] netlink: 703 bytes leftover after parsing attributes in process `syz.0.3700'.
[  680.799210][T18493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3699'.
[  681.394432][T18501] netlink: 'syz.2.3702': attribute type 29 has an invalid length.
[  681.407880][T18502] netlink: 'syz.2.3702': attribute type 29 has an invalid length.
[  681.418959][T18501] netlink: 'syz.2.3702': attribute type 29 has an invalid length.
[  681.498975][T14581] Bluetooth: hci1: ISO packet for unknown connection handle 23
[  682.643759][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'.
[  682.819424][T18558] netlink: 'syz.1.3724': attribute type 29 has an invalid length.
[  682.838153][T18558] netlink: 'syz.1.3724': attribute type 29 has an invalid length.
[  682.855170][T18564] netlink: 'syz.1.3724': attribute type 29 has an invalid length.
[  682.898765][T18558] netlink: 'syz.1.3724': attribute type 21 has an invalid length.
[  682.927654][T18558] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3724'.
[  683.740875][T18586] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3734'.
[  684.630679][T18618] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3742'.
[  684.640547][T18618] netlink: 'syz.1.3742': attribute type 1 has an invalid length.
[  684.650016][T18618] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.3742'.
[  684.792224][T18624] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.3745'.
[  684.802983][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3745'.
[  684.939871][T18628] netlink: 'syz.2.3747': attribute type 153 has an invalid length.
[  684.950857][T18628] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3747'.
[  685.327633][T18642] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode
[  685.340966][T18642] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode
[  685.840082][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  685.846708][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  685.894031][T18663] netlink: 'syz.1.3760': attribute type 21 has an invalid length.
[  685.902208][T18663] IPv6: NLM_F_CREATE should be specified when creating new route
[  685.910527][T18663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  685.917852][T18663] IPv6: NLM_F_CREATE should be set when creating new route
[  685.925187][T18663] IPv6: NLM_F_CREATE should be set when creating new route
[  685.932459][T18663] IPv6: NLM_F_CREATE should be set when creating new route
[  685.950431][T18663] netlink: 'syz.1.3760': attribute type 21 has an invalid length.
[  685.961600][T18663] netlink: 'syz.1.3760': attribute type 6 has an invalid length.
[  686.466921][T18691] syzkaller0: entered promiscuous mode
[  686.484508][T18691] syzkaller0: entered allmulticast mode
[  686.777954][T18694] netlink: 'syz.0.3770': attribute type 10 has an invalid length.
[  686.796240][T18694] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3770'.
[  686.817998][T18694] hsr0: entered promiscuous mode
[  687.094624][T18704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3775'.
[  687.106122][T18704] bridge_slave_0: entered allmulticast mode
[  687.119816][T18704] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3775'.
[  687.380054][T18721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3782'.
[  687.578472][T18725] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3783'.
[  687.724445][T18725] team0: Port device team_slave_0 removed
[  687.736184][T18725] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[  688.376583][T18750] validate_nla: 1 callbacks suppressed
[  688.376601][T18750] netlink: 'syz.3.3790': attribute type 6 has an invalid length.
[  691.947833][T18838] netlink: 'syz.0.3820': attribute type 1 has an invalid length.
[  691.979428][T18838] netlink: 'syz.0.3820': attribute type 2 has an invalid length.
[  692.014898][T18838] netlink: 'syz.0.3820': attribute type 2 has an invalid length.
[  692.044387][T18849] __nla_validate_parse: 2 callbacks suppressed
[  692.044403][T18849] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.3823'.
[  692.060640][T18838] netlink: 'syz.0.3820': attribute type 3 has an invalid length.
[  692.074996][T18838] netlink: 'syz.0.3820': attribute type 4 has an invalid length.
[  692.092598][T18838] netlink: 'syz.0.3820': attribute type 5 has an invalid length.
[  692.113445][T18838] netlink: 'syz.0.3820': attribute type 6 has an invalid length.
[  692.127763][T18838] netlink: 'syz.0.3820': attribute type 7 has an invalid length.
[  692.137302][T18838] netlink: 'syz.0.3820': attribute type 9 has an invalid length.
[  692.147718][T18838] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.3820'.
[  692.200652][T18854] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.3824'.
[  692.249404][T18854] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3824'.
[  692.558255][T14581] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4
[  692.789568][T18870] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3828'.
[  693.029730][T18881] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3833'.
[  693.092356][T18886] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3835'.
[  693.130511][T18883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3833'.
[  694.406369][T18941] syz.2.3848: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1
[  694.425793][T18941] CPU: 0 PID: 18941 Comm: syz.2.3848 Not tainted syzkaller #0
[  694.433321][T18941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  694.443455][T18941] Call Trace:
[  694.446777][T18941]  <TASK>
[  694.449751][T18941]  dump_stack_lvl+0x18c/0x250
[  694.454486][T18941]  ? show_regs_print_info+0x20/0x20
[  694.459750][T18941]  ? load_image+0x420/0x420
[  694.464344][T18941]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  694.470826][T18941]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  694.477377][T18941]  warn_alloc+0x246/0x340
[  694.481760][T18941]  ? stack_trace_save+0xaa/0x100
[  694.486760][T18941]  ? zone_watermark_ok_safe+0x230/0x230
[  694.492368][T18941]  ? kasan_set_track+0x5f/0x70
[  694.497175][T18941]  ? kasan_set_track+0x4e/0x70
[  694.501998][T18941]  ? __kasan_kmalloc+0x8f/0xa0
[  694.506825][T18941]  ? xsk_init_queue+0xad/0x100
[  694.511658][T18941]  ? xsk_setsockopt+0x4c9/0x750
[  694.516577][T18941]  ? do_sock_setsockopt+0x175/0x1a0
[  694.521827][T18941]  ? __x64_sys_setsockopt+0x182/0x200
[  694.527245][T18941]  __vmalloc_node_range+0x129/0x1320
[  694.532615][T18941]  ? free_vm_area+0x50/0x50
[  694.537207][T18941]  vmalloc_user+0x74/0x80
[  694.541591][T18941]  ? xskq_create+0xbf/0x170
[  694.546156][T18941]  xskq_create+0xbf/0x170
[  694.550555][T18941]  xsk_init_queue+0xad/0x100
[  694.555221][T18941]  xsk_setsockopt+0x4c9/0x750
[  694.559968][T18941]  ? xsk_poll+0x670/0x670
[  694.564376][T18941]  ? __fget_files+0x28/0x460
[  694.569037][T18941]  ? aa_sock_opt_perm+0x74/0x100
[  694.574042][T18941]  ? bpf_lsm_socket_setsockopt+0x9/0x10
[  694.579653][T18941]  ? security_socket_setsockopt+0x7e/0xa0
[  694.585405][T18941]  ? xsk_poll+0x670/0x670
[  694.589785][T18941]  do_sock_setsockopt+0x175/0x1a0
[  694.594845][T18941]  ? __fdget+0x180/0x210
[  694.599131][T18941]  __x64_sys_setsockopt+0x182/0x200
[  694.604383][T18941]  do_syscall_64+0x55/0xb0
[  694.608836][T18941]  ? clear_bhb_loop+0x40/0x90
[  694.613536][T18941]  ? clear_bhb_loop+0x40/0x90
[  694.618249][T18941]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  694.624172][T18941] RIP: 0033:0x7f137599de99
[  694.628619][T18941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  694.648264][T18941] RSP: 002b:00007f1373bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  694.656725][T18941] RAX: ffffffffffffffda RBX: 00007f1375c25fa0 RCX: 00007f137599de99
[  694.664723][T18941] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007
[  694.672735][T18941] RBP: 00007f1375a33eaf R08: 0000000000000004 R09: 0000000000000000
[  694.680748][T18941] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000
[  694.688766][T18941] R13: 00007f1375c26038 R14: 00007f1375c25fa0 R15: 00007ffef162c8b8
[  694.696810][T18941]  </TASK>
[  694.729464][T18941] Mem-Info:
[  694.733170][T18941] active_anon:10939 inactive_anon:0 isolated_anon:0
[  694.733170][T18941]  active_file:18192 inactive_file:40195 isolated_file:0
[  694.733170][T18941]  unevictable:768 dirty:49 writeback:0
[  694.733170][T18941]  slab_reclaimable:11335 slab_unreclaimable:93738
[  694.733170][T18941]  mapped:24632 shmem:1361 pagetables:540
[  694.733170][T18941]  sec_pagetables:0 bounce:0
[  694.733170][T18941]  kernel_misc_reclaimable:0
[  694.733170][T18941]  free:1341545 free_pcp:5920 free_cma:0
[  694.780106][T18941] Node 0 active_anon:43856kB inactive_anon:0kB active_file:72768kB inactive_file:160580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98528kB dirty:196kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11964kB pagetables:2160kB sec_pagetables:0kB all_unreclaimable? no
[  694.825069][T18941] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  694.891358][T18941] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  694.958320][T18941] lowmem_reserve[]: 0 2521 2522 2522 2522
[  694.964241][T18941] Node 0 DMA32 free:1453740kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:43908kB inactive_anon:0kB active_file:72768kB inactive_file:159760kB unevictable:1536kB writepending:208kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:9516kB local_pcp:6304kB free_cma:0kB
[  695.027889][T18941] lowmem_reserve[]: 0 0 0 0 0
[  695.032776][T18941] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  695.084967][T18941] lowmem_reserve[]: 0 0 0 0 0
[  695.089897][T18941] Node 1 Normal free:3896880kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14528kB local_pcp:12416kB free_cma:0kB
[  695.123277][T18941] lowmem_reserve[]: 0 0 0 0 0
[  695.137241][T18941] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  695.150782][T18941] Node 0 DMA32: 567*4kB (UM) 958*8kB (UM) 1416*16kB (UME) 579*32kB (UM) 516*64kB (UME) 830*128kB (UM) 229*256kB (UM) 45*512kB (UME) 24*1024kB (UM) 13*2048kB (UME) 276*4096kB (UM) = 1453740kB
[  695.172544][T18941] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  695.186155][T18941] Node 1 Normal: 254*4kB (UME) 57*8kB (UME) 43*16kB (UME) 188*32kB (UME) 49*64kB (UME) 8*128kB (UE) 2*256kB (UE) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3896880kB
[  695.204286][T18941] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  695.224351][T18941] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  695.240596][T18941] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  695.250790][T18941] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  695.260557][T18941] 59750 total pagecache pages
[  695.266421][T18941] 0 pages in swap cache
[  695.270638][T18941] Free swap  = 124996kB
[  695.277586][T18941] Total swap = 124996kB
[  695.281806][T18941] 2097051 pages RAM
[  695.286209][T18941] 0 pages HighMem/MovableOnly
[  695.291378][T18941] 416955 pages reserved
[  695.296235][T18941] 0 pages cma reserved
[  695.450855][T18961] validate_nla: 6 callbacks suppressed
[  695.450873][T18961] netlink: 'syz.3.3853': attribute type 9 has an invalid length.
[  695.506543][T18961] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3853'.
[  697.517469][T18962] netlink: 'syz.3.3853': attribute type 9 has an invalid length.
[  697.537947][T18962] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3853'.
[  698.021828][T18980] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3859'.
[  698.033430][T18980] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3859'.
[  698.641063][T18997] netlink: 'syz.0.3863': attribute type 8 has an invalid length.
[  698.709142][T18997] netlink: 'syz.0.3863': attribute type 1 has an invalid length.
[  698.727792][T18997] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3863'.
[  698.753145][T19003] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3865'.
[  698.783423][T19003] netlink: 'syz.1.3865': attribute type 1 has an invalid length.
[  698.802617][T19003] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.3865'.
[  698.840500][T19009] netlink: 'syz.3.3867': attribute type 7 has an invalid length.
[  699.879306][T19027] netlink: 'syz.2.3873': attribute type 21 has an invalid length.
[  699.889552][T19027] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3873'.
[  699.918091][T19027] sit0: entered promiscuous mode
[  701.257339][T19045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3878'.
[  701.559021][T19054] netlink: 'syz.3.3883': attribute type 11 has an invalid length.
[  701.574326][T19054] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.3883'.
[  701.724356][T19054] debugfs: Directory '!!�' with parent 'ieee80211' already present!
[  701.762890][T19056] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3884'.
[  701.838131][T19056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  703.095482][T19094] netlink: 'syz.3.3894': attribute type 39 has an invalid length.
[  703.277269][T19103] netlink: 'syz.3.3897': attribute type 5 has an invalid length.
[  703.606822][T19111] netlink: 'syz.1.3900': attribute type 15 has an invalid length.
[  703.637321][T19111] __nla_validate_parse: 1 callbacks suppressed
[  703.637338][T19111] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.3900'.
[  703.835228][T19120] netlink: 'syz.0.3904': attribute type 29 has an invalid length.
[  703.854746][T19120] netlink: 'syz.0.3904': attribute type 29 has an invalid length.
[  703.871294][T19120] netlink: 'syz.0.3904': attribute type 29 has an invalid length.
[  704.142567][T19134] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3909'.
[  704.193885][T19132] netlink: 'syz.2.3908': attribute type 21 has an invalid length.
[  704.213839][T19132] netlink: 'syz.2.3908': attribute type 4 has an invalid length.
[  704.248187][T19132] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3908'.
[  704.294084][T19132] netlink: 'syz.2.3908': attribute type 1 has an invalid length.
[  704.345195][T19132] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3908'.
[  704.367155][T19135] netlink: 'syz.2.3908': attribute type 1 has an invalid length.
[  704.408619][T19135] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3908'.
[  704.649607][T19138] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3910'.
[  704.896194][T19154] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3915'.
[  705.016853][T19158] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3915'.
[  706.461109][T19163] mac80211_hwsim hwsim43 wlan0: left promiscuous mode
[  706.469381][T19163] mac80211_hwsim hwsim43 wlan0: left allmulticast mode
[  706.495913][T19165] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode
[  706.512694][T19165] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode
[  706.669534][T19183] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3925'.
[  710.092565][T19201] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3928'.
[  710.121081][T19201] ��: renamed from team_slave_1
[  710.157598][T19206] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3929'.
[  710.260924][T19207] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3931'.
[  710.305004][T19207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3931'.
[  710.981679][T19230] validate_nla: 2 callbacks suppressed
[  710.981696][T19230] netlink: 'syz.3.3936': attribute type 10 has an invalid length.
[  711.217152][T19236] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.3940'.
[  711.861307][T19246] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3943'.
[  711.990064][T19258] netlink: 'syz.3.3943': attribute type 10 has an invalid length.
[  712.025109][T19258] macvlan1: entered allmulticast mode
[  712.047794][T19258] veth1_vlan: entered allmulticast mode
[  712.096236][T19258] team0: Port device macvlan1 added
[  712.125952][T19261] netlink: 'syz.0.3947': attribute type 21 has an invalid length.
[  712.527452][T19277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3950'.
[  713.130392][T19298] netlink: 'syz.3.3960': attribute type 2 has an invalid length.
[  713.147978][T19298] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3960'.
[  713.293461][T19303] netlink: 'syz.0.3962': attribute type 10 has an invalid length.
[  713.888746][T19303] team0: Port device geneve1 added
[  713.932327][T19311] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3965'.
[  714.255077][T19326] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  716.162526][T19374] netlink: 'syz.3.3985': attribute type 1 has an invalid length.
[  716.195171][T19374] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.3985'.
[  716.386555][T19371] netlink: 'syz.0.3982': attribute type 17 has an invalid length.
[  716.423085][T19371] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3982'.
[  716.645401][T19376] syzkaller0: entered promiscuous mode
[  716.667215][T19376] syzkaller0: entered allmulticast mode
[  721.020745][T19422] netlink: 26 bytes leftover after parsing attributes in process `syz.1.3999'.
[  721.030613][T19424] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3998'.
[  721.051218][T19422] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.3999'.
[  721.069009][T19422] openvswitch: netlink: IP tunnel dst address not specified
[  721.100979][T19424] netlink: 'syz.0.3998': attribute type 1 has an invalid length.
[  721.110825][T19424] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.3998'.
[  721.291705][T19430] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4002'.
[  721.447998][T19436] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4002'.
[  721.615072][T19439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4000'.
[  723.190930][T19458] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4009'.
[  723.200276][T19458] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4009'.
[  723.212449][T19458] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4009'.
[  723.224027][T19454] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4009'.
[  723.356608][T19459] netlink: 'syz.3.4009': attribute type 10 has an invalid length.
[  723.374925][T19459] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4009'.
[  723.398793][T19459] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  723.416656][T19459] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  723.449288][T19459] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  723.580921][T19465] netlink: 26 bytes leftover after parsing attributes in process `syz.3.4010'.
[  723.593717][T19465] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.4010'.
[  723.610416][T19465] openvswitch: netlink: IP tunnel dst address not specified
[  723.699836][T19463] delete_channel: no stack
[  723.731851][T19463] delete_channel: no stack
[  723.750939][T19463] netlink: 'syz.2.4018': attribute type 17 has an invalid length.
[  723.788179][T19463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  723.842894][T19461] netlink: 'syz.1.4011': attribute type 10 has an invalid length.
[  723.936811][T19471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  724.552172][T19485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  725.146569][T19492] netlink: 'syz.2.4020': attribute type 10 has an invalid length.
[  725.177391][T19492] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check.
[  725.408528][T19501] delete_channel: no stack
[  725.421959][T19501] delete_channel: no stack
[  725.568244][T19501] netlink: 'syz.3.4024': attribute type 17 has an invalid length.
[  725.589929][T19501] A link change request failed with some changes committed already. Interface Q�6��\b��Y�4�� may have been left with an inconsistent configuration, please check.
[  725.761454][T19507] netlink: 'syz.2.4025': attribute type 10 has an invalid length.
[  725.772195][T19507] hsr0: entered promiscuous mode
[  725.871434][T19511] netlink: 'syz.2.4028': attribute type 6 has an invalid length.
[  726.064328][T19515] netlink: 'syz.3.4027': attribute type 1 has an invalid length.
[  727.013327][T19524] __nla_validate_parse: 14 callbacks suppressed
[  727.013425][T19524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4032'.
[  727.047986][T19524] bridge_slave_0: entered allmulticast mode
[  727.067514][T19524] netlink: 'syz.2.4032': attribute type 1 has an invalid length.
[  727.082617][T19524] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4032'.
[  727.647366][T19535] netlink: 'syz.3.4037': attribute type 10 has an invalid length.
[  727.659826][T19535] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4037'.
[  727.672202][T19535] hsr0: entered promiscuous mode
[  727.755515][T19549] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4035'.
[  727.794895][T19549] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4035'.
[  727.805688][T19537] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4035'.
[  727.900108][T19537] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.4035'.
[  727.932216][T19537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4035'.
[  727.971183][T19537] batman_adv: batadv0: Adding interface: veth1_virt_wifi
[  727.983284][T19537] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  728.019531][T19537] batman_adv: batadv0: Interface activated: veth1_virt_wifi
[  728.186910][T19557] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4041'.
[  728.571953][T19567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4045'.
[  728.583386][T19567] bridge_slave_0: entered allmulticast mode
[  728.594104][T19567] validate_nla: 2 callbacks suppressed
[  728.594198][T19567] netlink: 'syz.1.4045': attribute type 1 has an invalid length.
[  729.397252][T19591] netlink: 'syz.0.4055': attribute type 21 has an invalid length.
[  729.428363][T19591] netlink: 'syz.0.4055': attribute type 6 has an invalid length.
[  730.250755][T19609] netlink: 'syz.1.4061': attribute type 2 has an invalid length.
[  730.258748][T19607] netlink: 'syz.0.4060': attribute type 33 has an invalid length.
[  730.517832][T14581] Bluetooth: hci4: ISO packet for unknown connection handle 2622
[  731.447981][T14581] Bluetooth: hci1: ISO packet for unknown connection handle 2622
[  732.048473][T19657] syzkaller0: entered promiscuous mode
[  732.067722][T19657] syzkaller0: entered allmulticast mode
[  732.618715][T19676] netlink: 'syz.1.4078': attribute type 2 has an invalid length.
[  732.630803][T19676] netlink: 'syz.1.4078': attribute type 1 has an invalid length.
[  732.853421][T19680] netlink: 'syz.0.4079': attribute type 29 has an invalid length.
[  732.861827][T19680] netlink: 'syz.0.4079': attribute type 29 has an invalid length.
[  735.651391][T14581] Bluetooth: hci3: ISO packet for unknown connection handle 2622
[  735.940955][T19694] netlink: 'syz.0.4085': attribute type 1 has an invalid length.
[  735.954985][T19694] __nla_validate_parse: 7 callbacks suppressed
[  735.955000][T19694] netlink: 60179 bytes leftover after parsing attributes in process `syz.0.4085'.
[  736.132213][T19703] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.4087'.
[  736.505494][T19719] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4093'.
[  737.707590][T19732] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4094'.
[  739.447008][T19769] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4107'.
[  739.600659][T19776] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4109'.
[  741.641429][T19830] netlink: 'syz.1.4125': attribute type 10 has an invalid length.
[  741.683301][T19830] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4125'.
[  741.765786][T19830] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  741.876139][T19835] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4126'.
[  741.939291][T19835] sit0: left promiscuous mode
[  742.145468][T19838] netlink: 'syz.3.4128': attribute type 3 has an invalid length.
[  742.216868][T19838] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4128'.
[  742.736286][T19837] IPv6: Can't replace route, no match found
[  743.949100][T19859] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4131'.
[  744.047904][T19891] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4142'.
[  744.071561][T19891] netlink: zone id is out of range
[  744.103124][T19891] netlink: 'syz.2.4142': attribute type 11 has an invalid length.
[  744.125085][T19891] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4142'.
[  744.179584][T19891] sysfs: cannot create duplicate filename '/class/ieee80211/!!�'
[  744.202298][T19891] CPU: 1 PID: 19891 Comm: syz.2.4142 Not tainted syzkaller #0
[  744.209814][T19891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  744.219922][T19891] Call Trace:
[  744.223241][T19891]  <TASK>
[  744.226205][T19891]  dump_stack_lvl+0x18c/0x250
[  744.230932][T19891]  ? show_regs_print_info+0x20/0x20
[  744.236158][T19891]  ? load_image+0x420/0x420
[  744.240729][T19891]  sysfs_warn_dup+0x8e/0xa0
[  744.245261][T19891]  sysfs_do_create_link_sd+0xc0/0x110
[  744.250664][T19891]  device_add_class_symlinks+0x1cf/0x240
[  744.256420][T19891]  device_add+0x4f9/0xc40
[  744.260797][T19891]  wiphy_register+0x1d99/0x2ac0
[  744.265690][T19891]  ? cfg80211_event_work+0x40/0x40
[  744.270819][T19891]  ? minstrel_ht_alloc+0x88a/0x990
[  744.275966][T19891]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  744.282070][T19891]  ieee80211_register_hw+0x2dd8/0x3b30
[  744.287576][T19891]  ? ieee80211_register_hw+0xf51/0x3b30
[  744.293188][T19891]  ? ieee80211_tasklet_handler+0x20/0x20
[  744.298845][T19891]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  744.304773][T19891]  ? __debug_object_init+0xec/0x450
[  744.310010][T19891]  ? __asan_memset+0x22/0x40
[  744.314694][T19891]  ? __hrtimer_init+0x189/0x270
[  744.319577][T19891]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  744.325352][T19891]  ? mac80211_hwsim_free+0x220/0x220
[  744.330664][T19891]  ? rcu_is_watching+0x15/0xb0
[  744.335464][T19891]  ? kstrndup+0xbd/0x140
[  744.339750][T19891]  hwsim_new_radio_nl+0xdad/0x1a70
[  744.344889][T19891]  ? __nla_validate+0x50/0x50
[  744.349658][T19891]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  744.356068][T19891]  ? __nla_parse+0x40/0x50
[  744.360531][T19891]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  744.366900][T19891]  genl_family_rcv_msg_doit+0x21a/0x310
[  744.372480][T19891]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  744.378415][T19891]  ? bpf_lsm_capable+0x9/0x10
[  744.383173][T19891]  ? security_capable+0x89/0xb0
[  744.388064][T19891]  genl_rcv_msg+0x611/0x7a0
[  744.392601][T19891]  ? genl_bind+0x360/0x360
[  744.397075][T19891]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  744.403449][T19891]  ? perf_trace_lock+0xfc/0x3b0
[  744.408353][T19891]  netlink_rcv_skb+0x235/0x4c0
[  744.413159][T19891]  ? genl_bind+0x360/0x360
[  744.417602][T19891]  ? netlink_ack+0x1160/0x1160
[  744.422412][T19891]  ? __lock_acquire+0x7d80/0x7d80
[  744.427494][T19891]  ? down_read+0x1ac/0x2e0
[  744.431936][T19891]  genl_rcv+0x28/0x40
[  744.435937][T19891]  netlink_unicast+0x7b1/0x930
[  744.440749][T19891]  netlink_sendmsg+0x8d0/0xbf0
[  744.445550][T19891]  ? lockdep_hardirqs_on+0x98/0x150
[  744.450791][T19891]  ? netlink_getsockopt+0x590/0x590
[  744.456033][T19891]  ? bpf_lsm_socket_accept+0x10/0x10
[  744.461356][T19891]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  744.466674][T19891]  ? security_socket_sendmsg+0x80/0xa0
[  744.472154][T19891]  ? netlink_getsockopt+0x590/0x590
[  744.477385][T19891]  ____sys_sendmsg+0x61b/0x980
[  744.482185][T19891]  ? __asan_memset+0x22/0x40
[  744.486809][T19891]  ? __sys_sendmsg_sock+0x30/0x30
[  744.491862][T19891]  ? __import_iovec+0x5f2/0x850
[  744.496748][T19891]  ? import_iovec+0x73/0xa0
[  744.501295][T19891]  ___sys_sendmsg+0x2a6/0x360
[  744.506016][T19891]  ? __sys_sendmsg+0x2b0/0x2b0
[  744.510842][T19891]  __se_sys_sendmsg+0x1d0/0x2c0
[  744.515735][T19891]  ? __x64_sys_sendmsg+0x80/0x80
[  744.520716][T19891]  ? lockdep_hardirqs_on+0x98/0x150
[  744.525945][T19891]  do_syscall_64+0x55/0xb0
[  744.530373][T19891]  ? clear_bhb_loop+0x40/0x90
[  744.535083][T19891]  ? clear_bhb_loop+0x40/0x90
[  744.539784][T19891]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  744.545694][T19891] RIP: 0033:0x7f137599de99
[  744.550133][T19891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  744.569769][T19891] RSP: 002b:00007f1373bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  744.578210][T19891] RAX: ffffffffffffffda RBX: 00007f1375c25fa0 RCX: 00007f137599de99
[  744.586219][T19891] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  744.594213][T19891] RBP: 00007f1375a33eaf R08: 0000000000000000 R09: 0000000000000000
[  744.602200][T19891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  744.610188][T19891] R13: 00007f1375c26038 R14: 00007f1375c25fa0 R15: 00007ffef162c8b8
[  744.618201][T19891]  </TASK>
[  744.672189][T19896] netlink: 'syz.0.4144': attribute type 21 has an invalid length.
[  744.680586][T19896] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4144'.
[  745.437349][T19924] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4154'.
[  745.485452][T19924] sit0: entered allmulticast mode
[  745.555028][T19934] sit0: entered promiscuous mode
[  745.738944][T19939] netlink: 'syz.0.4158': attribute type 29 has an invalid length.
[  745.758198][T19939] netlink: 'syz.0.4158': attribute type 29 has an invalid length.
[  745.777043][T19939] netlink: 'syz.0.4158': attribute type 29 has an invalid length.
[  746.285259][T19949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4161'.
[  746.602467][T19962] netlink: 'syz.1.4163': attribute type 2 has an invalid length.
[  746.620161][T19962] netlink: 'syz.1.4163': attribute type 8 has an invalid length.
[  746.639296][T19962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4163'.
[  746.911090][T19943] netlink: 160 bytes leftover after parsing attributes in process `syz.2.4159'.
[  747.289771][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  747.296463][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  747.547149][T19983] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4172'.
[  747.774301][T19990] sit0: entered allmulticast mode
[  747.965129][T19992] sit0: entered promiscuous mode
[  748.652908][T19997] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4174'.
[  748.876898][T20012] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4177'.
[  749.724614][T20032] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4186'.
[  750.724156][T20023] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4179'.
[  750.828659][T20057] netlink: 'syz.2.4193': attribute type 3 has an invalid length.
[  750.946355][T20057] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4193'.
[  751.101152][T20061] netlink: 'syz.1.4194': attribute type 3 has an invalid length.
[  751.131065][T20061] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.4194'.
[  751.170519][T14581] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18
[  752.011084][T20083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4201'.
[  753.433205][T20104] netlink: 'syz.3.4208': attribute type 2 has an invalid length.
[  753.469638][T20104] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.4208'.
[  753.486024][T20106] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4208'.
[  753.520530][T20106] openvswitch: netlink: Flow key attribute not present in set flow.
[  753.592730][T20109] netlink: 'syz.1.4211': attribute type 2 has an invalid length.
[  753.731328][T20112] netlink: 'syz.0.4212': attribute type 10 has an invalid length.
[  753.842331][T20112] team0: Port device wlan1 added
[  753.889695][T20119] netlink: 'syz.2.4210': attribute type 10 has an invalid length.
[  753.924968][T20119] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4210'.
[  753.960278][T20119] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[  754.033109][T20123] C: renamed from team_slave_0
[  754.055733][T20127] netlink: 'syz.3.4214': attribute type 29 has an invalid length.
[  754.099866][T20123] netlink: 'syz.3.4214': attribute type 3 has an invalid length.
[  754.124582][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'.
[  754.153193][T20123] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  754.218511][T20127] netlink: 'syz.3.4214': attribute type 29 has an invalid length.
[  754.230281][T20129] netlink: 'syz.3.4214': attribute type 29 has an invalid length.
[  754.452797][T20135] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.4216'.
[  754.744947][T20155] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4221'.
[  754.820586][T20158] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4222'.
[  754.887665][T20158] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4222'.
[  754.942697][T20158] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4222'.
[  755.013390][T20128] delete_channel: no stack
[  755.507579][T20165] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  755.521735][T20165] CPU: 1 PID: 20165 Comm: syz.1.4224 Not tainted syzkaller #0
[  755.529239][T20165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  755.539341][T20165] Call Trace:
[  755.542658][T20165]  <TASK>
[  755.545623][T20165]  dump_stack_lvl+0x18c/0x250
[  755.550350][T20165]  ? show_regs_print_info+0x20/0x20
[  755.555596][T20165]  ? load_image+0x420/0x420
[  755.560157][T20165]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  755.566263][T20165]  ? __kasan_kmalloc+0x8f/0xa0
[  755.571094][T20165]  sysfs_warn_dup+0x8e/0xa0
[  755.575662][T20165]  sysfs_do_create_link_sd+0xc0/0x110
[  755.581073][T20165]  device_add_class_symlinks+0x1cf/0x240
[  755.586753][T20165]  device_add+0x4f9/0xc40
[  755.591123][T20165]  wiphy_register+0x1d99/0x2ac0
[  755.596047][T20165]  ? cfg80211_event_work+0x40/0x40
[  755.601201][T20165]  ? minstrel_ht_alloc+0x88a/0x990
[  755.606373][T20165]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  755.612508][T20165]  ieee80211_register_hw+0x2dd8/0x3b30
[  755.618025][T20165]  ? ieee80211_register_hw+0xf51/0x3b30
[  755.623632][T20165]  ? ieee80211_tasklet_handler+0x20/0x20
[  755.629313][T20165]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  755.635281][T20165]  ? __debug_object_init+0xec/0x450
[  755.640536][T20165]  ? __asan_memset+0x22/0x40
[  755.645179][T20165]  ? __hrtimer_init+0x189/0x270
[  755.650091][T20165]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  755.655878][T20165]  ? mac80211_hwsim_free+0x220/0x220
[  755.661193][T20165]  ? rcu_is_watching+0x15/0xb0
[  755.665998][T20165]  ? kstrndup+0xbd/0x140
[  755.670303][T20165]  hwsim_new_radio_nl+0xdad/0x1a70
[  755.675467][T20165]  ? __nla_validate+0x50/0x50
[  755.680228][T20165]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  755.686609][T20165]  ? __nla_parse+0x40/0x50
[  755.691077][T20165]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  755.697459][T20165]  genl_family_rcv_msg_doit+0x21a/0x310
[  755.703075][T20165]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  755.709071][T20165]  ? bpf_lsm_capable+0x9/0x10
[  755.713812][T20165]  ? security_capable+0x89/0xb0
[  755.718740][T20165]  genl_rcv_msg+0x611/0x7a0
[  755.723296][T20165]  ? genl_bind+0x360/0x360
[  755.727759][T20165]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  755.734163][T20165]  netlink_rcv_skb+0x235/0x4c0
[  755.738982][T20165]  ? genl_bind+0x360/0x360
[  755.743430][T20165]  ? netlink_ack+0x1160/0x1160
[  755.748284][T20165]  ? __lock_acquire+0x7d80/0x7d80
[  755.753377][T20165]  ? down_read+0x1ac/0x2e0
[  755.757870][T20165]  genl_rcv+0x28/0x40
[  755.761885][T20165]  netlink_unicast+0x7b1/0x930
[  755.766706][T20165]  netlink_sendmsg+0x8d0/0xbf0
[  755.771541][T20165]  ? netlink_getsockopt+0x590/0x590
[  755.776793][T20165]  ? netlink_getsockopt+0x590/0x590
[  755.782026][T20165]  ____sys_sendmsg+0x61b/0x980
[  755.786846][T20165]  ? __asan_memset+0x22/0x40
[  755.791485][T20165]  ? __sys_sendmsg_sock+0x30/0x30
[  755.796547][T20165]  ? __import_iovec+0x5f2/0x850
[  755.801457][T20165]  ? import_iovec+0x73/0xa0
[  755.806009][T20165]  ___sys_sendmsg+0x2a6/0x360
[  755.810729][T20165]  ? __sys_sendmsg+0x2b0/0x2b0
[  755.815551][T20165]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  755.821603][T20165]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  755.827815][T20165]  ? __fdget+0x178/0x210
[  755.832117][T20165]  __se_sys_sendmsg+0x1d0/0x2c0
[  755.837007][T20165]  ? __x64_sys_sendmsg+0x80/0x80
[  755.842034][T20165]  ? syscall_enter_from_user_mode+0x2e/0x80
[  755.848078][T20165]  do_syscall_64+0x55/0xb0
[  755.852531][T20165]  ? clear_bhb_loop+0x40/0x90
[  755.857252][T20165]  ? clear_bhb_loop+0x40/0x90
[  755.861947][T20165]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  755.867845][T20165] RIP: 0033:0x7f9c6739de99
[  755.872259][T20165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  755.891864][T20165] RSP: 002b:00007f9c6835d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  755.900292][T20165] RAX: ffffffffffffffda RBX: 00007f9c67625fa0 RCX: 00007f9c6739de99
[  755.908302][T20165] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  755.916322][T20165] RBP: 00007f9c67433eaf R08: 0000000000000000 R09: 0000000000000000
[  755.924348][T20165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  755.932358][T20165] R13: 00007f9c67626038 R14: 00007f9c67625fa0 R15: 00007ffca1a90528
[  755.940390][T20165]  </TASK>
[  756.352132][T20189] validate_nla: 1 callbacks suppressed
[  756.352149][T20189] netlink: 'syz.1.4231': attribute type 10 has an invalid length.
[  757.040104][T20208] __nla_validate_parse: 11 callbacks suppressed
[  757.040123][T20208] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4239'.
[  757.079441][T20208] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4.
[  757.156055][T20208] netlink: 'syz.3.4239': attribute type 10 has an invalid length.
[  757.377848][T20208] team0: Device hsr_slave_0 failed to register rx_handler
[  757.888254][T20235] netlink: 'syz.1.4246': attribute type 1 has an invalid length.
[  758.010332][T20231] netlink: 'syz.2.4244': attribute type 1 has an invalid length.
[  758.032282][T20231] netlink: 'syz.2.4244': attribute type 10 has an invalid length.
[  758.653998][T20231] hsr_slave_0: left promiscuous mode
[  758.680622][T20231] hsr_slave_1: left promiscuous mode
[  758.854498][T20239] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4247'.
[  759.135523][T20251] -�: renamed from syzkaller0
[  760.099774][T20275] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4257'.
[  760.142432][T20271] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4257'.
[  760.411350][T20290] netlink: 'syz.0.4263': attribute type 21 has an invalid length.
[  760.419982][T20290] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4263'.
[  760.437967][T20290] netlink: 'syz.0.4263': attribute type 5 has an invalid length.
[  760.455023][T20290] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4263'.
[  760.542756][T20294] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4264'.
[  760.591128][T20294] netlink: 'syz.1.4264': attribute type 10 has an invalid length.
[  760.726327][T20303] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.4266'.
[  760.780528][T20300] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.4266'.
[  760.955394][T20298] netlink: 'syz.3.4265': attribute type 10 has an invalid length.
[  760.985428][T20298] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4265'.
[  761.597160][T20326] netlink: 'syz.2.4272': attribute type 1 has an invalid length.
[  762.452927][T20346] __nla_validate_parse: 2 callbacks suppressed
[  762.452945][T20346] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.4278'.
[  762.469422][T20348] syzkaller0: entered promiscuous mode
[  762.475621][T20348] syzkaller0: entered allmulticast mode
[  763.215599][T20380] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4290'.
[  763.267357][T20386] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4290'.
[  763.388997][T20390] netlink: 'syz.2.4292': attribute type 3 has an invalid length.
[  763.408267][T20390] netlink: 'syz.2.4292': attribute type 1 has an invalid length.
[  763.441214][T20390] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.4292'.
[  763.526255][T20395] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.4294'.
[  765.758918][T20505] netlink: 'syz.1.4340': attribute type 10 has an invalid length.
[  765.767034][T20505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4340'.
[  765.794630][T20505] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  765.909951][T20510] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4341'.
[  765.960181][T20513] netlink: 'syz.2.4343': attribute type 21 has an invalid length.
[  765.968802][T20513] netlink: 'syz.2.4343': attribute type 6 has an invalid length.
[  766.881249][T20548] netlink: 'syz.2.4354': attribute type 10 has an invalid length.
[  766.893966][T20548] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4354'.
[  767.084401][T20567] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4361'.
[  771.261688][T20588] netlink: 'syz.0.4367': attribute type 10 has an invalid length.
[  771.271130][T20588] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4367'.
[  771.499286][T20597] delete_channel: no stack
[  771.588875][T20606] netlink: 'syz.0.4373': attribute type 13 has an invalid length.
[  771.602564][T20606] netlink: 'syz.0.4373': attribute type 58 has an invalid length.
[  771.614867][T20606] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4373'.
[  771.631445][T20606] netlink: 'syz.0.4373': attribute type 21 has an invalid length.
[  771.640001][T20606] netlink: 'syz.0.4373': attribute type 1 has an invalid length.
[  771.648464][T20606] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4373'.
[  771.659548][T20610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4376'.
[  771.671730][T20610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4376'.
[  771.697547][T20610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4376'.
[  771.815427][T20607] netlink: 'syz.2.4374': attribute type 7 has an invalid length.
[  773.249354][T20641] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.4381'.
[  773.429267][T20656] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4387'.
[  773.441378][T20652] netlink: 'syz.2.4385': attribute type 10 has an invalid length.
[  773.480857][T20652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4385'.
[  773.503016][T20659] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.4385'.
[  773.512096][T20652] team0: entered promiscuous mode
[  773.560514][T20652] team_slave_1: entered promiscuous mode
[  773.608974][T20652] team0: entered allmulticast mode
[  773.615155][T20652] team_slave_1: entered allmulticast mode
[  773.667727][T20652] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  774.020880][T20675] netlink: 'syz.0.4390': attribute type 23 has an invalid length.
[  774.692612][T20682] netlink: 'syz.1.4395': attribute type 29 has an invalid length.
[  774.708850][T20682] netlink: 'syz.1.4395': attribute type 29 has an invalid length.
[  775.014656][T20686] sit0: left promiscuous mode
[  775.550708][T20689] sit0: entered promiscuous mode
[  776.083153][T20684] can: request_module (can-proto-0) failed.
[  776.373697][T20714] __nla_validate_parse: 7 callbacks suppressed
[  776.373715][T20714] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.4404'.
[  776.683290][T20720] netlink: 'syz.3.4405': attribute type 23 has an invalid length.
[  776.692601][T20722] netlink: 703 bytes leftover after parsing attributes in process `syz.0.4413'.
[  776.738050][T20720] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.4405'.
[  780.688748][T20748] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.4417'.
[  780.734396][T20757] netlink: 'syz.1.4420': attribute type 1 has an invalid length.
[  780.753726][T20757] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.4420'.
[  780.847886][T20748] syzkaller0: entered promiscuous mode
[  780.853462][T20748] syzkaller0: entered allmulticast mode
[  780.890823][T20760] netlink: 'syz.3.4419': attribute type 21 has an invalid length.
[  780.945083][T20760] netlink: 'syz.3.4419': attribute type 1 has an invalid length.
[  780.952935][T20760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4419'.
[  783.750209][T20778] netlink: 'syz.2.4427': attribute type 10 has an invalid length.
[  783.758707][T20778] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4427'.
[  783.769599][T20778] batadv_slave_1: entered promiscuous mode
[  784.934421][T20811] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4436'.
[  785.853878][T20854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4448'.
[  787.161423][T20902] dvmrp1: tun_chr_ioctl cmd 1074025673
[  787.179399][T20902] dvmrp1: tun_chr_ioctl cmd 1074025673
[  787.203260][T20902] dvmrp1: tun_chr_ioctl cmd 1074025673
[  787.412554][T20915] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4465'.
[  787.531436][T20915] sysfs: cannot create duplicate filename '/class/ieee80211/!!�!'
[  787.569210][T20915] CPU: 0 PID: 20915 Comm: syz.1.4465 Not tainted syzkaller #0
[  787.576743][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  787.586845][T20915] Call Trace:
[  787.590153][T20915]  <TASK>
[  787.593107][T20915]  dump_stack_lvl+0x18c/0x250
[  787.597840][T20915]  ? show_regs_print_info+0x20/0x20
[  787.603072][T20915]  ? load_image+0x420/0x420
[  787.607639][T20915]  sysfs_warn_dup+0x8e/0xa0
[  787.612188][T20915]  sysfs_do_create_link_sd+0xc0/0x110
[  787.617624][T20915]  device_add_class_symlinks+0x1cf/0x240
[  787.623300][T20915]  device_add+0x4f9/0xc40
[  787.627668][T20915]  wiphy_register+0x1d99/0x2ac0
[  787.632582][T20915]  ? cfg80211_event_work+0x40/0x40
[  787.637753][T20915]  ? minstrel_ht_alloc+0x88a/0x990
[  787.642924][T20915]  ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0
[  787.649061][T20915]  ieee80211_register_hw+0x2dd8/0x3b30
[  787.654606][T20915]  ? ieee80211_register_hw+0xf51/0x3b30
[  787.660223][T20915]  ? ieee80211_tasklet_handler+0x20/0x20
[  787.665896][T20915]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  787.671855][T20915]  ? __debug_object_init+0xec/0x450
[  787.677108][T20915]  ? __asan_memset+0x22/0x40
[  787.681744][T20915]  ? __hrtimer_init+0x189/0x270
[  787.686664][T20915]  mac80211_hwsim_new_radio+0x2a75/0x4d70
[  787.692459][T20915]  ? mac80211_hwsim_free+0x220/0x220
[  787.697785][T20915]  ? rcu_is_watching+0x15/0xb0
[  787.702591][T20915]  ? kstrndup+0xbd/0x140
[  787.706912][T20915]  hwsim_new_radio_nl+0xdad/0x1a70
[  787.712074][T20915]  ? __nla_validate+0x50/0x50
[  787.716826][T20915]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  787.723211][T20915]  ? __nla_parse+0x40/0x50
[  787.727694][T20915]  ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290
[  787.734071][T20915]  genl_family_rcv_msg_doit+0x21a/0x310
[  787.739674][T20915]  ? genl_family_rcv_msg_dumpit+0x310/0x310
[  787.745599][T20915]  ? bpf_lsm_capable+0x9/0x10
[  787.750308][T20915]  ? security_capable+0x89/0xb0
[  787.755180][T20915]  genl_rcv_msg+0x611/0x7a0
[  787.759704][T20915]  ? genl_bind+0x360/0x360
[  787.764134][T20915]  ? hwsim_tx_info_frame_received_nl+0xce0/0xce0
[  787.770503][T20915]  netlink_rcv_skb+0x235/0x4c0
[  787.775306][T20915]  ? genl_bind+0x360/0x360
[  787.779758][T20915]  ? netlink_ack+0x1160/0x1160
[  787.784573][T20915]  ? __lock_acquire+0x7d80/0x7d80
[  787.789633][T20915]  ? net_generic+0x1e/0x240
[  787.794163][T20915]  ? down_read+0x1ac/0x2e0
[  787.798609][T20915]  genl_rcv+0x28/0x40
[  787.802605][T20915]  netlink_unicast+0x7b1/0x930
[  787.807408][T20915]  netlink_sendmsg+0x8d0/0xbf0
[  787.812195][T20915]  ? netlink_getsockopt+0x590/0x590
[  787.817419][T20915]  ? apparmor_socket_sendmsg+0x8e/0x330
[  787.822981][T20915]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  787.828278][T20915]  ? security_socket_sendmsg+0x80/0xa0
[  787.833796][T20915]  ? netlink_getsockopt+0x590/0x590
[  787.839016][T20915]  ____sys_sendmsg+0x61b/0x980
[  787.843815][T20915]  ? __asan_memset+0x22/0x40
[  787.848561][T20915]  ? __sys_sendmsg_sock+0x30/0x30
[  787.853619][T20915]  ? __import_iovec+0x5f2/0x850
[  787.858512][T20915]  ? import_iovec+0x73/0xa0
[  787.863042][T20915]  ___sys_sendmsg+0x2a6/0x360
[  787.867757][T20915]  ? __sys_sendmsg+0x2b0/0x2b0
[  787.872584][T20915]  ? trace_call_bpf+0xc3/0x6c0
[  787.877406][T20915]  __se_sys_sendmsg+0x1d0/0x2c0
[  787.882301][T20915]  ? __x64_sys_sendmsg+0x80/0x80
[  787.887275][T20915]  ? lockdep_hardirqs_on+0x98/0x150
[  787.892508][T20915]  do_syscall_64+0x55/0xb0
[  787.896960][T20915]  ? clear_bhb_loop+0x40/0x90
[  787.901663][T20915]  ? clear_bhb_loop+0x40/0x90
[  787.906372][T20915]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  787.912314][T20915] RIP: 0033:0x7f9c6739de99
[  787.916751][T20915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  787.936397][T20915] RSP: 002b:00007f9c6831b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  787.944935][T20915] RAX: ffffffffffffffda RBX: 00007f9c67626180 RCX: 00007f9c6739de99
[  787.952933][T20915] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b
[  787.960964][T20915] RBP: 00007f9c67433eaf R08: 0000000000000000 R09: 0000000000000000
[  787.968961][T20915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  787.976962][T20915] R13: 00007f9c67626218 R14: 00007f9c67626180 R15: 00007ffca1a90528
[  787.985002][T20915]  </TASK>
[  788.153108][T20921] -�: renamed from syzkaller0
[  788.168362][T20919] netlink: 'syz.0.4470': attribute type 12 has an invalid length.
[  788.179849][T20919] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4470'.
[  788.290412][T20925] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4472'.
[  788.385117][T20921] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4471'.
[  788.763284][T20921] bond0: (slave bond_slave_0): Releasing backup interface
[  788.978552][T20921] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  789.023559][T20926] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  789.073019][T20928] netlink: 'syz.0.4473': attribute type 29 has an invalid length.
[  789.082049][T20926] syzkaller0: entered promiscuous mode
[  789.094891][T20926] syzkaller0: entered allmulticast mode
[  790.844344][T20928] netlink: 'syz.0.4473': attribute type 29 has an invalid length.
[  790.878929][T20943] netlink: 'syz.1.4477': attribute type 10 has an invalid length.
[  791.065554][T20949] netlink: 'syz.0.4478': attribute type 21 has an invalid length.
[  791.170924][T20957] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4482'.
[  791.193552][T20957] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4482'.
[  791.208775][T20957] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4482'.
[  792.025007][T20971] netlink: 'syz.2.4486': attribute type 12 has an invalid length.
[  792.044846][T20971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4486'.
[  792.122018][T20974] netlink: 'syz.1.4488': attribute type 12 has an invalid length.
[  792.144926][T20974] netlink: 'syz.1.4488': attribute type 11 has an invalid length.
[  792.152907][T20974] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.4488'.
[  792.305949][T20983] netlink: 'syz.0.4487': attribute type 1 has an invalid length.
[  792.318405][T20986] netlink: 'syz.1.4491': attribute type 1 has an invalid length.
[  792.326290][T20986] netlink: 'syz.1.4491': attribute type 3 has an invalid length.
[  792.334129][T20983] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.4487'.
[  792.344570][T20986] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4491'.
[  792.423564][T20986] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4491'.
[  792.499603][T20984] delete_channel: no stack
[  793.218443][T21011] team0: Port device geneve1 added
[  793.383408][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4503'.
[  793.974133][T21045] validate_nla: 1 callbacks suppressed
[  793.974152][T21045] netlink: 'syz.1.4509': attribute type 29 has an invalid length.
[  794.015324][T21045] netlink: 'syz.1.4509': attribute type 29 has an invalid length.
[  794.042442][T21045] netlink: 'syz.1.4509': attribute type 29 has an invalid length.
[  794.052864][T21045] netlink: 'syz.1.4509': attribute type 29 has an invalid length.
[  794.065289][T21045] netlink: 'syz.1.4509': attribute type 29 has an invalid length.
[  794.083963][T21045] netlink: 'syz.1.4509': attribute type 29 has an invalid length.
[  794.303759][T21052] syzkaller0: entered promiscuous mode
[  794.314317][T21052] syzkaller0: entered allmulticast mode
[  799.047009][T21072] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4519'.
[  799.057087][T21073] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4519'.
[  799.651881][T21104] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4530'.
[  799.665625][T21103] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.4530'.
[  799.920012][T21119] netlink: 'syz.2.4535': attribute type 2 has an invalid length.
[  799.930865][T21119] netlink: 'syz.2.4535': attribute type 3 has an invalid length.
[  799.942896][T21119] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4535'.
[  800.126061][T21124] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4536'.
[  800.171186][T21124] sit0: entered promiscuous mode
[  800.801122][T21155] netlink: 'syz.3.4547': attribute type 39 has an invalid length.
[  801.686120][T21178] sock: sock_timestamping_bind_phc: sock not bind to device
[  801.781557][T21181] netlink: 'syz.0.4554': attribute type 1 has an invalid length.
[  801.804896][T21181] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4554'.
[  801.814246][T21181] netlink: 'syz.0.4554': attribute type 1 has an invalid length.
[  802.043372][T21192] netlink: 'syz.1.4556': attribute type 10 has an invalid length.
[  802.462630][T21205] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  802.510779][T21205] batman_adv: batadv0: Removing interface: batadv_slave_0
[  802.626975][T21205] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  802.681996][T21205] batman_adv: batadv0: Removing interface: batadv_slave_1
[  802.771384][T21205] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  802.785680][T21205] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  803.031026][T21219] netlink: 'syz.2.4567': attribute type 4 has an invalid length.
[  803.594655][T21235] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4571'.
[  803.692256][T21239] mac80211_hwsim hwsim44 ..�c��: renamed from wlan1 (while UP)
[  803.913621][T21248] netlink: 'syz.0.4577': attribute type 39 has an invalid length.
[  804.072523][T21259] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4577'.
[  804.082817][T21259] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4577'.
[  804.096132][T21253] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4577'.
[  804.123815][T21259] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4577'.
[  804.747090][T21275] mac80211_hwsim hwsim41 wlan0: left promiscuous mode
[  804.764335][T21275] mac80211_hwsim hwsim41 wlan0: left allmulticast mode
[  804.810423][T21277] mac80211_hwsim hwsim41 wlan0: entered promiscuous mode
[  804.835024][T21277] mac80211_hwsim hwsim41 wlan0: entered allmulticast mode
[  805.192996][T21297] netlink: 'syz.2.4594': attribute type 21 has an invalid length.
[  805.206886][T21297] netlink: 'syz.2.4594': attribute type 10 has an invalid length.
[  805.216818][T21297] netlink: 'syz.2.4594': attribute type 12 has an invalid length.
[  805.227302][T21297] netlink: 'syz.2.4594': attribute type 13 has an invalid length.
[  805.235747][T21297] netlink: 'syz.2.4594': attribute type 14 has an invalid length.
[  805.247443][T21297] netlink: 'syz.2.4594': attribute type 15 has an invalid length.
[  805.256454][T21297] netlink: 'syz.2.4594': attribute type 16 has an invalid length.
[  805.283523][T21297] netlink: 'syz.2.4594': attribute type 19 has an invalid length.
[  805.298407][T21298] netlink: 'syz.2.4594': attribute type 29 has an invalid length.
[  805.311187][T21297] netlink: 'syz.2.4594': attribute type 21 has an invalid length.
[  805.323149][T21297] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.4594'.
[  806.258118][T21335] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.4604'.
[  806.391378][T21341] netlink: 160 bytes leftover after parsing attributes in process `syz.0.4607'.
[  806.408078][T21341] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4607'.
[  808.721057][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  808.727883][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  809.006923][T21407] syzkaller0: entered promiscuous mode
[  809.012731][T21407] syzkaller0: entered allmulticast mode
[  809.526440][T21433] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  809.537952][T21433] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  812.089313][T21464] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4645'.
[  812.100901][T21464] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  812.115950][T21464] openvswitch: netlink: Message has 1 unknown bytes.
[  812.138113][T21450] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4640'.
[  812.169290][T21456] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.4640'.
[  812.297553][T21464] validate_nla: 3 callbacks suppressed
[  812.297880][T21464] netlink: 'syz.0.4645': attribute type 3 has an invalid length.
[  812.310793][T21472] netlink: 'syz.3.4647': attribute type 23 has an invalid length.
[  812.320805][T21464] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.4645'.
[  812.727780][T21495] netlink: 'syz.3.4654': attribute type 21 has an invalid length.
[  812.745635][T21495] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4654'.
[  812.930832][T21509] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.4658'.
[  812.979156][T21504] netlink: 'syz.1.4657': attribute type 3 has an invalid length.
[  813.024720][T21504] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.4657'.
[  813.391677][T21529] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4664'.
[  813.427473][T21529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  814.087939][T21538] netlink: set zone limit has 8 unknown bytes
[  814.428350][T21549] syzkaller0: entered promiscuous mode
[  814.474956][T21549] syzkaller0: entered allmulticast mode
[  814.651867][T21560] netlink: 'syz.3.4673': attribute type 10 has an invalid length.
[  814.685875][T21560] team0: Device ipvlan1 failed to register rx_handler
[  816.318255][T21575] netlink: 'syz.0.4678': attribute type 29 has an invalid length.
[  816.403478][T21575] netlink: 'syz.0.4678': attribute type 29 has an invalid length.
[  816.454120][T21578] netlink: 'syz.0.4678': attribute type 29 has an invalid length.
[  818.074940][T21593] delete_channel: no stack
[  818.135550][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  818.155046][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  818.162922][ T5082] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  818.176914][ T5082] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  818.187247][ T5082] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  818.195190][ T5082] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  818.254237][T21609] netlink: 'syz.1.4688': attribute type 10 has an invalid length.
[  818.619706][T21629] netlink: 668 bytes leftover after parsing attributes in process `syz.0.4691'.
[  818.653578][T21629] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  818.685114][T21629] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  818.833104][T21610] chnl_net:caif_netlink_parms(): no params data found
[  818.946571][T21637] netlink: 'syz.0.4694': attribute type 27 has an invalid length.
[  818.996643][T21637] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4694'.
[  819.032300][T21637] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  819.228347][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.422450][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.445901][T21658] netlink: 'syz.3.4697': attribute type 5 has an invalid length.
[  819.495848][T21645] syzkaller0: entered promiscuous mode
[  819.501372][T21645] syzkaller0: entered allmulticast mode
[  819.515682][T21653] �: port 1(vlan0) entered blocking state
[  819.527301][T21653] �: port 1(vlan0) entered disabled state
[  819.555190][T21653] vlan0: entered allmulticast mode
[  819.560844][T21653] veth0_vlan: entered allmulticast mode
[  819.591131][T21653] vlan0: entered promiscuous mode
[  819.637436][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  819.742134][T21610] bridge0: port 1(bridge_slave_0) entered blocking state
[  819.772565][T21610] bridge0: port 1(bridge_slave_0) entered disabled state
[  819.793679][T21610] bridge_slave_0: entered allmulticast mode
[  819.804700][T21610] bridge_slave_0: entered promiscuous mode
[  819.822371][T21610] bridge0: port 2(bridge_slave_1) entered blocking state
[  819.829959][T21610] bridge0: port 2(bridge_slave_1) entered disabled state
[  819.837526][T21610] bridge_slave_1: entered allmulticast mode
[  819.845380][T21610] bridge_slave_1: entered promiscuous mode
[  819.868371][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  820.245962][ T5082] Bluetooth: hci2: command tx timeout
[  820.274175][T21678] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4702'.
[  821.681431][T21671] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4700'.
[  821.732914][T21671] team0: Port device team_slave_0 removed
[  821.816775][T21610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.836321][T21678] ieee80211 phy72: Failed to add default virtual iface
[  821.877362][T21610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  822.001115][T21610] team0: Port device team_slave_0 added
[  822.030514][T21610] team0: Port device team_slave_1 added
[  822.123101][T21688] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.4704'.
[  822.148908][T21689] netlink: 'syz.0.4705': attribute type 39 has an invalid length.
[  822.196302][T21610] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.203299][T21610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.223387][T21688] netlink: 'syz.3.4704': attribute type 29 has an invalid length.
[  822.256486][T21610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.309106][T21688] netlink: 'syz.3.4704': attribute type 29 has an invalid length.
[  822.324912][ T5082] Bluetooth: hci2: command tx timeout
[  822.332635][T21610] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.364888][T21610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.442325][T21610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.543877][T21692] netlink: 'syz.0.4706': attribute type 21 has an invalid length.
[  822.591065][T21692] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4706'.
[  822.604250][T21693] netlink: 'syz.3.4704': attribute type 39 has an invalid length.
[  822.984067][T21697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4707'.
[  823.038870][T21610] hsr_slave_0: entered promiscuous mode
[  823.055390][T21610] hsr_slave_1: entered promiscuous mode
[  823.157339][T21697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4707'.
[  823.311718][T21703] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4707'.
[  823.368739][T21698] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4707'.
[  823.644236][T21697] __nla_validate_parse: 1 callbacks suppressed
[  823.644256][T21697] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4707'.
[  823.957051][T21727] netlink: 'syz.3.4713': attribute type 7 has an invalid length.
[  824.394913][ T5082] Bluetooth: hci2: command tx timeout
[  824.474943][T21751] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4716'.
[  824.587880][T21739] syzkaller0: entered promiscuous mode
[  824.612522][T21739] syzkaller0: entered allmulticast mode
[  826.474884][ T5082] Bluetooth: hci2: command tx timeout
[  828.024585][T21796] �: port 1(vlan0) entered blocking state
[  828.043293][T21796] �: port 1(vlan0) entered disabled state
[  828.053980][T21796] vlan0: entered allmulticast mode
[  828.068569][T21796] veth0_vlan: entered allmulticast mode
[  828.081478][T21796] vlan0: entered promiscuous mode
[  828.373134][T21804] netlink: 183836 bytes leftover after parsing attributes in process `syz.3.4728'.
[  828.654878][T21610] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  828.710566][T21610] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  828.777136][   T11] veth1_macvtap: left promiscuous mode
[  828.786012][   T11] veth1_vlan: left promiscuous mode
[  828.791450][   T11] veth0_vlan: left promiscuous mode
[  830.071298][   T11] team_slave_1 (unregistering): left promiscuous mode
[  830.080675][   T11] team_slave_1 (unregistering): left allmulticast mode
[  830.094147][   T11] team0 (unregistering): Port device team_slave_1 removed
[  830.177649][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  830.281397][   T11] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface
[  830.554480][   T11] bond0 (unregistering): Released all slaves
[  830.591205][T21610] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  830.601731][T21610] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  830.612487][T21810] netlink: 'syz.3.4730': attribute type 21 has an invalid length.
[  831.110353][T21836] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4736'.
[  831.272002][T21836] team0: Port device bond0 removed
[  831.284400][T21836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  831.311712][T21836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  831.345732][T21836] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  831.382597][T21836] bond0 (unregistering): Released all slaves
[  831.414487][T21842] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4736'.
[  831.437227][T21849] netlink: 'syz.3.4737': attribute type 20 has an invalid length.
[  831.493925][T21610] 8021q: adding VLAN 0 to HW filter on device bond0
[  831.567847][T21610] 8021q: adding VLAN 0 to HW filter on device team0
[  831.598714][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state
[  831.605942][ T8557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  831.630285][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state
[  831.637542][ T8557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  831.772755][T21610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  832.321703][T21610] 8021q: adding VLAN 0 to HW filter on device batadv0
[  832.391048][T21885] netlink: 183836 bytes leftover after parsing attributes in process `syz.1.4746'.
[  832.514140][T21610] veth0_vlan: entered promiscuous mode
[  832.570884][T21894] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4750'.
[  832.600987][T21894] bridge_slave_1: default FDB implementation only supports local addresses
[  832.626768][T21610] veth1_vlan: entered promiscuous mode
[  832.652325][T21894] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4750'.
[  832.721860][T21610] veth0_macvtap: entered promiscuous mode
[  832.759457][T21610] veth1_macvtap: entered promiscuous mode
[  832.811831][T21610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  832.847669][T21610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.866511][T21610] batman_adv: batadv0: Interface activated: batadv_slave_0
[  832.916050][T21610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  832.938327][T21610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.954498][T21610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  832.965425][T21610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  832.977741][T21610] batman_adv: batadv0: Interface activated: batadv_slave_1
[  832.996762][T21610] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  833.016541][T21610] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  833.039049][T21610] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  833.057439][T21610] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  833.244936][T15257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.252851][T15257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  833.360469][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  833.393032][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  834.506131][T21951] netlink: 'syz.3.4761': attribute type 2 has an invalid length.
[  834.513935][T21951] netlink: 'syz.3.4761': attribute type 3 has an invalid length.
[  834.584286][T21951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4761'.
[  835.111397][T21960] syzkaller0: entered promiscuous mode
[  835.149294][T21960] syzkaller0: entered allmulticast mode
[  835.361570][T21972] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  835.370815][T21972] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  835.384991][T21972] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  835.393134][T21972] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  835.401849][T21972] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  835.409994][T21972] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  835.473720][T13862] bond0: (slave syz_tun): Releasing backup interface
[  835.640167][T21975] netlink: 183836 bytes leftover after parsing attributes in process `syz.2.4765'.
[  835.680572][T17572] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  835.763986][T21979] netlink: 'syz.3.4766': attribute type 10 has an invalid length.
[  835.780178][T21979] team0: Device hsr_slave_0 failed to register rx_handler
[  835.873058][T17572] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.042435][T17572] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  836.423752][T17572] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  837.518201][ T5082] Bluetooth: hci0: command tx timeout
[  839.007752][T21971] chnl_net:caif_netlink_parms(): no params data found
[  839.238831][T22028] netlink: 'syz.0.4776': attribute type 2 has an invalid length.
[  839.256857][T22028] netlink: 'syz.0.4776': attribute type 1 has an invalid length.
[  839.264648][T22028] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.4776'.
[  839.363801][T21971] bridge0: port 1(bridge_slave_0) entered blocking state
[  839.371930][T21971] bridge0: port 1(bridge_slave_0) entered disabled state
[  839.381416][T21971] bridge_slave_0: entered allmulticast mode
[  839.389315][T21971] bridge_slave_0: entered promiscuous mode
[  839.479611][T21971] bridge0: port 2(bridge_slave_1) entered blocking state
[  839.494093][T21971] bridge0: port 2(bridge_slave_1) entered disabled state
[  839.563093][T21971] bridge_slave_1: entered allmulticast mode
[  839.588501][T21971] bridge_slave_1: entered promiscuous mode
[  839.596888][ T5082] Bluetooth: hci0: command tx timeout
[  839.822823][T21971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  839.872384][T21971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  840.022759][T21971] team0: Port device team_slave_0 added
[  840.062700][T21971] team0: Port device team_slave_1 added
[  840.173624][T21971] batman_adv: batadv0: Adding interface: batadv_slave_0
[  840.199252][T21971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  840.228297][T21971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  840.783323][T21971] batman_adv: batadv0: Adding interface: batadv_slave_1
[  840.793159][T21971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  840.865230][T21971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  841.082669][T21971] hsr_slave_0: entered promiscuous mode
[  841.108372][T21971] hsr_slave_1: entered promiscuous mode
[  841.117684][T21971] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  841.125568][T21971] Cannot create hsr debugfs directory
[  841.675307][ T5082] Bluetooth: hci0: command tx timeout
[  842.486039][T17572] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  842.509535][T17572] batman_adv: batadv0: Removing interface: batadv_slave_0
[  842.547094][T17572] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  842.565266][T17572] batman_adv: batadv0: Removing interface: batadv_slave_1
[  842.586780][T17572] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi
[  842.604668][T17572] batman_adv: batadv0: Removing interface: veth1_virt_wifi
[  842.666187][T17572] veth1_macvtap: left promiscuous mode
[  842.674334][T17572] veth0_macvtap: left promiscuous mode
[  842.687889][T17572] veth1_vlan: left promiscuous mode
[  843.701200][T22119] netlink: 'syz.2.4792': attribute type 2 has an invalid length.
[  843.722884][T22119] netlink: 'syz.2.4792': attribute type 1 has an invalid length.
[  843.739483][T22119] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4792'.
[  843.756746][ T5082] Bluetooth: hci0: command tx timeout
[  844.384176][T17572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  844.452335][T17572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  844.911509][T17572] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  844.953975][T17572] bond0 (unregistering): Released all slaves
[  845.086160][T22116] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.4791'.
[  845.362769][T21971] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  845.413732][T21971] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  845.532062][T21971] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  845.547106][T21971] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  845.964015][T21971] 8021q: adding VLAN 0 to HW filter on device bond0
[  846.013416][T21971] 8021q: adding VLAN 0 to HW filter on device team0
[  846.052268][T17568] bridge0: port 1(bridge_slave_0) entered blocking state
[  846.059528][T17568] bridge0: port 1(bridge_slave_0) entered forwarding state
[  846.079580][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  846.086852][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  846.231956][T22154] pimreg1: tun_chr_ioctl cmd 2147767517
[  846.267580][T22150] netlink: 'syz.2.4800': attribute type 10 has an invalid length.
[  846.301252][T22150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4800'.
[  846.340714][T22150] batman_adv: batadv0: Adding interface: veth0_vlan
[  846.379330][T22150] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  846.416129][T22150] batman_adv: batadv0: Interface activated: veth0_vlan
[  846.464425][T22160] netlink: 'syz.0.4801': attribute type 39 has an invalid length.
[  847.274325][T22170] mac80211_hwsim hwsim72 wlan0: entered promiscuous mode
[  847.307232][T22170] mac80211_hwsim hwsim72 wlan0: entered allmulticast mode
[  847.551822][T21971] 8021q: adding VLAN 0 to HW filter on device batadv0
[  847.688939][T22190] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4805'.
[  847.745884][T21971] veth0_vlan: entered promiscuous mode
[  847.798719][T21971] veth1_vlan: entered promiscuous mode
[  847.894430][T21971] veth0_macvtap: entered promiscuous mode
[  847.922708][T21971] veth1_macvtap: entered promiscuous mode
[  847.960202][T21971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  847.977302][T21971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  847.993072][T21971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  848.003989][T21971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  848.017004][T21971] batman_adv: batadv0: Interface activated: batadv_slave_0
[  848.039798][T21971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  848.068361][T21971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  848.095324][T21971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  848.106859][T21971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  848.129188][T21971] batman_adv: batadv0: Interface activated: batadv_slave_1
[  848.158338][T21971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  848.174805][T21971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  848.183877][T21971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  848.201947][T21971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  848.292348][T22202] pimreg1: tun_chr_ioctl cmd 2147767517
[  848.307664][T22202] netlink: 'syz.0.4810': attribute type 10 has an invalid length.
[  848.329550][T22202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4810'.
[  848.382694][T22202] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check.
[  848.502892][T22206] mac80211_hwsim hwsim73 wlan1: entered allmulticast mode
[  848.712974][T17572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.759054][T17572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.850339][T22222] netlink: 'syz.0.4813': attribute type 153 has an invalid length.
[  848.870805][T17572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.884903][T22222] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4813'.
[  848.897884][T17572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  849.112851][T22231] FAULT_INJECTION: forcing a failure.
[  849.112851][T22231] name failslab, interval 1, probability 0, space 0, times 0
[  849.162619][T22231] CPU: 1 PID: 22231 Comm: syz.3.4814 Not tainted syzkaller #0
[  849.170177][T22231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  849.180280][T22231] Call Trace:
[  849.183620][T22231]  <TASK>
[  849.186592][T22231]  dump_stack_lvl+0x18c/0x250
[  849.191327][T22231]  ? show_regs_print_info+0x20/0x20
[  849.196573][T22231]  ? load_image+0x420/0x420
[  849.201135][T22231]  ? __might_sleep+0xe0/0xe0
[  849.205783][T22231]  ? __lock_acquire+0x7d80/0x7d80
[  849.210873][T22231]  should_fail_ex+0x394/0x4c0
[  849.215611][T22231]  should_failslab+0x9/0x20
[  849.220180][T22231]  slab_pre_alloc_hook+0x59/0x300
[  849.225258][T22231]  ? prepend_path+0x8a7/0x950
[  849.229977][T22231]  ? tomoyo_encode+0x2ad/0x570
[  849.234792][T22231]  ? tomoyo_encode+0x2ad/0x570
[  849.239612][T22231]  __kmem_cache_alloc_node+0x53/0x250
[  849.245046][T22231]  ? tomoyo_encode+0x2ad/0x570
[  849.249874][T22231]  __kmalloc+0xa7/0x240
[  849.254091][T22231]  tomoyo_encode+0x2ad/0x570
[  849.258765][T22231]  tomoyo_realpath_from_path+0x57c/0x5c0
[  849.264448][T22231]  ? tomoyo_domain+0xd6/0x120
[  849.269192][T22231]  tomoyo_path_number_perm+0x248/0x5e0
[  849.274684][T22231]  ? tomoyo_path_number_perm+0x217/0x5e0
[  849.280380][T22231]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  849.285876][T22231]  ? ksys_write+0x1d2/0x260
[  849.290443][T22231]  ? __fget_files+0x28/0x460
[  849.295081][T22231]  security_file_ioctl+0x70/0xa0
[  849.300061][T22231]  __se_sys_ioctl+0x48/0x170
[  849.304684][T22231]  do_syscall_64+0x55/0xb0
[  849.309136][T22231]  ? clear_bhb_loop+0x40/0x90
[  849.313844][T22231]  ? clear_bhb_loop+0x40/0x90
[  849.318546][T22231]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  849.324467][T22231] RIP: 0033:0x7f37dc59de99
[  849.328908][T22231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.348547][T22231] RSP: 002b:00007f37da7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  849.356987][T22231] RAX: ffffffffffffffda RBX: 00007f37dc826090 RCX: 00007f37dc59de99
[  849.364993][T22231] RDX: 0000200000000140 RSI: 00000000401054d5 RDI: 0000000000000007
[  849.372992][T22231] RBP: 00007f37da7d5090 R08: 0000000000000000 R09: 0000000000000000
[  849.381091][T22231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.389099][T22231] R13: 00007f37dc826128 R14: 00007f37dc826090 R15: 00007ffd77bf1558
[  849.397114][T22231]  </TASK>
[  849.427456][T22231] ERROR: Out of memory at tomoyo_realpath_from_path.
[  849.960462][T22252] netlink: 'syz.0.4819': attribute type 10 has an invalid length.
[  849.975712][T22252] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4819'.
[  850.051779][T22260] netlink: 'syz.2.4820': attribute type 29 has an invalid length.
[  850.274907][T22260] netlink: 'syz.2.4820': attribute type 29 has an invalid length.
[  850.321066][T22266] pimreg1: tun_chr_ioctl cmd 2147767517
[  850.446245][T22261] netlink: 'syz.3.4822': attribute type 10 has an invalid length.
[  850.509175][T22261] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4822'.
[  850.608156][T22261] batman_adv: batadv0: Adding interface: veth0_vlan
[  850.625567][T22261] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  850.764926][T22261] batman_adv: batadv0: Interface activated: veth0_vlan
[  850.891598][T22272] netlink: 'syz.1.4823': attribute type 1 has an invalid length.
[  850.915250][T22272] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4823'.
[  851.160110][T22285] FAULT_INJECTION: forcing a failure.
[  851.160110][T22285] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  851.185582][T22285] CPU: 0 PID: 22285 Comm: syz.2.4826 Not tainted syzkaller #0
[  851.193124][T22285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  851.203223][T22285] Call Trace:
[  851.206552][T22285]  <TASK>
[  851.209532][T22285]  dump_stack_lvl+0x18c/0x250
[  851.214280][T22285]  ? show_regs_print_info+0x20/0x20
[  851.219549][T22285]  ? load_image+0x420/0x420
[  851.224119][T22285]  ? __might_fault+0xaa/0x120
[  851.228855][T22285]  ? __lock_acquire+0x7d80/0x7d80
[  851.233947][T22285]  should_fail_ex+0x394/0x4c0
[  851.238702][T22285]  _copy_from_user+0x2f/0xe0
[  851.243357][T22285]  __tun_chr_ioctl+0x1034/0x2070
[  851.248361][T22285]  ? tun_flow_create+0x310/0x310
[  851.253385][T22285]  ? bpf_lsm_file_ioctl+0x9/0x10
[  851.258377][T22285]  ? security_file_ioctl+0x80/0xa0
[  851.263548][T22285]  ? tun_chr_poll+0x630/0x630
[  851.268288][T22285]  __se_sys_ioctl+0xfd/0x170
[  851.272951][T22285]  do_syscall_64+0x55/0xb0
[  851.277424][T22285]  ? clear_bhb_loop+0x40/0x90
[  851.282147][T22285]  ? clear_bhb_loop+0x40/0x90
[  851.286892][T22285]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  851.292821][T22285] RIP: 0033:0x7f172139de99
[  851.297272][T22285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  851.316915][T22285] RSP: 002b:00007f1722234028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  851.325361][T22285] RAX: ffffffffffffffda RBX: 00007f1721626090 RCX: 00007f172139de99
[  851.333368][T22285] RDX: 0000200000000140 RSI: 00000000401054d5 RDI: 0000000000000007
[  851.341368][T22285] RBP: 00007f1722234090 R08: 0000000000000000 R09: 0000000000000000
[  851.349371][T22285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  851.357388][T22285] R13: 00007f1721626128 R14: 00007f1721626090 R15: 00007fffbe550fb8
[  851.365416][T22285]  </TASK>
[  852.530610][T22326] FAULT_INJECTION: forcing a failure.
[  852.530610][T22326] name failslab, interval 1, probability 0, space 0, times 0
[  852.548429][T22326] CPU: 1 PID: 22326 Comm: syz.1.4840 Not tainted syzkaller #0
[  852.555972][T22326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  852.566199][T22326] Call Trace:
[  852.569524][T22326]  <TASK>
[  852.572505][T22326]  dump_stack_lvl+0x18c/0x250
[  852.577240][T22326]  ? show_regs_print_info+0x20/0x20
[  852.582491][T22326]  ? load_image+0x420/0x420
[  852.587073][T22326]  ? __lock_acquire+0x7d80/0x7d80
[  852.592162][T22326]  should_fail_ex+0x394/0x4c0
[  852.596901][T22326]  should_failslab+0x9/0x20
[  852.601461][T22326]  slab_pre_alloc_hook+0x59/0x300
[  852.606682][T22326]  ? bpf_prog_alloc+0x3d/0x1a0
[  852.611505][T22326]  ? __get_filter+0xf2/0x400
[  852.616182][T22326]  ? sk_attach_filter+0x24/0x140
[  852.621272][T22326]  kmem_cache_alloc_node+0x5e/0x310
[  852.626534][T22326]  ? alloc_vmap_area+0x1b4/0x1e50
[  852.631613][T22326]  alloc_vmap_area+0x1b4/0x1e50
[  852.636643][T22326]  ? vm_map_ram+0xcf0/0xcf0
[  852.641213][T22326]  ? rcu_is_watching+0x15/0xb0
[  852.646051][T22326]  __get_vm_area_node+0x162/0x370
[  852.651149][T22326]  __vmalloc_node_range+0x36f/0x1320
[  852.656511][T22326]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  852.662131][T22326]  ? trace_call_bpf+0xc3/0x6c0
[  852.666970][T22326]  ? perf_trace_lock+0xfc/0x3b0
[  852.671882][T22326]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  852.677771][T22326]  ? free_vm_area+0x50/0x50
[  852.682335][T22326]  ? mark_lock+0x94/0x320
[  852.686729][T22326]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  852.692332][T22326]  __vmalloc+0x7a/0x90
[  852.696455][T22326]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  852.702064][T22326]  bpf_prog_alloc_no_stats+0x46/0x430
[  852.707508][T22326]  bpf_prog_alloc+0x3d/0x1a0
[  852.712170][T22326]  __get_filter+0xf2/0x400
[  852.716648][T22326]  ? _local_bh_enable+0xa0/0xa0
[  852.721655][T22326]  sk_attach_filter+0x24/0x140
[  852.726480][T22326]  tun_attach_filter+0x170/0x270
[  852.731480][T22326]  __tun_chr_ioctl+0x17ce/0x2070
[  852.736499][T22326]  ? tun_flow_create+0x310/0x310
[  852.741576][T22326]  ? bpf_lsm_file_ioctl+0x9/0x10
[  852.746570][T22326]  ? security_file_ioctl+0x80/0xa0
[  852.751747][T22326]  ? tun_chr_poll+0x630/0x630
[  852.756472][T22326]  __se_sys_ioctl+0xfd/0x170
[  852.761129][T22326]  do_syscall_64+0x55/0xb0
[  852.765635][T22326]  ? clear_bhb_loop+0x40/0x90
[  852.770425][T22326]  ? clear_bhb_loop+0x40/0x90
[  852.775160][T22326]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  852.781141][T22326] RIP: 0033:0x7f4366d9de99
[  852.785606][T22326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  852.805282][T22326] RSP: 002b:00007f4367c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  852.813756][T22326] RAX: ffffffffffffffda RBX: 00007f4367026090 RCX: 00007f4366d9de99
[  852.821787][T22326] RDX: 0000200000000140 RSI: 00000000401054d5 RDI: 0000000000000007
[  852.829818][T22326] RBP: 00007f4367c98090 R08: 0000000000000000 R09: 0000000000000000
[  852.837841][T22326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  852.845857][T22326] R13: 00007f4367026128 R14: 00007f4367026090 R15: 00007ffd0a279d78
[  852.853873][T22326]  </TASK>
[  852.874420][T22326] syz.1.4840: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1
[  852.893566][T22326] CPU: 1 PID: 22326 Comm: syz.1.4840 Not tainted syzkaller #0
[  852.901112][T22326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  852.911219][T22326] Call Trace:
[  852.914546][T22326]  <TASK>
[  852.917521][T22326]  dump_stack_lvl+0x18c/0x250
[  852.922260][T22326]  ? show_regs_print_info+0x20/0x20
[  852.927510][T22326]  ? load_image+0x420/0x420
[  852.932088][T22326]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  852.938561][T22326]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[  852.945129][T22326]  warn_alloc+0x246/0x340
[  852.949512][T22326]  ? slab_free_freelist_hook+0x130/0x1a0
[  852.955250][T22326]  ? zone_watermark_ok_safe+0x230/0x230
[  852.960849][T22326]  ? __get_vm_area_node+0x17b/0x370
[  852.966122][T22326]  ? __get_vm_area_node+0x17b/0x370
[  852.971388][T22326]  __vmalloc_node_range+0x394/0x1320
[  852.976738][T22326]  ? trace_call_bpf+0xc3/0x6c0
[  852.981573][T22326]  ? perf_trace_lock+0xfc/0x3b0
[  852.986484][T22326]  ? perf_trace_run_bpf_submit+0x125/0x1c0
[  852.992349][T22326]  ? free_vm_area+0x50/0x50
[  852.996969][T22326]  ? mark_lock+0x94/0x320
[  853.001361][T22326]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  853.006959][T22326]  __vmalloc+0x7a/0x90
[  853.011115][T22326]  ? bpf_prog_alloc_no_stats+0x46/0x430
[  853.016718][T22326]  bpf_prog_alloc_no_stats+0x46/0x430
[  853.022152][T22326]  bpf_prog_alloc+0x3d/0x1a0
[  853.026792][T22326]  __get_filter+0xf2/0x400
[  853.031266][T22326]  ? _local_bh_enable+0xa0/0xa0
[  853.036172][T22326]  sk_attach_filter+0x24/0x140
[  853.040998][T22326]  tun_attach_filter+0x170/0x270
[  853.045999][T22326]  __tun_chr_ioctl+0x17ce/0x2070
[  853.051003][T22326]  ? tun_flow_create+0x310/0x310
[  853.056064][T22326]  ? bpf_lsm_file_ioctl+0x9/0x10
[  853.061051][T22326]  ? security_file_ioctl+0x80/0xa0
[  853.066216][T22326]  ? tun_chr_poll+0x630/0x630
[  853.070949][T22326]  __se_sys_ioctl+0xfd/0x170
[  853.075604][T22326]  do_syscall_64+0x55/0xb0
[  853.080081][T22326]  ? clear_bhb_loop+0x40/0x90
[  853.084806][T22326]  ? clear_bhb_loop+0x40/0x90
[  853.089530][T22326]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  853.095467][T22326] RIP: 0033:0x7f4366d9de99
[  853.099923][T22326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  853.119572][T22326] RSP: 002b:00007f4367c98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  853.128051][T22326] RAX: ffffffffffffffda RBX: 00007f4367026090 RCX: 00007f4366d9de99
[  853.136069][T22326] RDX: 0000200000000140 RSI: 00000000401054d5 RDI: 0000000000000007
[  853.144087][T22326] RBP: 00007f4367c98090 R08: 0000000000000000 R09: 0000000000000000
[  853.152101][T22326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  853.160114][T22326] R13: 00007f4367026128 R14: 00007f4367026090 R15: 00007ffd0a279d78
[  853.168155][T22326]  </TASK>
[  853.193882][T22326] Mem-Info:
[  853.200346][T22326] active_anon:11065 inactive_anon:0 isolated_anon:0
[  853.200346][T22326]  active_file:18292 inactive_file:40261 isolated_file:0
[  853.200346][T22326]  unevictable:768 dirty:460 writeback:0
[  853.200346][T22326]  slab_reclaimable:11100 slab_unreclaimable:95344
[  853.200346][T22326]  mapped:25776 shmem:1426 pagetables:564
[  853.200346][T22326]  sec_pagetables:0 bounce:0
[  853.200346][T22326]  kernel_misc_reclaimable:0
[  853.200346][T22326]  free:1335877 free_pcp:10365 free_cma:0
[  853.249413][T22326] Node 0 active_anon:44260kB inactive_anon:0kB active_file:73168kB inactive_file:160844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103104kB dirty:1836kB writeback:0kB shmem:4168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12196kB pagetables:2256kB sec_pagetables:0kB all_unreclaimable? no
[  853.291620][T22326] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  853.329894][T22326] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  853.361908][T22326] lowmem_reserve[]: 0 2521 2522 2522 2522
[  853.368007][T22326] Node 0 DMA32 free:1430464kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:44124kB inactive_anon:0kB active_file:73168kB inactive_file:160016kB unevictable:1536kB writepending:1832kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:28132kB local_pcp:19052kB free_cma:0kB
[  853.407967][T22326] lowmem_reserve[]: 0 0 0 0 0
[  853.412810][T22326] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  853.445728][T22326] lowmem_reserve[]: 0 0 0 0 0
[  853.450551][T22326] Node 1 Normal free:3897676kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13728kB local_pcp:1568kB free_cma:0kB
[  853.484075][T22326] lowmem_reserve[]: 0 0 0 0 0
[  853.488914][T22326] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  853.508275][T22326] Node 0 DMA32: 2*4kB (UM) 1419*8kB (UME) 1282*16kB (UM) 760*32kB (UME) 1319*64kB (UME) 1141*128kB (UME) 276*256kB (UME) 56*512kB (UME) 8*1024kB (UM) 10*2048kB (UME) 248*4096kB (UM) = 1430464kB
[  853.531611][T22326] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  853.543817][T22326] Node 1 Normal: 253*4kB (UME) 57*8kB (UME) 43*16kB (UME) 207*32kB (UME) 52*64kB (UME) 8*128kB (UE) 2*256kB (UE) 2*512kB (ME) 0*1024kB 2*2048kB (UE) 947*4096kB (M) = 3897676kB
[  853.562253][T22326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  853.571939][T22326] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  853.582475][T22326] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  853.592129][T22326] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  853.601562][T22326] 59979 total pagecache pages
[  853.606328][T22326] 0 pages in swap cache
[  853.610554][T22326] Free swap  = 124996kB
[  853.616033][T22326] Total swap = 124996kB
[  853.620236][T22326] 2097051 pages RAM
[  853.624098][T22326] 0 pages HighMem/MovableOnly
[  853.628851][T22326] 416955 pages reserved
[  853.633047][T22326] 0 pages cma reserved
[  853.795505][T22342] netlink: 'syz.1.4844': attribute type 10 has an invalid length.
[  854.016207][T22342] team0: Port device wlan1 added
[  854.033394][T22341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  854.217483][T22351] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.4845'.
[  854.263769][T22351] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.4845'.
[  854.688061][T22379] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  854.694591][T22379] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  854.741470][T22379] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4855'.
[  854.806656][T22382] netlink: 763 bytes leftover after parsing attributes in process `syz.0.4856'.
[  855.052321][T22387] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4858'.
[  855.119188][T22387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  855.814311][T22420] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4868'.
[  856.227447][T22438] netlink: 'syz.0.4875': attribute type 19 has an invalid length.
[  856.509999][T22456] netlink: 'syz.1.4880': attribute type 10 has an invalid length.
[  856.532567][T22456] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.565470][T22456] bridge_slave_1: left allmulticast mode
[  856.572065][T22456] bridge_slave_1: left promiscuous mode
[  856.582404][T22456] bridge0: port 2(bridge_slave_1) entered disabled state
[  856.625074][T22456] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  856.671235][T22466] netlink: 'syz.2.4883': attribute type 10 has an invalid length.
[  856.714663][T22466] team0: Device hsr_slave_0 failed to register rx_handler
[  856.836326][T22468] netlink: 'syz.3.4881': attribute type 39 has an invalid length.
[  856.844302][T22473] tap0: tun_chr_ioctl cmd 2148553947
[  857.888893][T22490] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4889'.
[  857.905076][T22490] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  857.913768][T22490] openvswitch: netlink: Message has 1 unknown bytes.
[  858.197107][T22499] netlink: 'syz.1.4892': attribute type 10 has an invalid length.
[  858.248831][T22502] netlink: 'syz.0.4894': attribute type 29 has an invalid length.
[  858.314628][T22502] netlink: 'syz.0.4894': attribute type 29 has an invalid length.
[  858.369468][T22509] netlink: 'syz.0.4894': attribute type 29 has an invalid length.
[  858.415611][T22506] netlink: 'syz.0.4894': attribute type 29 has an invalid length.
[  858.439651][T22502] netlink: 'syz.0.4894': attribute type 29 has an invalid length.
[  858.890072][T22516] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode
[  858.902168][T22516] mac80211_hwsim hwsim74 wlan0: entered allmulticast mode
[  859.247412][T22529] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.4902'.
[  859.272043][T22529] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4902'.
[  862.422724][T22552] validate_nla: 3 callbacks suppressed
[  862.422740][T22552] netlink: 'syz.0.4911': attribute type 1 has an invalid length.
[  862.441121][T22552] netlink: 'syz.0.4911': attribute type 2 has an invalid length.
[  862.449418][T22552] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4911'.
[  862.677659][ T5082] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30
[  862.689379][ T5082] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff
[  862.876057][T22569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4914'.
[  862.915391][T22569] bridge_slave_0: entered allmulticast mode
[  865.227239][T22590] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4922'.
[  865.782996][T22621] netlink: 'syz.2.4931': attribute type 21 has an invalid length.
[  865.791660][T22621] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.4931'.
[  865.801620][T22622] netlink: 'syz.2.4931': attribute type 21 has an invalid length.
[  865.813340][T22622] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.4931'.
[  865.829117][T22621] netlink: 'syz.2.4931': attribute type 29 has an invalid length.
[  865.840139][T22621] netlink: 'syz.2.4931': attribute type 29 has an invalid length.
[  865.852082][T22621] netlink: 'syz.2.4931': attribute type 29 has an invalid length.
[  865.861189][T22621] netlink: 'syz.2.4931': attribute type 29 has an invalid length.
[  879.419724][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  879.426224][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  881.605760][ T5082] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  881.615630][ T5082] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  881.623900][ T5082] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  881.632633][ T5082] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  881.640985][ T5082] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  881.648554][ T5082] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  883.268706][ T5082] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  883.279743][ T5082] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  883.288538][ T5082] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  883.306203][ T5082] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  883.314035][ T5082] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  883.321649][ T5082] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  883.375399][T14581] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  883.384455][T14581] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  883.396526][T14581] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  883.406403][T14581] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  883.414211][T14581] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  883.429838][T14581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  883.765194][T14581] Bluetooth: hci4: command tx timeout
[  885.364984][T14581] Bluetooth: hci5: command tx timeout
[  885.525097][T14581] Bluetooth: hci6: command tx timeout
[  885.834997][T14581] Bluetooth: hci4: command tx timeout
[  887.444992][T14581] Bluetooth: hci5: command tx timeout
[  887.609689][T14581] Bluetooth: hci6: command tx timeout
[  887.924984][T14581] Bluetooth: hci4: command tx timeout
[  889.524950][T14581] Bluetooth: hci5: command tx timeout
[  889.689738][T14581] Bluetooth: hci6: command tx timeout
[  889.995113][T14581] Bluetooth: hci4: command tx timeout
[  891.604964][T14581] Bluetooth: hci5: command tx timeout
[  891.755086][T14581] Bluetooth: hci6: command tx timeout
[  898.165609][T21972] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  898.176034][T21972] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  898.183871][T21972] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  898.192640][T21972] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  898.200553][T21972] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  898.208005][T21972] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  900.245227][T21972] Bluetooth: hci7: command tx timeout
[  902.314966][T21972] Bluetooth: hci7: command tx timeout
[  904.394819][T21972] Bluetooth: hci7: command tx timeout
[  906.488118][T21972] Bluetooth: hci7: command tx timeout
[  942.246812][T22679] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  942.260547][T22679] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  942.268835][T22679] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  942.277835][T22679] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  942.285921][T22679] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  942.295061][T22679] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  943.175360][T21972] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  943.184395][T21972] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  943.196113][T21972] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  943.206648][T21972] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  943.219624][T21972] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  943.228219][T21972] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  943.929789][T21972] Bluetooth: hci2: command 0x0406 tx timeout
[  944.235381][T22679] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  944.244305][T22679] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  944.257312][T22679] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  944.265948][T22679] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  944.273746][T22679] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  944.281761][T22679] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  944.395025][T22679] Bluetooth: hci8: command tx timeout
[  945.274895][T22679] Bluetooth: hci9: command tx timeout
[  946.475031][T22679] Bluetooth: hci8: command tx timeout
[  947.354897][T22679] Bluetooth: hci9: command tx timeout
[  948.555010][T22679] Bluetooth: hci8: command tx timeout
[  949.435037][T22679] Bluetooth: hci9: command tx timeout
[  950.635086][T22679] Bluetooth: hci8: command tx timeout
[  951.524994][T22679] Bluetooth: hci9: command tx timeout
[  958.847152][T22691] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  958.861036][T22691] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  958.869392][T22691] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  958.878508][T22691] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  958.887067][T22691] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  958.894553][T22691] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  965.133076][ T1282] ieee802154 phy0 wpan0: encryption failed: -22
[  965.139498][ T1282] ieee802154 phy1 wpan1: encryption failed: -22
[  967.454802][T22679] Bluetooth: hci0: command 0x0406 tx timeout
[  971.314739][    C0] rcu: INFO: rcu_preempt self-detected stall on CPU
[  971.321507][    C0] rcu: 	0-....: (1 GPs behind) idle=2f94/1/0x4000000000000000 softirq=84842/84843 fqs=4206
[  971.332608][    C0] rcu: 	         hardirqs   softirqs   csw/system
[  971.339030][    C0] rcu: 	 number:  1357625          0            0
[  971.345450][    C0] rcu: 	cputime:    16830      35649           85   ==> 52480(ms)
[  971.353251][    C0] rcu: 	(t=10500 jiffies g=118317 q=2008 ncpus=2)
[  971.359687][    C0] CPU: 0 PID: 22638 Comm: syz.3.4937 Not tainted syzkaller #0
[  971.367169][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  971.377251][    C0] RIP: 0010:kasan_check_range+0x16/0x290
[  971.382914][    C0] Code: ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 41 56 41 55 <41> 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 f9 49 c1 e9
[  971.402517][    C0] RSP: 0018:ffffc90000006cb0 EFLAGS: 00000202
[  971.408588][    C0] RAX: ffffc90000007101 RBX: 0000000000000010 RCX: ffffffff813bb9f8
[  971.416559][    C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90000006e18
[  971.424649][    C0] RBP: 0000000000000000 R08: ffff88807d5c0000 R09: 0000000000000003
[  971.432621][    C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc90000006f10
[  971.440589][    C0] R13: ffffc90000006dc8 R14: ffffc90000006e18 R15: dffffc0000000000
[  971.448562][    C0] FS:  00007f37da7f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  971.457581][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  971.464274][    C0] CR2: 0000001b32923ffc CR3: 0000000060820000 CR4: 00000000003506f0
[  971.472264][    C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300
[  971.480236][    C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  971.488211][    C0] Call Trace:
[  971.491494][    C0]  <IRQ>
[  971.494348][    C0]  __asan_memset+0x22/0x40
[  971.498781][    C0]  ? kasan_save_free_info+0x28/0x40
[  971.503986][    C0]  unwind_next_frame+0x1628/0x2990
[  971.509139][    C0]  ? kasan_set_track+0x4e/0x70
[  971.513930][    C0]  ? kasan_set_track+0x4e/0x70
[  971.518699][    C0]  ? stack_trace_save+0x100/0x100
[  971.523735][    C0]  arch_stack_walk+0x144/0x190
[  971.528505][    C0]  ? kasan_save_free_info+0x28/0x40
[  971.533714][    C0]  stack_trace_save+0xaa/0x100
[  971.538483][    C0]  ? stack_trace_snprint+0xf0/0xf0
[  971.543604][    C0]  ? sched_clock_cpu+0x75/0x430
[  971.548467][    C0]  kasan_set_track+0x4e/0x70
[  971.553060][    C0]  ? kasan_set_track+0x4e/0x70
[  971.557852][    C0]  ? __kmem_cache_free+0xba/0x1f0
[  971.562889][    C0]  kasan_save_free_info+0x28/0x40
[  971.567915][    C0]  ____kasan_slab_free+0x126/0x1f0
[  971.573044][    C0]  slab_free_freelist_hook+0x130/0x1a0
[  971.578505][    C0]  ? skb_release_data+0x609/0x7f0
[  971.583575][    C0]  __kmem_cache_free+0xba/0x1f0
[  971.588438][    C0]  skb_release_data+0x609/0x7f0
[  971.593299][    C0]  kfree_skb_reason+0x10e/0x170
[  971.598148][    C0]  ? ip6_negative_advice+0x310/0x310
[  971.603438][    C0]  xfrmi_xmit+0xd26/0x1780
[  971.607869][    C0]  ? xfrmi_dev_uninit+0x200/0x200
[  971.612902][    C0]  ? dev_queue_xmit_nit+0xa76/0xba0
[  971.618106][    C0]  ? dev_queue_xmit_nit+0x2d/0xba0
[  971.623222][    C0]  dev_hard_start_xmit+0x269/0x790
[  971.628365][    C0]  ? __dev_queue_xmit+0x275/0x3630
[  971.633480][    C0]  __dev_queue_xmit+0x198c/0x3630
[  971.638527][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  971.643734][    C0]  ? __dev_queue_xmit+0x275/0x3630
[  971.648949][    C0]  ? read_seqbegin+0x184/0x250
[  971.653722][    C0]  ? read_seqbegin+0x1b6/0x250
[  971.658511][    C0]  ? netdev_core_pick_tx+0x370/0x370
[  971.663843][    C0]  ? neigh_connected_output+0x3b7/0x460
[  971.669407][    C0]  ip6_finish_output2+0xe2e/0x1620
[  971.674528][    C0]  ? ip6_finish_output2+0x642/0x1620
[  971.679823][    C0]  ? nf_hook+0x390/0x390
[  971.684073][    C0]  ? ip6_mtu+0x321/0x3f0
[  971.688344][    C0]  ? ip6_finish_output+0x567/0x7f0
[  971.693470][    C0]  ndisc_send_skb+0xbb9/0x1480
[  971.698295][    C0]  ? ndisc_send_skb+0x201/0x1480
[  971.703236][    C0]  ? ndisc_mc_map+0x680/0x680
[  971.707915][    C0]  ? skb_dst+0xd0/0xd0
[  971.711979][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  971.718141][    C0]  ? ipv6_get_lladdr+0x378/0x3e0
[  971.723091][    C0]  ? ipv6_get_lladdr+0x2b/0x3e0
[  971.727954][    C0]  addrconf_rs_timer+0x36b/0x640
[  971.732896][    C0]  ? addrconf_disable_policy_idev+0x480/0x480
[  971.738971][    C0]  call_timer_fn+0x189/0x540
[  971.743592][    C0]  ? addrconf_disable_policy_idev+0x480/0x480
[  971.749664][    C0]  ? call_timer_fn+0xd2/0x540
[  971.754345][    C0]  ? __run_timers+0x810/0x810
[  971.759026][    C0]  ? addrconf_disable_policy_idev+0x480/0x480
[  971.765094][    C0]  ? addrconf_disable_policy_idev+0x480/0x480
[  971.771162][    C0]  __run_timers+0x570/0x810
[  971.775697][    C0]  ? detach_timer+0x2b0/0x2b0
[  971.780419][    C0]  run_timer_softirq+0x67/0xf0
[  971.785187][    C0]  handle_softirqs+0x27d/0x820
[  971.789973][    C0]  ? read_tsc+0x9/0x20
[  971.794090][    C0]  ? ktime_get+0x24b/0x280
[  971.798528][    C0]  ? __irq_exit_rcu+0xd3/0x190
[  971.803311][    C0]  ? do_softirq+0x1a0/0x1a0
[  971.807827][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  971.813044][    C0]  __irq_exit_rcu+0xd3/0x190
[  971.817645][    C0]  ? irq_exit_rcu+0x20/0x20
[  971.822164][    C0]  irq_exit_rcu+0x9/0x20
[  971.826409][    C0]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  971.832047][    C0]  </IRQ>
[  971.834985][    C0]  <TASK>
[  971.837936][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  971.843921][    C0] RIP: 0010:generic_exec_single+0x477/0x4e0
[  971.849829][    C0] Code: 75 11 e8 0c 0d 0b 00 48 85 db 75 16 e8 02 0d 0b 00 eb 15 e8 fb 0c 0b 00 e8 a6 6d 10 09 48 85 db 74 ea e8 ec 0c 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08
[  971.869436][    C0] RSP: 0018:ffffc9000ffd7a00 EFLAGS: 00000246
[  971.875509][    C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000
[  971.883524][    C0] RDX: ffffc9000bac9000 RSI: 0000000000006198 RDI: 0000000000006199
[  971.891507][    C0] RBP: ffffc9000ffd7ad0 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf
[  971.899541][    C0] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: 1ffff92001ffaf44
[  971.907518][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001ffaf65
[  971.915506][    C0]  ? event_function+0x300/0x300
[  971.920369][    C0]  ? smp_call_function_single+0x5a0/0x5a0
[  971.926090][    C0]  ? percpu_counter_add_batch+0x1f4/0x2a0
[  971.931812][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  971.937020][    C0]  ? smp_call_function_single+0xb0/0x5a0
[  971.942657][    C0]  smp_call_function_single+0x36d/0x5a0
[  971.948205][    C0]  ? event_function+0x300/0x300
[  971.953067][    C0]  ? flush_smp_call_function_queue+0x250/0x250
[  971.959262][    C0]  ? event_function+0x300/0x300
[  971.964129][    C0]  perf_install_in_context+0x5bb/0x920
[  971.969606][    C0]  ? alloc_file_pseudo+0x1ae/0x210
[  971.974740][    C0]  ? exclusive_event_installable+0x2c0/0x2c0
[  971.980735][    C0]  ? add_event_to_ctx+0x1170/0x1170
[  971.985945][    C0]  ? anon_inode_getfile+0x109/0x1a0
[  971.991148][    C0]  ? perf_event__header_size+0x165/0x220
[  971.996786][    C0]  __se_sys_perf_event_open+0x1841/0x1c60
[  972.002512][    C0]  ? __x64_sys_perf_event_open+0xc0/0xc0
[  972.008167][    C0]  ? lock_chain_count+0x20/0x20
[  972.013032][    C0]  ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[  972.019031][    C0]  ? lockdep_hardirqs_on+0x98/0x150
[  972.024232][    C0]  ? __x64_sys_perf_event_open+0x20/0xc0
[  972.029878][    C0]  do_syscall_64+0x55/0xb0
[  972.034302][    C0]  ? clear_bhb_loop+0x40/0x90
[  972.039007][    C0]  ? clear_bhb_loop+0x40/0x90
[  972.043706][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  972.049602][    C0] RIP: 0033:0x7f37dc59de99
[  972.054024][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  972.073634][    C0] RSP: 002b:00007f37da7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a
[  972.082054][    C0] RAX: ffffffffffffffda RBX: 00007f37dc825fa0 RCX: 00007f37dc59de99
[  972.090030][    C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140
[  972.098000][    C0] RBP: 00007f37dc633eaf R08: 0000000000000002 R09: 0000000000000000
[  972.105985][    C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[  972.113966][    C0] R13: 00007f37dc826038 R14: 00007f37dc825fa0 R15: 00007ffd77bf1558
[  972.121952][    C0]  </TASK>